DNR Trojan

DNR malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Rom.397,Rom.331;
[Eset]probably unknown TSR.COM virus;
[Panda]Bad ROM;
[Computer Associates]DNR

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing DNR:

An up-to-date copy of ExterminateIt should detect and prevent infection from DNR.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove DNR manually.

To completely manually remove DNR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DNR.

  1. Use Task Manager to terminate the DNR process.
  2. Delete the original DNR file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes DNR from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of DNR!

Check now if your PC is infected with DNR

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
LoveChild Trojan Removal instruction
Vxidl.AHU Trojan Removal instruction
EasySearch Adware Information
Pigeon.ESG Trojan Symptoms

Backdoor.IRCBot.Server Trojan

Backdoor.IRCBot.Server malware description and removal detail
Categories:Trojan,Backdoor,DoS
Also known as:

[Kaspersky]Backdoor.Win32.SdBot.gen;
[Eset]Win32/IRCBot.V trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Backdoor.IRCBot.Server:

An up-to-date copy of ExterminateIt should detect and prevent infection from Backdoor.IRCBot.Server.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Backdoor.IRCBot.Server manually.

To completely manually remove Backdoor.IRCBot.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.IRCBot.Server.

  1. Use Task Manager to terminate the Backdoor.IRCBot.Server process.
  2. Delete the original Backdoor.IRCBot.Server file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Backdoor.IRCBot.Server from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Backdoor.IRCBot.Server!

Check now if your PC is infected with Backdoor.IRCBot.Server

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Hacker.Brazil Backdoor Cleaner
VB.fs Trojan Removal instruction

Elite Trojan

Elite malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Elite:

An up-to-date copy of ExterminateIt should detect and prevent infection from Elite.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Elite manually.

To completely manually remove Elite malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Elite.

  1. Use Task Manager to terminate the Elite process.
  2. Delete the original Elite file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Elite from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Elite!

Check now if your PC is infected with Elite

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
WWW.grab.itsolutions.com Tracking Cookie Removal
Remove HTTP Backdoor

Vxidl.AEQ Trojan

Vxidl.AEQ malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AEQ:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AEQ.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.AEQ manually.

To completely manually remove Vxidl.AEQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AEQ.

  1. Use Task Manager to terminate the Vxidl.AEQ process.
  2. Delete the original Vxidl.AEQ file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Vxidl.AEQ from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Vxidl.AEQ!

Check now if your PC is infected with Vxidl.AEQ

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Remove Bancos.EOY Trojan
Removing TrojanDownloader.Win32.Small Trojan

IK Trojan

IK malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing IK:

An up-to-date copy of ExterminateIt should detect and prevent infection from IK.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove IK manually.

To completely manually remove IK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IK.

  1. Use Task Manager to terminate the IK process.
  2. Delete the original IK file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes IK from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of IK!

Check now if your PC is infected with IK

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
RBCalc Trojan Information
Sureox Trojan Information
SillyDl.CHK Trojan Removal

Sentinel Trojan

Sentinel malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Backdoor.Optix.Pro.11,Quit.555.a,Win32.ZHymn.Host,Sentinel.5402,Sentinel.4571,Sentinel.4636,Win32.Sentinel,Win32.Sentinel.a,Sentinel.5173,Sentinel.4625;
[Eset]Sentinel.5402 virus,Sentinel.4571 virus,Sentinel.4636.dropper virus;
[McAfee]BackDoor-ACH,HLL.DPOG.kit,Quit,Tool-Zhymn,Univ/j,Sentinel.dr,Sentinel,W32/Sentinel;
[F-Prot]Quit.555.B,security risk or a "backdoor" program,virus dropper,Sentinel.4571,corrupted or intended virus,W32/Sentin;
[Panda]Backdoor Program.LC,Univ.B,Sent_BCV Drp,Sentinel BCV,Sentinel 2.4571,Sentinel Family,Sentinel.Dopper,W32/Sentinel.drop,Sentinel 3.5173,Sentinel 1.4625;
[Computer Associates]Backdoor/Optix_Server_family,Sentinel 1,Sentinel 2,Sentinel,Win32.Sentinel,Sentinel 3

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Sentinel:

An up-to-date copy of ExterminateIt should detect and prevent infection from Sentinel.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Sentinel manually.

To completely manually remove Sentinel malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sentinel.

  1. Use Task Manager to terminate the Sentinel process.
  2. Delete the original Sentinel file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Sentinel from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Sentinel!

Check now if your PC is infected with Sentinel

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
startpage.ajj Adware Information
Remove SpyArsenal.AIM.Logger Spyware

Small.atc Downloader

Small.atc malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Small.atc:

An up-to-date copy of ExterminateIt should detect and prevent infection from Small.atc.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Small.atc manually.

To completely manually remove Small.atc malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Small.atc.

  1. Use Task Manager to terminate the Small.atc process.
  2. Delete the original Small.atc file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Small.atc from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Small.atc!

Check now if your PC is infected with Small.atc

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
AZG!Dropper Backdoor Removal instruction

The.Spy.Beta Trojan

The.Spy.Beta malware description and removal detail
Categories:Trojan,Spyware,Backdoor
Also known as:

[Kaspersky]Backdoor.TheSpy;
[Eset]Win32/TheSpy.Beta_1 trojan;
[McAfee]BackDoor-IA;
[F-Prot]security risk or a "backdoor" program;
[Panda]Bck/TheSpy,Bck/TheSpy.Srv;
[Computer Associates]Backdoor/TheSpy,Win32.Spy

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing The.Spy.Beta:

An up-to-date copy of ExterminateIt should detect and prevent infection from The.Spy.Beta.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove The.Spy.Beta manually.

To completely manually remove The.Spy.Beta malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with The.Spy.Beta.

  1. Use Task Manager to terminate the The.Spy.Beta process.
  2. Delete the original The.Spy.Beta file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes The.Spy.Beta from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of The.Spy.Beta!

Check now if your PC is infected with The.Spy.Beta

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
IEAgent Adware Cleaner
Removing PowerZone Adware
TrojanSpy.Win32.Iparmor Trojan Removal

Acext Spyware

Acext malware description and removal detail
Categories:Spyware
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\ie_32.exe
[%WINDOWS%]\ie_32.exe

In order to ensure that the Acext is launched automatically each time the system is booted, the Acext adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\ie_32.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Acext:

Files:
[%WINDOWS%]\ie_32.exe
[%WINDOWS%]\ie_32.exe

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing Acext:

An up-to-date copy of ExterminateIt should detect and prevent infection from Acext.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Acext manually.

To completely manually remove Acext malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Acext.

  1. Use Task Manager to terminate the Acext process.
  2. Delete the original Acext file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Acext from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Acext!

Check now if your PC is infected with Acext

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
sportsauthority.com Tracking Cookie Removal
Win32.PSW.Spider Trojan Removal instruction
Voltron.Annoyer Adware Symptoms
Carioca Trojan Information
VB.cc Adware Cleaner

Mybravenet.Tracking.Cookie Tracking Cookie

Mybravenet.Tracking.Cookie malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Mybravenet.Tracking.Cookie:

An up-to-date copy of ExterminateIt should detect and prevent infection from Mybravenet.Tracking.Cookie.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Mybravenet.Tracking.Cookie manually.

To completely manually remove Mybravenet.Tracking.Cookie malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Mybravenet.Tracking.Cookie.

  1. Use Task Manager to terminate the Mybravenet.Tracking.Cookie process.
  2. Delete the original Mybravenet.Tracking.Cookie file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Mybravenet.Tracking.Cookie from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Mybravenet.Tracking.Cookie!

Check now if your PC is infected with Mybravenet.Tracking.Cookie

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Pigeon.AZH Trojan Symptoms
Pigeon.AYQ Trojan Removal instruction
Removing HLLP.Rabbit Trojan
Lithium Trojan Symptoms

Agent Trojan

Agent malware description and removal detail
Categories:Trojan,Adware,Spyware,Backdoor,Hijacker,Downloader,Hacker Tool,Tracking Cookie
Also known as:

[Kaspersky]Backdoor.Agent.l,AdWare.Win32.Agent.ae,Trojan.Win32.Agent.wd,Backdoor.Win32.Agent.uq,Trojan-Spy.Win32.Agent.pn,Trojan-PSW.Win32.Agent.dv,Trojan.Win32.Agent.oh,Trojan-Clicker.Win32.Agent.ip,Trojan-Spy.Win32.Agent.or,Trojan.Win32.Agent.ky,Trojan.Win32.Agent.kq,AdWare.Win32.Agent.bn,Trojan-Downloader.Win32.Agent.es,Trojan-Clicker.Win32.Agent.ig,Trojan-Proxy.Win32.Agent.jh,Backdoor.Win32.Rbot.coi,Trojan.Win32.Agent.vk,Trojan.Win32.Agent.aia,AdWare.Win32.Agent.mf,Trojan-Dropper.Win32.Agent.ckr;
[Eset]Win32/Agent.A trojan,Win32/Agent.I trojan,Win32/Agent.L trojan;
[McAfee]Spy-Agent.br.dll,PWS-Hook.dll,BackDoor-CXJ,Generic Spy.b,Downloader-VideoCach,Downloader-BAR,Downloader-BDS;
[F-Prot]W32/Trojan.ZIF,W32/Agent.AYD,W32/Agent.DEV,W32/Downloader2.SG,W32/Agent.CUA,W32/Trojan.ZGB,W32/Downldr2.AIED,W32/Backdoor.BVGN,W32/Dropper.GMJ;
[Panda]Adware/TSCash,Spyware/Virtumonde,Trj/Agent.K,Adware/BHOcn;
[Computer Associates]Win32/Agent.L!Backdoor,Win32/Vundo.Variant!Trojan,Backdoor/Agent.A,Win32.WellBoss.A,Win32.Sdbot.38912.B,Win32/SdBot.38912.B.Trojan,Win32/Agent!Proxy!Trojan,Win32.Disprox.A;
[Other]W32/Agent.CTC,TROJ_AGENT.EW,W32/DLoader.AIYY,W32/Agent.ANGJ,TROJ_AGENT.FAV,Trojan.Dropper,Troj/Agent-CIH,Troj/Agent-BIV,W32/Agent.UPB,Backdoor.Trojan,W32/Hitapop,Infostealer,Troj/Hook-Gen,W32/Agent.ASFW,Troj/LowZone-DS,W32/Dialer,W32/Agent.BBCG,trojan-akella,Trojan Horse,W32/Agent.WHE,Trojan.Downloader.Gen,Troj/Loser-D,W32/Backdoor.AS,Trojan.Zlob,Troj/VidCach-A,trojan-ace-x,Trojan.FakeAlert,trojan-windowstart,TrojanProxy:Win32/Agent!6CBD,Troj/Dropper-PM,Downloader.Agent.btd,TROJ_AGENT.SLR,TrojanDownloader:Win32/Agent.ABD,W32/Horst.gen33,Troj/Laqma-A,Adware.Rugo,W32/Agent.DDFF,Backdoor.Agent.YSG,Dropper.Small

Visible Symptoms:
Files in system folders:
[%COMMON_APPDATA%]\svchost.exe
[%INTERNET_CACHE%]\Content.IE5\FM433H8X\xc36[1].exe
[%INTERNET_CACHE%]\Content.IE5\YHV37XV3\xc36[1].exe
[%LOCAL_APPDATA%]\Temp\win7300.tmp.exe
[%PROFILE_TEMP%]\patch211.exe
[%PROFILE_TEMP%]\patch231.exe
[%PROFILE_TEMP%]\patch261.exe
[%PROFILE_TEMP%]\win1487.tmp.exe
[%PROFILE_TEMP%]\win155.tmp.exe
[%PROFILE_TEMP%]\win199.tmp.exe
[%PROFILE_TEMP%]\win207.tmp.exe
[%PROFILE_TEMP%]\win3C3.tmp.exe
[%PROFILE_TEMP%]\win3E0.tmp.exe
[%PROFILE_TEMP%]\win??.tmp.exe
[%PROGRAM_FILES_COMMON%]\svchost.exe
[%SYSTEM%]\lsasvc.exe
[%SYSTEM%]\qmopt.dll
[%WINDOWS%]\main_uninstaller.exe
[%WINDOWS%]\svchost.exe
[%WINDOWS%]\Temp\win168.tmp.exe
[%WINDOWS%]\TEMP\win42D2.TMP.exe
[%WINDOWS%]\TEMP\win8054.TMP.exe
[%WINDOWS%]\Temp\win??.tmp.exe
[%PROFILE%]\Documents\Settings\winsys2f.dll
[%PROFILE_TEMP%]\patch221.exe
[%PROGRAM_FILES_COMMON%]\System\comio32.dll
[%SYSTEM%]\AlxRes070104.exe
[%SYSTEM%]\bpquskrppqh.dll
[%SYSTEM%]\cryptsa.dll
[%SYSTEM%]\drives\iedrv.EXE
[%SYSTEM%]\drives\iedrvctrl.exe
[%SYSTEM%]\drives\iexploree.dll
[%SYSTEM%]\drives\mslog.exe
[%SYSTEM%]\drives\pnpdrv.sys
[%SYSTEM%]\msantivir.exe
[%SYSTEM%]\msdirectx.sys
[%SYSTEM%]\MSHLP.DLL
[%SYSTEM%]\nortonav.dll
[%SYSTEM%]\scrsys070104.scr
[%SYSTEM%]\scrsys16_070104.scr
[%SYSTEM%]\tscore.dll
[%SYSTEM%]\tstime.exe
[%SYSTEM%]\udt.dll
[%SYSTEM%]\winsys16_070104.dll
[%SYSTEM%]\winsys32_070104.dll
[%SYSTEM%]\wintimer.bmp
[%WINDOWS%]\downloaded program files\activeinstall2.dll
[%WINDOWS%]\downloaded program files\tscash.inf
[%WINDOWS%]\downloaded program files\tscplugin class
[%WINDOWS%]\downloaded program files\tsplugin.dll
[%WINDOWS%]\iedrv.exe
[%WINDOWS%]\iedrvctrl.exe
[%WINDOWS%]\iexploree.dll
[%WINDOWS%]\system\sysupd.exe
[%WINDOWS%]\system\tscore.dll
[%WINDOWS%]\system\tstime.exe
[%WINDOWS%]\sysupd.exe
[%WINDOWS%]\windowsupd1.exe
[%COMMON_APPDATA%]\svchost.exe
[%INTERNET_CACHE%]\Content.IE5\FM433H8X\xc36[1].exe
[%INTERNET_CACHE%]\Content.IE5\YHV37XV3\xc36[1].exe
[%LOCAL_APPDATA%]\Temp\win7300.tmp.exe
[%PROFILE_TEMP%]\patch211.exe
[%PROFILE_TEMP%]\patch231.exe
[%PROFILE_TEMP%]\patch261.exe
[%PROFILE_TEMP%]\win1487.tmp.exe
[%PROFILE_TEMP%]\win155.tmp.exe
[%PROFILE_TEMP%]\win199.tmp.exe
[%PROFILE_TEMP%]\win207.tmp.exe
[%PROFILE_TEMP%]\win3C3.tmp.exe
[%PROFILE_TEMP%]\win3E0.tmp.exe
[%PROFILE_TEMP%]\win??.tmp.exe
[%PROGRAM_FILES_COMMON%]\svchost.exe
[%SYSTEM%]\lsasvc.exe
[%SYSTEM%]\qmopt.dll
[%WINDOWS%]\main_uninstaller.exe
[%WINDOWS%]\svchost.exe
[%WINDOWS%]\Temp\win168.tmp.exe
[%WINDOWS%]\TEMP\win42D2.TMP.exe
[%WINDOWS%]\TEMP\win8054.TMP.exe
[%WINDOWS%]\Temp\win??.tmp.exe
[%PROFILE%]\Documents\Settings\winsys2f.dll
[%PROFILE_TEMP%]\patch221.exe
[%PROGRAM_FILES_COMMON%]\System\comio32.dll
[%SYSTEM%]\AlxRes070104.exe
[%SYSTEM%]\bpquskrppqh.dll
[%SYSTEM%]\cryptsa.dll
[%SYSTEM%]\drives\iedrv.EXE
[%SYSTEM%]\drives\iedrvctrl.exe
[%SYSTEM%]\drives\iexploree.dll
[%SYSTEM%]\drives\mslog.exe
[%SYSTEM%]\drives\pnpdrv.sys
[%SYSTEM%]\msantivir.exe
[%SYSTEM%]\msdirectx.sys
[%SYSTEM%]\MSHLP.DLL
[%SYSTEM%]\nortonav.dll
[%SYSTEM%]\scrsys070104.scr
[%SYSTEM%]\scrsys16_070104.scr
[%SYSTEM%]\tscore.dll
[%SYSTEM%]\tstime.exe
[%SYSTEM%]\udt.dll
[%SYSTEM%]\winsys16_070104.dll
[%SYSTEM%]\winsys32_070104.dll
[%SYSTEM%]\wintimer.bmp
[%WINDOWS%]\downloaded program files\activeinstall2.dll
[%WINDOWS%]\downloaded program files\tscash.inf
[%WINDOWS%]\downloaded program files\tscplugin class
[%WINDOWS%]\downloaded program files\tsplugin.dll
[%WINDOWS%]\iedrv.exe
[%WINDOWS%]\iedrvctrl.exe
[%WINDOWS%]\iexploree.dll
[%WINDOWS%]\system\sysupd.exe
[%WINDOWS%]\system\tscore.dll
[%WINDOWS%]\system\tstime.exe
[%WINDOWS%]\sysupd.exe
[%WINDOWS%]\windowsupd1.exe

In order to ensure that the Agent is launched automatically each time the system is booted, the Agent adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%COMMON_APPDATA%]\svchost.exe
[%INTERNET_CACHE%]\Content.IE5\FM433H8X\xc36[1].exe
[%INTERNET_CACHE%]\Content.IE5\YHV37XV3\xc36[1].exe
[%LOCAL_APPDATA%]\Temp\win7300.tmp.exe
[%PROFILE_TEMP%]\patch211.exe
[%PROFILE_TEMP%]\patch231.exe
[%PROFILE_TEMP%]\patch261.exe
[%PROFILE_TEMP%]\win1487.tmp.exe
[%PROFILE_TEMP%]\win155.tmp.exe
[%PROFILE_TEMP%]\win199.tmp.exe
[%PROFILE_TEMP%]\win207.tmp.exe
[%PROFILE_TEMP%]\win3C3.tmp.exe
[%PROFILE_TEMP%]\win3E0.tmp.exe
[%PROFILE_TEMP%]\win??.tmp.exe
[%PROGRAM_FILES_COMMON%]\svchost.exe
[%SYSTEM%]\lsasvc.exe
[%WINDOWS%]\main_uninstaller.exe
[%WINDOWS%]\svchost.exe
[%WINDOWS%]\Temp\win168.tmp.exe
[%WINDOWS%]\TEMP\win42D2.TMP.exe
[%WINDOWS%]\TEMP\win8054.TMP.exe
[%WINDOWS%]\Temp\win??.tmp.exe
[%PROFILE_TEMP%]\patch221.exe
[%SYSTEM%]\AlxRes070104.exe
[%SYSTEM%]\drives\iedrvctrl.exe
[%SYSTEM%]\drives\mslog.exe
[%SYSTEM%]\msantivir.exe
[%SYSTEM%]\tstime.exe
[%WINDOWS%]\iedrv.exe
[%WINDOWS%]\iedrvctrl.exe
[%WINDOWS%]\system\sysupd.exe
[%WINDOWS%]\system\tstime.exe
[%WINDOWS%]\sysupd.exe
[%WINDOWS%]\windowsupd1.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Agent:

Files:
[%COMMON_APPDATA%]\svchost.exe
[%INTERNET_CACHE%]\Content.IE5\FM433H8X\xc36[1].exe
[%INTERNET_CACHE%]\Content.IE5\YHV37XV3\xc36[1].exe
[%LOCAL_APPDATA%]\Temp\win7300.tmp.exe
[%PROFILE_TEMP%]\patch211.exe
[%PROFILE_TEMP%]\patch231.exe
[%PROFILE_TEMP%]\patch261.exe
[%PROFILE_TEMP%]\win1487.tmp.exe
[%PROFILE_TEMP%]\win155.tmp.exe
[%PROFILE_TEMP%]\win199.tmp.exe
[%PROFILE_TEMP%]\win207.tmp.exe
[%PROFILE_TEMP%]\win3C3.tmp.exe
[%PROFILE_TEMP%]\win3E0.tmp.exe
[%PROFILE_TEMP%]\win??.tmp.exe
[%PROGRAM_FILES_COMMON%]\svchost.exe
[%SYSTEM%]\lsasvc.exe
[%SYSTEM%]\qmopt.dll
[%WINDOWS%]\main_uninstaller.exe
[%WINDOWS%]\svchost.exe
[%WINDOWS%]\Temp\win168.tmp.exe
[%WINDOWS%]\TEMP\win42D2.TMP.exe
[%WINDOWS%]\TEMP\win8054.TMP.exe
[%WINDOWS%]\Temp\win??.tmp.exe
[%PROFILE%]\Documents\Settings\winsys2f.dll
[%PROFILE_TEMP%]\patch221.exe
[%PROGRAM_FILES_COMMON%]\System\comio32.dll
[%SYSTEM%]\AlxRes070104.exe
[%SYSTEM%]\bpquskrppqh.dll
[%SYSTEM%]\cryptsa.dll
[%SYSTEM%]\drives\iedrv.EXE
[%SYSTEM%]\drives\iedrvctrl.exe
[%SYSTEM%]\drives\iexploree.dll
[%SYSTEM%]\drives\mslog.exe
[%SYSTEM%]\drives\pnpdrv.sys
[%SYSTEM%]\msantivir.exe
[%SYSTEM%]\msdirectx.sys
[%SYSTEM%]\MSHLP.DLL
[%SYSTEM%]\nortonav.dll
[%SYSTEM%]\scrsys070104.scr
[%SYSTEM%]\scrsys16_070104.scr
[%SYSTEM%]\tscore.dll
[%SYSTEM%]\tstime.exe
[%SYSTEM%]\udt.dll
[%SYSTEM%]\winsys16_070104.dll
[%SYSTEM%]\winsys32_070104.dll
[%SYSTEM%]\wintimer.bmp
[%WINDOWS%]\downloaded program files\activeinstall2.dll
[%WINDOWS%]\downloaded program files\tscash.inf
[%WINDOWS%]\downloaded program files\tscplugin class
[%WINDOWS%]\downloaded program files\tsplugin.dll
[%WINDOWS%]\iedrv.exe
[%WINDOWS%]\iedrvctrl.exe
[%WINDOWS%]\iexploree.dll
[%WINDOWS%]\system\sysupd.exe
[%WINDOWS%]\system\tscore.dll
[%WINDOWS%]\system\tstime.exe
[%WINDOWS%]\sysupd.exe
[%WINDOWS%]\windowsupd1.exe
[%COMMON_APPDATA%]\svchost.exe
[%INTERNET_CACHE%]\Content.IE5\FM433H8X\xc36[1].exe
[%INTERNET_CACHE%]\Content.IE5\YHV37XV3\xc36[1].exe
[%LOCAL_APPDATA%]\Temp\win7300.tmp.exe
[%PROFILE_TEMP%]\patch211.exe
[%PROFILE_TEMP%]\patch231.exe
[%PROFILE_TEMP%]\patch261.exe
[%PROFILE_TEMP%]\win1487.tmp.exe
[%PROFILE_TEMP%]\win155.tmp.exe
[%PROFILE_TEMP%]\win199.tmp.exe
[%PROFILE_TEMP%]\win207.tmp.exe
[%PROFILE_TEMP%]\win3C3.tmp.exe
[%PROFILE_TEMP%]\win3E0.tmp.exe
[%PROFILE_TEMP%]\win??.tmp.exe
[%PROGRAM_FILES_COMMON%]\svchost.exe
[%SYSTEM%]\lsasvc.exe
[%SYSTEM%]\qmopt.dll
[%WINDOWS%]\main_uninstaller.exe
[%WINDOWS%]\svchost.exe
[%WINDOWS%]\Temp\win168.tmp.exe
[%WINDOWS%]\TEMP\win42D2.TMP.exe
[%WINDOWS%]\TEMP\win8054.TMP.exe
[%WINDOWS%]\Temp\win??.tmp.exe
[%PROFILE%]\Documents\Settings\winsys2f.dll
[%PROFILE_TEMP%]\patch221.exe
[%PROGRAM_FILES_COMMON%]\System\comio32.dll
[%SYSTEM%]\AlxRes070104.exe
[%SYSTEM%]\bpquskrppqh.dll
[%SYSTEM%]\cryptsa.dll
[%SYSTEM%]\drives\iedrv.EXE
[%SYSTEM%]\drives\iedrvctrl.exe
[%SYSTEM%]\drives\iexploree.dll
[%SYSTEM%]\drives\mslog.exe
[%SYSTEM%]\drives\pnpdrv.sys
[%SYSTEM%]\msantivir.exe
[%SYSTEM%]\msdirectx.sys
[%SYSTEM%]\MSHLP.DLL
[%SYSTEM%]\nortonav.dll
[%SYSTEM%]\scrsys070104.scr
[%SYSTEM%]\scrsys16_070104.scr
[%SYSTEM%]\tscore.dll
[%SYSTEM%]\tstime.exe
[%SYSTEM%]\udt.dll
[%SYSTEM%]\winsys16_070104.dll
[%SYSTEM%]\winsys32_070104.dll
[%SYSTEM%]\wintimer.bmp
[%WINDOWS%]\downloaded program files\activeinstall2.dll
[%WINDOWS%]\downloaded program files\tscash.inf
[%WINDOWS%]\downloaded program files\tscplugin class
[%WINDOWS%]\downloaded program files\tsplugin.dll
[%WINDOWS%]\iedrv.exe
[%WINDOWS%]\iedrvctrl.exe
[%WINDOWS%]\iexploree.dll
[%WINDOWS%]\system\sysupd.exe
[%WINDOWS%]\system\tscore.dll
[%WINDOWS%]\system\tstime.exe
[%WINDOWS%]\sysupd.exe
[%WINDOWS%]\windowsupd1.exe

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{16c7013f-912e-42ac-aa8e-a10a180dff51}
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_lanmandrv
HKEY_CLASSES_ROOT\clsid\{13258718-b804-4092-8496-55f80aedbf1f}
HKEY_CLASSES_ROOT\clsid\{a5845a98-ebda-4670-9de6-5201c506e741}
HKEY_CLASSES_ROOT\tsplugin.tscplugin
HKEY_CLASSES_ROOT\tsplugin.tscplugin.1
HKEY_CLASSES_ROOT\typelib\{203b711d-08ce-47b4-9a22-c99a4c22224c}
HKEY_LOCAL_MACHINE\software\classes\clsid\{13258718-b804-4092-8496-55f80aedbf1f}
HKEY_LOCAL_MACHINE\software\classes\tsplugin.tscplugin
HKEY_LOCAL_MACHINE\software\classes\tsplugin.tscplugin.1
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{13258718-b804-4092-8496-55f80aedbf1f}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{a5845a98-ebda-4670-9de6-5201c506e741}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%SYSTEM%]\sysupd.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%SYSTEM%]\tscore.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%SYSTEM%]\tstime.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\tsplugin.dll
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_suhdlog.sys
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\suhdlog.sys

Registry Values:
HKEY_CURRENT_USER\software\callagan
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\gooogle.bz\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\phishnigfix.biz\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\secureappz.com\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\senzatempo.biz\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\sextriere.com\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\xread.biz\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypta
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypta
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypta
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypta
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run

Removing Agent:

An up-to-date copy of ExterminateIt should detect and prevent infection from Agent.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Agent manually.

To completely manually remove Agent malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Agent.

  1. Use Task Manager to terminate the Agent process.
  2. Delete the original Agent file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Agent from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Agent!

Check now if your PC is infected with Agent

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
FrontPage.PWS32 DoS Symptoms
Removing InLook.01c Backdoor
Vxidl.BEW Trojan Information

Orconilo Downloader

Orconilo malware description and removal detail
Categories:Downloader
Also known as:

[Kaspersky]Trojan-Downloader.Win32.Small.akj;
[Other]Win32/Orconilo.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Orconilo:

An up-to-date copy of ExterminateIt should detect and prevent infection from Orconilo.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Orconilo manually.

To completely manually remove Orconilo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Orconilo.

  1. Use Task Manager to terminate the Orconilo process.
  2. Delete the original Orconilo file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Orconilo from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Orconilo!

Check now if your PC is infected with Orconilo

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
RCE471 Trojan Removal instruction
Backdoor.Mnets.Server Trojan Cleaner
Remove Backfont Trojan

Pigeon.AWKH Trojan

Pigeon.AWKH malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AWKH:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AWKH.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AWKH manually.

To completely manually remove Pigeon.AWKH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWKH.

  1. Use Task Manager to terminate the Pigeon.AWKH process.
  2. Delete the original Pigeon.AWKH file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Pigeon.AWKH from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.AWKH!

Check now if your PC is infected with Pigeon.AWKH

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
BZub.bmc Adware Removal instruction
Bancos.HLT Trojan Removal instruction

PP Trojan

PP malware description and removal detail
Categories:Trojan,Backdoor,Hacker Tool
Also known as:

[Kaspersky]Backdoor.PPCore.01;
[Computer Associates]Backdoor/Win32.PP.A,Win32.CoreFlood

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PP:

An up-to-date copy of ExterminateIt should detect and prevent infection from PP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove PP manually.

To completely manually remove PP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PP.

  1. Use Task Manager to terminate the PP process.
  2. Delete the original PP file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes PP from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of PP!

Check now if your PC is infected with PP

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Undernet RAT Removal
Removing Agent.rv Downloader

SillyDl.CHT Trojan

SillyDl.CHT malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CHT:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CHT.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.CHT manually.

To completely manually remove SillyDl.CHT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CHT.

  1. Use Task Manager to terminate the SillyDl.CHT process.
  2. Delete the original SillyDl.CHT file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes SillyDl.CHT from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of SillyDl.CHT!

Check now if your PC is infected with SillyDl.CHT

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Remove Zlob.Fam.DittoSideBar Trojan
Pigeon.AVLQ Trojan Information
IE.Host Adware Removal instruction

Remotecmd RAT

Remotecmd malware description and removal detail
Categories:RAT

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Remotecmd:

An up-to-date copy of ExterminateIt should detect and prevent infection from Remotecmd.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Remotecmd manually.

To completely manually remove Remotecmd malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Remotecmd.

  1. Use Task Manager to terminate the Remotecmd process.
  2. Delete the original Remotecmd file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Remotecmd from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Remotecmd!

Check now if your PC is infected with Remotecmd

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Removing NoXcape Backdoor
Bancos.HYS Trojan Symptoms
Removing VBS.Hatred Trojan
Vxidl.ACS Trojan Removal
Removing Macro Trojan

Kompanion Trojan

Kompanion malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Kohntark.Kompanion.268;
[Panda]Kohn.268,Komrad.631.Drp;
[Computer Associates]Komp

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Kompanion:

An up-to-date copy of ExterminateIt should detect and prevent infection from Kompanion.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Kompanion manually.

To completely manually remove Kompanion malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Kompanion.

  1. Use Task Manager to terminate the Kompanion process.
  2. Delete the original Kompanion file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Kompanion from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Kompanion!

Check now if your PC is infected with Kompanion

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
SillyDl.CRA Downloader Cleaner

Vxidl.APB Trojan

Vxidl.APB malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.APB:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.APB.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.APB manually.

To completely manually remove Vxidl.APB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.APB.

  1. Use Task Manager to terminate the Vxidl.APB process.
  2. Delete the original Vxidl.APB file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Vxidl.APB from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Vxidl.APB!

Check now if your PC is infected with Vxidl.APB

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Removing Peach Trojan
Bancos.DIC Trojan Information
Dowque.ABU Trojan Removal
Remove Pigeon.EWH Trojan

Deluxe.Fone.Code.Hacker Adware

Deluxe.Fone.Code.Hacker malware description and removal detail
Categories:Adware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Deluxe.Fone.Code.Hacker:

An up-to-date copy of ExterminateIt should detect and prevent infection from Deluxe.Fone.Code.Hacker.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Deluxe.Fone.Code.Hacker manually.

To completely manually remove Deluxe.Fone.Code.Hacker malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Deluxe.Fone.Code.Hacker.

  1. Use Task Manager to terminate the Deluxe.Fone.Code.Hacker process.
  2. Delete the original Deluxe.Fone.Code.Hacker file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Deluxe.Fone.Code.Hacker from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Deluxe.Fone.Code.Hacker!

Check now if your PC is infected with Deluxe.Fone.Code.Hacker

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Removing Win16.Stupid Trojan

Bancos.GOR Trojan

Bancos.GOR malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.GOR:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.GOR.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.GOR manually.

To completely manually remove Bancos.GOR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GOR.

  1. Use Task Manager to terminate the Bancos.GOR process.
  2. Delete the original Bancos.GOR file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Bancos.GOR from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Bancos.GOR!

Check now if your PC is infected with Bancos.GOR

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
LugSearch Trojan Removal instruction
Bancos.HIS Trojan Removal instruction
Bancos.GPO Trojan Information

SillyDl.CJL Trojan

SillyDl.CJL malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CJL:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CJL.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.CJL manually.

To completely manually remove SillyDl.CJL malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CJL.

  1. Use Task Manager to terminate the SillyDl.CJL process.
  2. Delete the original SillyDl.CJL file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes SillyDl.CJL from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of SillyDl.CJL!

Check now if your PC is infected with SillyDl.CJL

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Remove SpyArsenal.AIM.Logger Spyware
Remove Pigeon.AVHI Trojan
PornDialer Trojan Removal

PWS.QQPass Trojan

PWS.QQPass malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Kaspersky]Trojan.PSW.QQpass.a,Trojan.PSW.QQpass.s,Trojan.PSW.QQeye.201;
[McAfee]PWS-QQPass,PWS-QQPASS;
[F-Prot]security risk or a "backdoor" program;
[Panda]Trojan Horse.LC,Trojan Horse,Trj/QQeye.6.3;
[Computer Associates]Win32/QQPass.A!PWS!Trojan,Win32/PSW.QQpass.S!Trojan,Win32/QQpass.201!PWS!Trojan;
[Other]Trojan-PSW.Win32.QQPass.oz,Trojan-PSW.Win32.QQPass.ly

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PWS.QQPass:

An up-to-date copy of ExterminateIt should detect and prevent infection from PWS.QQPass.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove PWS.QQPass manually.

To completely manually remove PWS.QQPass malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PWS.QQPass.

  1. Use Task Manager to terminate the PWS.QQPass process.
  2. Delete the original PWS.QQPass file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes PWS.QQPass from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of PWS.QQPass!

Check now if your PC is infected with PWS.QQPass

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Win32.Killav.bl Worm Cleaner
Small.abk Trojan Information
Propel RAT Symptoms
Mail Trojan Removal instruction

AntiPascal Trojan

AntiPascal malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing AntiPascal:

An up-to-date copy of ExterminateIt should detect and prevent infection from AntiPascal.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove AntiPascal manually.

To completely manually remove AntiPascal malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AntiPascal.

  1. Use Task Manager to terminate the AntiPascal process.
  2. Delete the original AntiPascal file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes AntiPascal from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of AntiPascal!

Check now if your PC is infected with AntiPascal

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Express.III Trojan Removal
Crawen Trojan Symptoms
Remove Witch.Control Backdoor
System.Sleuth Spyware Symptoms

SillyDl.DAK Trojan

SillyDl.DAK malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.DAK:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.DAK.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.DAK manually.

To completely manually remove SillyDl.DAK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.DAK.

  1. Use Task Manager to terminate the SillyDl.DAK process.
  2. Delete the original SillyDl.DAK file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes SillyDl.DAK from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of SillyDl.DAK!

Check now if your PC is infected with SillyDl.DAK

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
Excel95Macro.Laroux Trojan Symptoms

Bat.Av.Virus Trojan

Bat.Av.Virus malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan.BAT.Avir.13;
[Eset]BAT/Avir.14 trojan;
[Panda]BAT/FakeAV;
[Computer Associates]Bat/Av_Virus.Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bat.Av.Virus:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bat.Av.Virus.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bat.Av.Virus manually.

To completely manually remove Bat.Av.Virus malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bat.Av.Virus.

  1. Use Task Manager to terminate the Bat.Av.Virus process.
  2. Delete the original Bat.Av.Virus file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Bat.Av.Virus from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Bat.Av.Virus!

Check now if your PC is infected with Bat.Av.Virus

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
CWS.AFF.WinShow Hijacker Information
Removing Spyware.Nuker Trojan

SillyDl.CJD Trojan

SillyDl.CJD malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CJD:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CJD.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.CJD manually.

To completely manually remove SillyDl.CJD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CJD.

  1. Use Task Manager to terminate the SillyDl.CJD process.
  2. Delete the original SillyDl.CJD file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes SillyDl.CJD from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of SillyDl.CJD!

Check now if your PC is infected with SillyDl.CJD

You can buy full version of ExterminateIt at RegNow.com.


Also Be Aware of the Following Threats:
SillyDl.CMC Trojan Information
Remove Pigeon.AFM Trojan
Removing Vxidl.ACG Trojan
Remove Ac3 Downloader
KeyLog.KLogger Trojan Information