DialXS Adware

Removing DialXS
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

How to detect DialXS:

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{841a9192-5690-11d4-a258-0040954a01be}
HKEY_CLASSES_ROOT\clsid\{9b4aa442-9ebf-11d5-8c11-0050da4957f5}

Removing DialXS:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Removing RemoteHAK Backdoor
Pigeon.EQF Trojan Removal instruction
TrojanDropper.Win32.Small.cy Trojan Removal instruction

TIB.Browser Trojan

Removing TIB.Browser
Categories: Trojan,Adware
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

---

TIB.Browser Also known as:

[Other]TROJ_PORNDIAL.BP

---

Visible Symptoms:
Files in system folders:
[%PROFILE%]\desktop\sexcam.lnk
[%PROFILE%]\start menu\sexcam.lnk
[%WINDOWS%]\desktop\sexxx.lnk
[%WINDOWS%]\start menu\sexxxl.lnk
[%PROFILE%]\desktop\sexcam.lnk
[%PROFILE%]\start menu\sexcam.lnk
[%WINDOWS%]\desktop\sexxx.lnk
[%WINDOWS%]\start menu\sexxxl.lnk

How to detect TIB.Browser:

Files:
[%PROFILE%]\desktop\sexcam.lnk
[%PROFILE%]\start menu\sexcam.lnk
[%WINDOWS%]\desktop\sexxx.lnk
[%WINDOWS%]\start menu\sexxxl.lnk
[%PROFILE%]\desktop\sexcam.lnk
[%PROFILE%]\start menu\sexcam.lnk
[%WINDOWS%]\desktop\sexxx.lnk
[%WINDOWS%]\start menu\sexxxl.lnk

Folders:
[%PROGRAM_FILES%]\websiteviewer

Registry Keys:
HKEY_CURRENT_USER\software\websiteviewer

Removing TIB.Browser:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Web.Serve RAT Removal instruction
Pass Trojan Symptoms
Removing UltraKeyboard Spyware
ISTbar.CSearch Hijacker Cleaner
Hatchet.Remote RAT Cleaner

AdwarePro Ransomware

Removing AdwarePro
Categories: Ransomware
A cryptovirus, cryptotrojan or cryptoworm is a type of
malware that encrypts the data belonging to an individual on a computer,
demanding a ransom for its restoration.

The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.

If the victim opens/executes the attachment, the program encrypts
a number of files on the victim's computer. A ransom note is then left behind for the victim.

The victim will be unable to open the encrypted files without the correct decryption key.
Once the ransom demanded in the ransom note is paid, the cracker may (or may not)
send the decryption key, enabling decryption of the "kidnapped" files.

---

Visible Symptoms:
Files in system folders:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AdwarePro.lnk
[%COMMON_DESKTOPDIRECTORY%]\AdwarePro.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AdwarePro.lnk
[%COMMON_DESKTOPDIRECTORY%]\AdwarePro.lnk

How to detect AdwarePro:

Files:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AdwarePro.lnk
[%COMMON_DESKTOPDIRECTORY%]\AdwarePro.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AdwarePro.lnk
[%COMMON_DESKTOPDIRECTORY%]\AdwarePro.lnk

Folders:
[%APPDATA%]\'AdwarePro'
[%COMMON_PROGRAMS%]\AdwarePro
[%PROGRAM_FILES%]\AdwarePro

Registry Keys:
HKEY_CURRENT_USER\software\'adwarepro'
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\adwarepro_is1

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing AdwarePro:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Remove IRC.IRCKill DoS
Remove IRC.Client.CHOCOA.Version.0beta7R.for.Windows98 DoS
Rbot.Oz Worm Symptoms

Networking Adware

Removing Networking
Categories: Adware,Hijacker
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

A desktop hijacker replaces the desktop wallpaper with advertising
for products and services on the desktop.

---

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\mysetp.exe
[%PROFILE_TEMP%]\p2psetup.exe
[%PROFILE_TEMP%]\wis32.exe
[%SYSTEM%]\p2p networking v126.cpl
[%SYSTEM%]\P2P Networking\MARSHAL.DLL
[%SYSTEM%]\P2P Networking\MARSHAL12.DLL
[%SYSTEM%]\P2P Networking\P2P Networking.exe
[%WINDOWS%]\Downloaded Program Files\WebP2PInstaller.dll
[%PROFILE%]\recent\p2psetup.exe.lnk
[%PROGRAM_FILES%]\system32\p2p networking\p2p networking.exe
[%WINDOWS%]\downloaded program files\webp2pinstaller.dll
[%PROFILE_TEMP%]\mysetp.exe
[%PROFILE_TEMP%]\p2psetup.exe
[%PROFILE_TEMP%]\wis32.exe
[%SYSTEM%]\p2p networking v126.cpl
[%SYSTEM%]\P2P Networking\MARSHAL.DLL
[%SYSTEM%]\P2P Networking\MARSHAL12.DLL
[%SYSTEM%]\P2P Networking\P2P Networking.exe
[%WINDOWS%]\Downloaded Program Files\WebP2PInstaller.dll
[%PROFILE%]\recent\p2psetup.exe.lnk
[%PROGRAM_FILES%]\system32\p2p networking\p2p networking.exe
[%WINDOWS%]\downloaded program files\webp2pinstaller.dll

How to detect Networking:

Files:
[%PROFILE_TEMP%]\mysetp.exe
[%PROFILE_TEMP%]\p2psetup.exe
[%PROFILE_TEMP%]\wis32.exe
[%SYSTEM%]\p2p networking v126.cpl
[%SYSTEM%]\P2P Networking\MARSHAL.DLL
[%SYSTEM%]\P2P Networking\MARSHAL12.DLL
[%SYSTEM%]\P2P Networking\P2P Networking.exe
[%WINDOWS%]\Downloaded Program Files\WebP2PInstaller.dll
[%PROFILE%]\recent\p2psetup.exe.lnk
[%PROGRAM_FILES%]\system32\p2p networking\p2p networking.exe
[%WINDOWS%]\downloaded program files\webp2pinstaller.dll
[%PROFILE_TEMP%]\mysetp.exe
[%PROFILE_TEMP%]\p2psetup.exe
[%PROFILE_TEMP%]\wis32.exe
[%SYSTEM%]\p2p networking v126.cpl
[%SYSTEM%]\P2P Networking\MARSHAL.DLL
[%SYSTEM%]\P2P Networking\MARSHAL12.DLL
[%SYSTEM%]\P2P Networking\P2P Networking.exe
[%WINDOWS%]\Downloaded Program Files\WebP2PInstaller.dll
[%PROFILE%]\recent\p2psetup.exe.lnk
[%PROGRAM_FILES%]\system32\p2p networking\p2p networking.exe
[%WINDOWS%]\downloaded program files\webp2pinstaller.dll

Folders:
[%PROGRAM_FILES%]\need2find
[%WINDOWS%]\system\p2p networking

Registry Keys:
HKEY_CURRENT_USER\software\p2p networking
HKEY_LOCAL_MACHINE\software\classes\clsid\{1d6711c8-7154-40bb-8380-3dea45b69cbf}
HKEY_LOCAL_MACHINE\software\classes\clsid\{cc7a6223-3759-4075-8cea-971f5cfc0ed2}
HKEY_LOCAL_MACHINE\software\classes\interface\{c91e8926-d4be-4685-99f4-0d996b96bac0}
HKEY_LOCAL_MACHINE\software\classes\typelib\{f720b40f-3a38-4b22-b30d-dcf095d42498}

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Networking:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Removing TX Adware
Win32.Spy.VB Spyware Removal
WhitehouseCn DoS Removal instruction
Removing Win32.Winet!Trojan Adware
VidStream RAT Cleaner

FastSeeker BHO

Removing FastSeeker
Categories: BHO,Toolbar
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

---

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\fastseekertoolbar.dll
[%WINDOWS%]\system\fastseekertoolbar.dll
[%SYSTEM%]\fastseekertoolbar.dll
[%WINDOWS%]\system\fastseekertoolbar.dll

How to detect FastSeeker:

Files:
[%SYSTEM%]\fastseekertoolbar.dll
[%WINDOWS%]\system\fastseekertoolbar.dll
[%SYSTEM%]\fastseekertoolbar.dll
[%WINDOWS%]\system\fastseekertoolbar.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{4cc0faf8-6048-421c-9fe2-261a9ece5f80}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4cc0faf8-6048-421c-9fe2-261a9ece5f80}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar

Removing FastSeeker:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Removing Bancos.HPN Trojan

Sinnum Trojan

Removing Sinnum
Categories: Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

Sinnum Also known as:

[Kaspersky]Trojan-Proxy.Win32.Lager.dp;
[Other]Win32/Sinnum.B,Trojan.Peacomm

---

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\lnwin.exe
[%SYSTEM%]\lnwin.exe

How to detect Sinnum:

Files:
[%SYSTEM%]\lnwin.exe
[%SYSTEM%]\lnwin.exe

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Sinnum:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
VB.cc Adware Symptoms
IstBar.fn Downloader Removal
Bancos.HXO Trojan Symptoms
Remove Delf.KR Trojan
Remove Appkiller.src Trojan

Seecha Adware

Removing Seecha
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

---

Seecha Also known as:

[Kaspersky]Adware.Win32.SeeCha.b,Adware.Win32.Seecha,Adware.Win32.SeeCha.a;
[Other]Adware/Seecha

---

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\sctongji04.dll
[%SYSTEM%]\sctongji04.dll

How to detect Seecha:

Files:
[%SYSTEM%]\sctongji04.dll
[%SYSTEM%]\sctongji04.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{5531fd0a-6293-46b2-9075-c6845576f522}
HKEY_CLASSES_ROOT\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{5592d97a-b649-4606-b7dc-470bfe2a3036}
HKEY_CLASSES_ROOT\clsid\{5531fd0a-6293-46b2-9075-c6845576f522}
HKEY_CLASSES_ROOT\clsid\{5592d97a-b649-4606-b7dc-470bfe2a3036}
HKEY_CURRENT_USER\software\seecha

Removing Seecha:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Pigeon.EPP Trojan Cleaner