NerTe Backdoor

NerTe malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.Nerte.604,Backdoor.Nerte.703,Backdoor.Nerte.730,Backdoor.Nerte.74,Backdoor.Nerte.75,Backdoor.Nerte.77,Backdoor.Nerte.781,Backdoor.Nerte.780;
[McAfee]BackDoor-SG,BackDoor-SG.dr;
[F-Prot]security risk or a "backdoor" program,->setup.exe is a security risk or a "backdoor" program;
[Panda]Bck/Nerte.604,Backdoor Program,Bck/Nerte.703,Bck/Nerte.730,Bck/NetTe.74,Bck/Nerte.78,Bck/Nerte.722;
[Computer Associates]Backdoor/Nerte.604!Client,Win32.Nerte.604,Backdoor/Nerte_Server_family,Win32.Nerte.705,Win32.Nerte.730,Backdoor/Nerte.750.B,Win32.Nerte.750.B,Win32.Nerte.781.B,Win32.Nerte.780,Win32/Nerte.785!Trojan,Win32.Nerte.720.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing NerTe:

An up-to-date copy of ExterminateIt should detect and prevent infection from NerTe.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove NerTe manually.

To completely manually remove NerTe malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with NerTe.

1. Use Task Manager to terminate the NerTe process.
2. Delete the original NerTe file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes NerTe from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of NerTe!

Check now if your PC is infected with NerTe

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Pigeon.AYR Trojan Symptoms

imho.ru Tracking Cookie

imho.ru malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing imho.ru:

An up-to-date copy of ExterminateIt should detect and prevent infection from imho.ru.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove imho.ru manually.

To completely manually remove imho.ru malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with imho.ru.

1. Use Task Manager to terminate the imho.ru process.
2. Delete the original imho.ru file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes imho.ru from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of imho.ru!

Check now if your PC is infected with imho.ru

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Remove Pigeon.AVM Trojan
LowZones.cza Trojan Removal instruction
Pigeon.EWM Trojan Removal
SillyDl.DEY Trojan Removal instruction

YXNetScreen Backdoor

YXNetScreen malware description and removal detail
Categories:Backdoor
Also known as:

[Kaspersky]Backdoor.Delf.gj;
[Panda]Backdoor Program;
[Computer Associates]Backdoor/Delf.GJ

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing YXNetScreen:

An up-to-date copy of ExterminateIt should detect and prevent infection from YXNetScreen.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove YXNetScreen manually.

To completely manually remove YXNetScreen malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with YXNetScreen.

1. Use Task Manager to terminate the YXNetScreen process.
2. Delete the original YXNetScreen file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes YXNetScreen from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of YXNetScreen!

Check now if your PC is infected with YXNetScreen

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Removing Pigeon.ENT Trojan
Acee Trojan Removal instruction

Pigeon.AWGM Trojan

Pigeon.AWGM malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AWGM:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AWGM.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AWGM manually.

To completely manually remove Pigeon.AWGM malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWGM.

1. Use Task Manager to terminate the Pigeon.AWGM process.
2. Delete the original Pigeon.AWGM file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Pigeon.AWGM from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.AWGM!

Check now if your PC is infected with Pigeon.AWGM

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Remove Shinwow Trojan

Sheep.Goat.14K Backdoor

Sheep.Goat.14K malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.SheepGoat.10.a;
[McAfee]BackDoor-ON;
[F-Prot]security risk or a "backdoor" program;
[Panda]Bck/SheepGoat.B;
[Computer Associates]Backdoor/SheepGoat.10.a,Win32.SheepGoat.10.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Sheep.Goat.14K:

An up-to-date copy of ExterminateIt should detect and prevent infection from Sheep.Goat.14K.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Sheep.Goat.14K manually.

To completely manually remove Sheep.Goat.14K malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sheep.Goat.14K.

1. Use Task Manager to terminate the Sheep.Goat.14K process.
2. Delete the original Sheep.Goat.14K file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Sheep.Goat.14K from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Sheep.Goat.14K!

Check now if your PC is infected with Sheep.Goat.14K

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Frodo Trojan Removal instruction
Delf.AUU Backdoor Removal
Removing Lesbian.Frenzy Trojan
Odrtre Trojan Removal instruction
PSW.Virton Trojan Removal

Kaoka Hostile Code

Kaoka malware description and removal detail
Categories:Hostile Code
Also known as:

[Kaspersky]Virus.VBS.Kaka.a;
[Other]VBS/Kaoka.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Kaoka:

An up-to-date copy of ExterminateIt should detect and prevent infection from Kaoka.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Kaoka manually.

To completely manually remove Kaoka malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Kaoka.

1. Use Task Manager to terminate the Kaoka process.
2. Delete the original Kaoka file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Kaoka from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Kaoka!

Check now if your PC is infected with Kaoka

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Ninn Trojan Cleaner
Remove pointshop.com Tracking Cookie

Injeven Trojan

Injeven malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Injeven:

An up-to-date copy of ExterminateIt should detect and prevent infection from Injeven.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Injeven manually.

To completely manually remove Injeven malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Injeven.

1. Use Task Manager to terminate the Injeven process.
2. Delete the original Injeven file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Injeven from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Injeven!

Check now if your PC is infected with Injeven

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
digitalpoint.com Tracking Cookie Information

Spanish Trojan

Spanish malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Telefonica.3700;
[Panda]Telefonica.H

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Spanish:

An up-to-date copy of ExterminateIt should detect and prevent infection from Spanish.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Spanish manually.

To completely manually remove Spanish malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Spanish.

1. Use Task Manager to terminate the Spanish process.
2. Delete the original Spanish file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Spanish from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Spanish!

Check now if your PC is infected with Spanish

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Removing Nomenklatura Trojan
Remove Vxidl.AZD Trojan
Remove VX2 Adware
Hatter.dr Trojan Information
Dagger Backdoor Removal instruction

Lesbian.Frenzy Trojan

Lesbian.Frenzy malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.Slackbot.a;
[McAfee]DDoS-Slack;
[F-Prot]destructive program;
[Panda]Bck/Slackbot;
[Computer Associates]Backdoor/Slackbot

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Lesbian.Frenzy:

An up-to-date copy of ExterminateIt should detect and prevent infection from Lesbian.Frenzy.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Lesbian.Frenzy manually.

To completely manually remove Lesbian.Frenzy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Lesbian.Frenzy.

1. Use Task Manager to terminate the Lesbian.Frenzy process.
2. Delete the original Lesbian.Frenzy file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Lesbian.Frenzy from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Lesbian.Frenzy!

Check now if your PC is infected with Lesbian.Frenzy

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Removing AdServerNow Adware
Removing Chat.Watch Spyware
Pentagrame Trojan Symptoms

PrizeSurfer Trojan

PrizeSurfer malware description and removal detail
Categories:Trojan,Adware
Also known as:

[Kaspersky]Trojan.Win32.RCSync;
[Panda]Adware/RCSync
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\downloaded program files\passkey.dll
[%WINDOWS%]\downloaded program files\passkey.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting PrizeSurfer:

Files:
[%WINDOWS%]\downloaded program files\passkey.dll
[%WINDOWS%]\downloaded program files\passkey.dll

Folders:
[%PROGRAM_FILES%]\rcprograms
[%PROGRAM_FILES%]\rcprograms1
[%PROGRAM_FILES%]\rcprograms2

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{7b91df1f-96e8-42ba-ab39-e1db9ce9f371}
HKEY_CLASSES_ROOT\interface\{6d846abd-9ece-44ad-bb1b-e1b0b20e352f}
HKEY_CLASSES_ROOT\passkey.validate
HKEY_CLASSES_ROOT\passkey.validate.1
HKEY_CLASSES_ROOT\typelib\{be055af3-6567-4678-a901-d4b7d92e55fe}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{7b91df1f-96e8-42ba-ab39-e1db9ce9f371}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\passkey.dll

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\[%WINDOWS%]\downloaded program files

Removing PrizeSurfer:

An up-to-date copy of ExterminateIt should detect and prevent infection from PrizeSurfer.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove PrizeSurfer manually.

To completely manually remove PrizeSurfer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PrizeSurfer.

1. Use Task Manager to terminate the PrizeSurfer process.
2. Delete the original PrizeSurfer file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes PrizeSurfer from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of PrizeSurfer!

Check now if your PC is infected with PrizeSurfer

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Farnaz Backdoor Removal instruction
Ilomo Trojan Information
Pigeon.ESF Trojan Symptoms
Pigeon.AEI Trojan Symptoms

enilef Downloader

enilef malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing enilef:

An up-to-date copy of ExterminateIt should detect and prevent infection from enilef.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove enilef manually.

To completely manually remove enilef malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with enilef.

1. Use Task Manager to terminate the enilef process.
2. Delete the original enilef file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes enilef from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of enilef!

Check now if your PC is infected with enilef

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Removing Kode.Over Trojan
Removing Wnsock Trojan

SillyDl.CXY Trojan

SillyDl.CXY malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CXY:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CXY.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.CXY manually.

To completely manually remove SillyDl.CXY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CXY.

1. Use Task Manager to terminate the SillyDl.CXY process.
2. Delete the original SillyDl.CXY file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes SillyDl.CXY from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of SillyDl.CXY!

Check now if your PC is infected with SillyDl.CXY

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
THCunREAL Trojan Symptoms
Bancos.HAP Trojan Removal instruction
RemoteProcessLaunch RAT Cleaner

Stang RAT

Stang malware description and removal detail
Categories:RAT

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Stang:

An up-to-date copy of ExterminateIt should detect and prevent infection from Stang.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Stang manually.

To completely manually remove Stang malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Stang.

1. Use Task Manager to terminate the Stang process.
2. Delete the original Stang file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Stang from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Stang!

Check now if your PC is infected with Stang

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Vxidl.AAA Trojan Removal instruction
Bancos.GAR Trojan Removal
nasads.com Tracking Cookie Removal
Bancos.HOD Trojan Cleaner

Brainy Trojan

Brainy malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Leech.Warrier.768;
[Eset]Brainy.B virus

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Brainy:

An up-to-date copy of ExterminateIt should detect and prevent infection from Brainy.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Brainy manually.

To completely manually remove Brainy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Brainy.

1. Use Task Manager to terminate the Brainy process.
2. Delete the original Brainy file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Brainy from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Brainy!

Check now if your PC is infected with Brainy

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Pigeon.AXV Trojan Symptoms
Remove QQCat Backdoor

Ultra.Keylogger Spyware

Ultra.Keylogger malware description and removal detail
Categories:Spyware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Ultra.Keylogger:

An up-to-date copy of ExterminateIt should detect and prevent infection from Ultra.Keylogger.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Ultra.Keylogger manually.

To completely manually remove Ultra.Keylogger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ultra.Keylogger.

1. Use Task Manager to terminate the Ultra.Keylogger process.
2. Delete the original Ultra.Keylogger file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Ultra.Keylogger from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Ultra.Keylogger!

Check now if your PC is infected with Ultra.Keylogger

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Matcash Trojan Removal instruction
Win32.ShotGun DoS Information

HLLP.Pink Trojan

HLLP.Pink malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]HLLP.Pinc;
[Panda]W32/Pinc.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing HLLP.Pink:

An up-to-date copy of ExterminateIt should detect and prevent infection from HLLP.Pink.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove HLLP.Pink manually.

To completely manually remove HLLP.Pink malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HLLP.Pink.

1. Use Task Manager to terminate the HLLP.Pink process.
2. Delete the original HLLP.Pink file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes HLLP.Pink from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of HLLP.Pink!

Check now if your PC is infected with HLLP.Pink

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
QDel171 Trojan Removal
Removing Near.Mohists RAT
Digress Trojan Information
Intexp.d Trojan Symptoms
Agent.jt Downloader Removal

Frethog.ADP Trojan

Frethog.ADP malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Frethog.ADP:

An up-to-date copy of ExterminateIt should detect and prevent infection from Frethog.ADP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Frethog.ADP manually.

To completely manually remove Frethog.ADP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Frethog.ADP.

1. Use Task Manager to terminate the Frethog.ADP process.
2. Delete the original Frethog.ADP file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Frethog.ADP from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Frethog.ADP!

Check now if your PC is infected with Frethog.ADP

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Golden.Eye Spyware Cleaner

Pigeon.AZB Trojan

Pigeon.AZB malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AZB:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AZB.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AZB manually.

To completely manually remove Pigeon.AZB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AZB.

1. Use Task Manager to terminate the Pigeon.AZB process.
2. Delete the original Pigeon.AZB file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Pigeon.AZB from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.AZB!

Check now if your PC is infected with Pigeon.AZB

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Win32.Flooder.MSN.Bigfly Trojan Information

Frethog.ADU Trojan

Frethog.ADU malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Frethog.ADU:

An up-to-date copy of ExterminateIt should detect and prevent infection from Frethog.ADU.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Frethog.ADU manually.

To completely manually remove Frethog.ADU malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Frethog.ADU.

1. Use Task Manager to terminate the Frethog.ADU process.
2. Delete the original Frethog.ADU file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Frethog.ADU from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Frethog.ADU!

Check now if your PC is infected with Frethog.ADU

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Remove Cotmonger Trojan
MultiBot.Pro Backdoor Removal instruction
Sao.Tome Adware Cleaner

Pigeon.EPN Trojan

Pigeon.EPN malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EPN:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EPN.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.EPN manually.

To completely manually remove Pigeon.EPN malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EPN.

1. Use Task Manager to terminate the Pigeon.EPN process.
2. Delete the original Pigeon.EPN file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Pigeon.EPN from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.EPN!

Check now if your PC is infected with Pigeon.EPN

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
AOL.Count Trojan Cleaner
Socks4 Trojan Information
SMEG.encrypted Trojan Removal instruction

PowerReg.Scheduler Adware

PowerReg.Scheduler malware description and removal detail
Categories:Adware
Visible Symptoms:
Files in system folders:
[%ALTSTARTUP%]\powerreg scheduler v3.exe
[%APPDATA%]\iolo\Disabled Entries\Current User\PowerReg Scheduler.exe
[%APPDATA%]\Microsoft\TuneUp\PowerReg Scheduler.exe
[%PROFILE_TEMP%]\backups\backup-20061120-170415-624-PowerReg Scheduler V3.exe
[%PROGRAMS%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg Scheduler V3.exe
[%STARTUP%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg SchedulerV2.exe
[%WINDOWS%]\pss\PowerReg Scheduler V3.exeStartup
[%WINDOWS%]\pss\PowerReg Scheduler.exeStartup
[%WINDOWS%]\pss\PowerReg SchedulerV2.exeStartup
[%STARTUP%]\powerreg scheduler v3.exe
[%STARTUP%]\powerreg scheduler.exe
[%STARTUP%]\powerreg schedulerv2.exe
[%WINDOWS%]\desktop\startup\powerreg scheduler.exe
[%WINDOWS%]\start menu\programs\startup\image.lnk
[%WINDOWS%]\start menu\programs\startup\norton disk doctor.lnk
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler v3.exe
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler.exe
[%ALTSTARTUP%]\powerreg scheduler v3.exe
[%APPDATA%]\iolo\Disabled Entries\Current User\PowerReg Scheduler.exe
[%APPDATA%]\Microsoft\TuneUp\PowerReg Scheduler.exe
[%PROFILE_TEMP%]\backups\backup-20061120-170415-624-PowerReg Scheduler V3.exe
[%PROGRAMS%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg Scheduler V3.exe
[%STARTUP%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg SchedulerV2.exe
[%WINDOWS%]\pss\PowerReg Scheduler V3.exeStartup
[%WINDOWS%]\pss\PowerReg Scheduler.exeStartup
[%WINDOWS%]\pss\PowerReg SchedulerV2.exeStartup
[%STARTUP%]\powerreg scheduler v3.exe
[%STARTUP%]\powerreg scheduler.exe
[%STARTUP%]\powerreg schedulerv2.exe
[%WINDOWS%]\desktop\startup\powerreg scheduler.exe
[%WINDOWS%]\start menu\programs\startup\image.lnk
[%WINDOWS%]\start menu\programs\startup\norton disk doctor.lnk
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler v3.exe
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler.exe

In order to ensure that the PowerReg.Scheduler is launched automatically each time the system is booted, the PowerReg.Scheduler adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%ALTSTARTUP%]\powerreg scheduler v3.exe
[%APPDATA%]\iolo\Disabled Entries\Current User\PowerReg Scheduler.exe
[%APPDATA%]\Microsoft\TuneUp\PowerReg Scheduler.exe
[%PROFILE_TEMP%]\backups\backup-20061120-170415-624-PowerReg Scheduler V3.exe
[%PROGRAMS%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg Scheduler V3.exe
[%STARTUP%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg SchedulerV2.exe
[%WINDOWS%]\pss\PowerReg Scheduler V3.exeStartup
[%WINDOWS%]\pss\PowerReg Scheduler.exeStartup
[%WINDOWS%]\pss\PowerReg SchedulerV2.exeStartup
[%STARTUP%]\powerreg scheduler v3.exe
[%STARTUP%]\powerreg scheduler.exe
[%STARTUP%]\powerreg schedulerv2.exe
[%WINDOWS%]\desktop\startup\powerreg scheduler.exe
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler v3.exe
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting PowerReg.Scheduler:

Files:
[%ALTSTARTUP%]\powerreg scheduler v3.exe
[%APPDATA%]\iolo\Disabled Entries\Current User\PowerReg Scheduler.exe
[%APPDATA%]\Microsoft\TuneUp\PowerReg Scheduler.exe
[%PROFILE_TEMP%]\backups\backup-20061120-170415-624-PowerReg Scheduler V3.exe
[%PROGRAMS%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg Scheduler V3.exe
[%STARTUP%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg SchedulerV2.exe
[%WINDOWS%]\pss\PowerReg Scheduler V3.exeStartup
[%WINDOWS%]\pss\PowerReg Scheduler.exeStartup
[%WINDOWS%]\pss\PowerReg SchedulerV2.exeStartup
[%STARTUP%]\powerreg scheduler v3.exe
[%STARTUP%]\powerreg scheduler.exe
[%STARTUP%]\powerreg schedulerv2.exe
[%WINDOWS%]\desktop\startup\powerreg scheduler.exe
[%WINDOWS%]\start menu\programs\startup\image.lnk
[%WINDOWS%]\start menu\programs\startup\norton disk doctor.lnk
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler v3.exe
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler.exe
[%ALTSTARTUP%]\powerreg scheduler v3.exe
[%APPDATA%]\iolo\Disabled Entries\Current User\PowerReg Scheduler.exe
[%APPDATA%]\Microsoft\TuneUp\PowerReg Scheduler.exe
[%PROFILE_TEMP%]\backups\backup-20061120-170415-624-PowerReg Scheduler V3.exe
[%PROGRAMS%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg Scheduler V3.exe
[%STARTUP%]\PowerReg Scheduler.exe
[%STARTUP%]\PowerReg SchedulerV2.exe
[%WINDOWS%]\pss\PowerReg Scheduler V3.exeStartup
[%WINDOWS%]\pss\PowerReg Scheduler.exeStartup
[%WINDOWS%]\pss\PowerReg SchedulerV2.exeStartup
[%STARTUP%]\powerreg scheduler v3.exe
[%STARTUP%]\powerreg scheduler.exe
[%STARTUP%]\powerreg schedulerv2.exe
[%WINDOWS%]\desktop\startup\powerreg scheduler.exe
[%WINDOWS%]\start menu\programs\startup\image.lnk
[%WINDOWS%]\start menu\programs\startup\norton disk doctor.lnk
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler v3.exe
[%WINDOWS%]\start menu\programs\startup\powerreg scheduler.exe

Folders:
[%DESKTOP%]\startup
[%DESKTOP%]\startup
[%PROGRAM_FILES%]\powerreg

Removing PowerReg.Scheduler:

An up-to-date copy of ExterminateIt should detect and prevent infection from PowerReg.Scheduler.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove PowerReg.Scheduler manually.

To completely manually remove PowerReg.Scheduler malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PowerReg.Scheduler.

1. Use Task Manager to terminate the PowerReg.Scheduler process.
2. Delete the original PowerReg.Scheduler file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes PowerReg.Scheduler from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of PowerReg.Scheduler!

Check now if your PC is infected with PowerReg.Scheduler

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Remove Evasion DoS
FBSD.RootKit Trojan Removal instruction
MagicAds Adware Removal

IRCFlood Trojan

IRCFlood malware description and removal detail
Categories:Trojan,Adware,Worm,Backdoor,RAT,Toolbar,Downloader,DoS
Also known as:

[Kaspersky]Backdoor.IRC.Zapchast,Backdoor.Win32.mIRC-based,Backdoor.Win32.ServU-based.bw;
[McAfee]IRC/Flood.gen.b;
[Panda]Bck/IRC.Mirc.Based,Trojan Horse,Worm Generic.LC,Backdoor Program,Trj/Irc-flodder.c,Bck/IRC.Cloner,Trojan Horse.LC,Trj/IRC.Flood,Bck/IRC.Flood.A,mIRC/Cloner,Bck/Iroffer.1213,IRC/Flood;
[Computer Associates]Win32.IRCFlood,Win32/IRCFlood.H.mIRC32!Trojan,Win32/IRCFlood.Systray.mIRC32!Tr,Backdoor/IRCFlood.C,IRC.Flood,IRC.Flood.C,mIRC/Flood.D,Win32/IRC.Flood.Isa!Trojan,Win32/IRCFlood!DDoS,Win32/IRCFlood.Trojan,Bat/IRCFlood.cm!Trojan,mIRC/IRCFlood!Trojan,Win32.IRCFlood.C;
[Other]Win32/IRCFlood,Backdoor.Usirf,MIRC/IRCFlood,IRC Trojan,MIRC/IRCFlood.C,Trojan.Dropper
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\drivers\etc\y7\Advisory.nfo
[%SYSTEM%]\drivers\etc\y7\NortonPID.hlp
[%SYSTEM%]\drivers\etc\y7\ret.bat
[%WINDOWS%]\system\aliases.ini
[%WINDOWS%]\system\control.ini
[%WINDOWS%]\system\fullname.txt
[%WINDOWS%]\system\ident.txt
[%WINDOWS%]\system\mirc.ico
[%WINDOWS%]\system\mirc.ini
[%WINDOWS%]\system\nicks.txt
[%WINDOWS%]\system\popups.txt
[%WINDOWS%]\system\remote.ini
[%WINDOWS%]\system\servers.ini
[%WINDOWS%]\system\sup.bat
[%WINDOWS%]\system\sup.reg
[%WINDOWS%]\system\users.ini
[%SYSTEM%]\crazy.mrc
[%SYSTEM%]\crazy2.mrc
[%SYSTEM%]\crazy3.mrc
[%SYSTEM%]\crazy4.mrc
[%SYSTEM%]\crazy5.mrc
[%SYSTEM%]\crazy6.mrc
[%SYSTEM%]\crazy7.mrc
[%SYSTEM%]\dir
[%SYSTEM%]\welcome
[%WINDOWS%]\fonts\Chans.dll
[%WINDOWS%]\fonts\fn.xt
[%WINDOWS%]\fonts\ms32.sys
[%WINDOWS%]\fonts\Sfwwin32.dll
[%WINDOWS%]\fonts\system32\config.dll
[%WINDOWS%]\fonts\system32\Systemx.dll
[%WINDOWS%]\fonts\uninstall.uni
[%WINDOWS%]\fonts\windows.exe
[%WINDOWS%]\system\script.ini
[%SYSTEM%]\drivers\etc\y7\Advisory.nfo
[%SYSTEM%]\drivers\etc\y7\NortonPID.hlp
[%SYSTEM%]\drivers\etc\y7\ret.bat
[%WINDOWS%]\system\aliases.ini
[%WINDOWS%]\system\control.ini
[%WINDOWS%]\system\fullname.txt
[%WINDOWS%]\system\ident.txt
[%WINDOWS%]\system\mirc.ico
[%WINDOWS%]\system\mirc.ini
[%WINDOWS%]\system\nicks.txt
[%WINDOWS%]\system\popups.txt
[%WINDOWS%]\system\remote.ini
[%WINDOWS%]\system\servers.ini
[%WINDOWS%]\system\sup.bat
[%WINDOWS%]\system\sup.reg
[%WINDOWS%]\system\users.ini
[%SYSTEM%]\crazy.mrc
[%SYSTEM%]\crazy2.mrc
[%SYSTEM%]\crazy3.mrc
[%SYSTEM%]\crazy4.mrc
[%SYSTEM%]\crazy5.mrc
[%SYSTEM%]\crazy6.mrc
[%SYSTEM%]\crazy7.mrc
[%SYSTEM%]\dir
[%SYSTEM%]\welcome
[%WINDOWS%]\fonts\Chans.dll
[%WINDOWS%]\fonts\fn.xt
[%WINDOWS%]\fonts\ms32.sys
[%WINDOWS%]\fonts\Sfwwin32.dll
[%WINDOWS%]\fonts\system32\config.dll
[%WINDOWS%]\fonts\system32\Systemx.dll
[%WINDOWS%]\fonts\uninstall.uni
[%WINDOWS%]\fonts\windows.exe
[%WINDOWS%]\system\script.ini

In order to ensure that the IRCFlood is launched automatically each time the system is booted, the IRCFlood adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\fonts\windows.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting IRCFlood:

Files:
[%SYSTEM%]\drivers\etc\y7\Advisory.nfo
[%SYSTEM%]\drivers\etc\y7\NortonPID.hlp
[%SYSTEM%]\drivers\etc\y7\ret.bat
[%WINDOWS%]\system\aliases.ini
[%WINDOWS%]\system\control.ini
[%WINDOWS%]\system\fullname.txt
[%WINDOWS%]\system\ident.txt
[%WINDOWS%]\system\mirc.ico
[%WINDOWS%]\system\mirc.ini
[%WINDOWS%]\system\nicks.txt
[%WINDOWS%]\system\popups.txt
[%WINDOWS%]\system\remote.ini
[%WINDOWS%]\system\servers.ini
[%WINDOWS%]\system\sup.bat
[%WINDOWS%]\system\sup.reg
[%WINDOWS%]\system\users.ini
[%SYSTEM%]\crazy.mrc
[%SYSTEM%]\crazy2.mrc
[%SYSTEM%]\crazy3.mrc
[%SYSTEM%]\crazy4.mrc
[%SYSTEM%]\crazy5.mrc
[%SYSTEM%]\crazy6.mrc
[%SYSTEM%]\crazy7.mrc
[%SYSTEM%]\dir
[%SYSTEM%]\welcome
[%WINDOWS%]\fonts\Chans.dll
[%WINDOWS%]\fonts\fn.xt
[%WINDOWS%]\fonts\ms32.sys
[%WINDOWS%]\fonts\Sfwwin32.dll
[%WINDOWS%]\fonts\system32\config.dll
[%WINDOWS%]\fonts\system32\Systemx.dll
[%WINDOWS%]\fonts\uninstall.uni
[%WINDOWS%]\fonts\windows.exe
[%WINDOWS%]\system\script.ini
[%SYSTEM%]\drivers\etc\y7\Advisory.nfo
[%SYSTEM%]\drivers\etc\y7\NortonPID.hlp
[%SYSTEM%]\drivers\etc\y7\ret.bat
[%WINDOWS%]\system\aliases.ini
[%WINDOWS%]\system\control.ini
[%WINDOWS%]\system\fullname.txt
[%WINDOWS%]\system\ident.txt
[%WINDOWS%]\system\mirc.ico
[%WINDOWS%]\system\mirc.ini
[%WINDOWS%]\system\nicks.txt
[%WINDOWS%]\system\popups.txt
[%WINDOWS%]\system\remote.ini
[%WINDOWS%]\system\servers.ini
[%WINDOWS%]\system\sup.bat
[%WINDOWS%]\system\sup.reg
[%WINDOWS%]\system\users.ini
[%SYSTEM%]\crazy.mrc
[%SYSTEM%]\crazy2.mrc
[%SYSTEM%]\crazy3.mrc
[%SYSTEM%]\crazy4.mrc
[%SYSTEM%]\crazy5.mrc
[%SYSTEM%]\crazy6.mrc
[%SYSTEM%]\crazy7.mrc
[%SYSTEM%]\dir
[%SYSTEM%]\welcome
[%WINDOWS%]\fonts\Chans.dll
[%WINDOWS%]\fonts\fn.xt
[%WINDOWS%]\fonts\ms32.sys
[%WINDOWS%]\fonts\Sfwwin32.dll
[%WINDOWS%]\fonts\system32\config.dll
[%WINDOWS%]\fonts\system32\Systemx.dll
[%WINDOWS%]\fonts\uninstall.uni
[%WINDOWS%]\fonts\windows.exe
[%WINDOWS%]\system\script.ini

Folders:
[%SYSTEM%]\drivers\nVIDIA\DLL
[%SYSTEM%]\drivers\shellz
[%SYSTEM%]\fdhfh

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{75c3577f-75c3-577f-75c3-577f75c3577f}
HKEY_CURRENT_USER\software\ms32
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ms32
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ipx
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_svchostio
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ipx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\svchostio

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing IRCFlood:

An up-to-date copy of ExterminateIt should detect and prevent infection from IRCFlood.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove IRCFlood manually.

To completely manually remove IRCFlood malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IRCFlood.

1. Use Task Manager to terminate the IRCFlood process.
2. Delete the original IRCFlood file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes IRCFlood from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of IRCFlood!

Check now if your PC is infected with IRCFlood

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Example Backdoor Symptoms
Removing Rexec RAT
SillyDl.CLO Trojan Symptoms
Removing Pigeon.EFF Trojan

ASP Trojan

ASP malware description and removal detail
Categories:Trojan,Spyware,Backdoor,RAT,Hacker Tool
Also known as:

[Kaspersky]TrojanSpy.Win32.Spybox;
[Panda]Bck/Ace.B,Trojan Horse,Trj/Asp.D;
[Computer Associates]Backdoor/ASP!Rootkit.10,Win32/Asp.D!PWS!Trojan,VBS.Asproot.B

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing ASP:

An up-to-date copy of ExterminateIt should detect and prevent infection from ASP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove ASP manually.

To completely manually remove ASP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ASP.

1. Use Task Manager to terminate the ASP process.
2. Delete the original ASP file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes ASP from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of ASP!

Check now if your PC is infected with ASP

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
KillDisk Trojan Information
Remove Zuten Trojan

Rwins RAT

Rwins malware description and removal detail
Categories:RAT

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Rwins:

An up-to-date copy of ExterminateIt should detect and prevent infection from Rwins.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Rwins manually.

To completely manually remove Rwins malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Rwins.

1. Use Task Manager to terminate the Rwins process.
2. Delete the original Rwins file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes Rwins from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Rwins!

Check now if your PC is infected with Rwins

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
Pigeon.AVCK Trojan Removal instruction
Remove JScript.E2H Trojan

TrojanDownloader.Win32.Agent.aw Downloader

TrojanDownloader.Win32.Agent.aw malware description and removal detail
Categories:Downloader
Also known as:

[Panda]Adware/SearchAid
Visible Symptoms:
Files in system folders:
[%PROGRAM_FILES%]\internet explorer\tlsdzuwe.exe
[%PROGRAM_FILES%]\internet explorer\tlsdzuwe.exe

In order to ensure that the TrojanDownloader.Win32.Agent.aw is launched automatically each time the system is booted, the TrojanDownloader.Win32.Agent.aw adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%PROGRAM_FILES%]\internet explorer\tlsdzuwe.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting TrojanDownloader.Win32.Agent.aw:

Files:
[%PROGRAM_FILES%]\internet explorer\tlsdzuwe.exe
[%PROGRAM_FILES%]\internet explorer\tlsdzuwe.exe

Removing TrojanDownloader.Win32.Agent.aw:

An up-to-date copy of ExterminateIt should detect and prevent infection from TrojanDownloader.Win32.Agent.aw.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove TrojanDownloader.Win32.Agent.aw manually.

To completely manually remove TrojanDownloader.Win32.Agent.aw malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.Win32.Agent.aw.

1. Use Task Manager to terminate the TrojanDownloader.Win32.Agent.aw process.
2. Delete the original TrojanDownloader.Win32.Agent.aw file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

---

ExterminateIt effectively and automatically removes TrojanDownloader.Win32.Agent.aw from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of TrojanDownloader.Win32.Agent.aw!

Check now if your PC is infected with TrojanDownloader.Win32.Agent.aw

You can buy full version of ExterminateIt at RegNow.com.

---

Also Be Aware of the Following Threats:
TrojanProxy.Win32.Daemonize.bv Trojan Symptoms