Remove Malware and Viruses

Doomob malware description and removal detail
Categories:Trojan,Adware,Backdoor
Also known as:

[Panda]Trojan Horse;
[Computer Associates]Backdoor/Doomob.A!Server,Win32.Scorpech

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Doomob:

An up-to-date copy of ExterminateIt should detect and prevent infection from Doomob.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Doomob manually.

To completely manually remove Doomob malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Doomob.

1. Use Task Manager to terminate the Doomob process.
2. Delete the original Doomob file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.AGN Trojan
Remove CMD32 Trojan
Remove Pigeon.AWFY Trojan
Remove Pigeon.EMK Trojan
Remove Ticoft Trojan

Marketscore.Internet.Accelerator malware description and removal detail
Categories:Spyware
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\osmim.dll
[%WINDOWS%]\downloaded program files\nsconfig.dll
[%WINDOWS%]\downloaded program files\nsconfig.inf

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Marketscore.Internet.Accelerator:

Files:
[%SYSTEM%]\osmim.dll
[%WINDOWS%]\downloaded program files\nsconfig.dll
[%WINDOWS%]\downloaded program files\nsconfig.inf

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\nsconfig.dll

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Marketscore.Internet.Accelerator:

An up-to-date copy of ExterminateIt should detect and prevent infection from Marketscore.Internet.Accelerator.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Marketscore.Internet.Accelerator manually.

To completely manually remove Marketscore.Internet.Accelerator malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Marketscore.Internet.Accelerator.

1. Use Task Manager to terminate the Marketscore.Internet.Accelerator process.
2. Delete the original Marketscore.Internet.Accelerator file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.AWGD Trojan
Remove SillyDl.CBC Trojan
Remove Starline RAT
Remove Vxidl.ART Trojan
Remove Virus Trojan

SVA malware description and removal detail
Categories:Trojan
Also known as:

[McAfee]SVA;
[F-Prot]destructive program;
[Panda]Trj/SVA;
[Computer Associates]Win32/SVA!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SVA:

An up-to-date copy of ExterminateIt should detect and prevent infection from SVA.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove SVA manually.

To completely manually remove SVA malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with SVA.

1. Use Task Manager to terminate the SVA process.
2. Delete the original SVA file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SillyDl.CFJ Trojan
Remove BAT.DeltreeY Trojan
Remove Direct.Revenue Adware
Remove Kali Trojan
Remove Complete.Keystroke.Logger Spyware

Vxidl.AFN malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AFN:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AFN.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Vxidl.AFN manually.

To completely manually remove Vxidl.AFN malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Vxidl.AFN.

1. Use Task Manager to terminate the Vxidl.AFN process.
2. Delete the original Vxidl.AFN file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Fizzle.Wizzle.Entertainment.Searchbar Toolbar
Remove Acropolis Trojan
Remove Hax.Console DoS
Remove Complete.Keystroke.Logger Spyware
Remove Hackers.Black.Tools Trojan

SillyDl.CFJ malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CFJ:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CFJ.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove SillyDl.CFJ manually.

To completely manually remove SillyDl.CFJ malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with SillyDl.CFJ.

1. Use Task Manager to terminate the SillyDl.CFJ process.
2. Delete the original SillyDl.CFJ file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Kali Trojan
Remove OTX.Preloader Downloader
Remove IRC.Zapchast Backdoor
Remove Desktop.Detective Spyware
Remove Pripi Trojan

Yagoda malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.Yagoda;
[McAfee]BackDoor-OA;
[F-Prot]security risk or a "backdoor" program;
[Panda]Bck/Yagoda

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Yagoda:

An up-to-date copy of ExterminateIt should detect and prevent infection from Yagoda.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Yagoda manually.

To completely manually remove Yagoda malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Yagoda.

1. Use Task Manager to terminate the Yagoda process.
2. Delete the original Yagoda file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.AVMW Trojan
Remove CB Trojan
Remove Swine.Flu Trojan
Remove Tedon Trojan
Remove Spy.Striker Trojan

Filuor malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Filuor:

An up-to-date copy of ExterminateIt should detect and prevent infection from Filuor.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Filuor manually.

To completely manually remove Filuor malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Filuor.

1. Use Task Manager to terminate the Filuor process.
2. Delete the original Filuor file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove DriverA Trojan
Remove SillyDl.BCV Trojan
Remove IRC.Zapchast Backdoor
Remove PWS.BR.gen Trojan
Remove Vxidl.BEE Trojan

Win32.PWS.Ring0 malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Kaspersky]TrojanDropper.Win32.Small.v;
[Eset]Win32/PSW.Ring0.B trojan;
[Panda]Trj/PSW.Ring0.B;
[Computer Associates]Win32.SubSeven.L,Win32/Ring0.B!PWS!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win32.PWS.Ring0:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win32.PWS.Ring0.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Win32.PWS.Ring0 manually.

To completely manually remove Win32.PWS.Ring0 malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Win32.PWS.Ring0.

1. Use Task Manager to terminate the Win32.PWS.Ring0 process.
2. Delete the original Win32.PWS.Ring0 file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove VB.cc Adware
Remove SillyDl.CXF Trojan
Remove Pigeon.DSF Trojan
Remove Kyjak Trojan
Remove Swine.Flu Trojan

Desktop.Detective malware description and removal detail
Categories:Spyware
Also known as:

[F-Prot]->DDController.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Desktop.Detective:

An up-to-date copy of ExterminateIt should detect and prevent infection from Desktop.Detective.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Desktop.Detective manually.

To completely manually remove Desktop.Detective malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Desktop.Detective.

1. Use Task Manager to terminate the Desktop.Detective process.
2. Delete the original Desktop.Detective file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Emapadserver Tracking Cookie
Remove Vxidl.ATX Trojan
Remove EZ.Keylogger Spyware
Remove Pigeon.AVVM Trojan
Remove BackDoor.AMQ Trojan

Univ.ow malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Virus.DOS.Trivial.46.a,VCL_MUT.Empire.248;
[McAfee]Univ.ow/d,Univ.ow/a;
[F-Prot]VCL.248 - Dropper;
[Panda]Univ,Univ.AP;
[Computer Associates]Trivial 46

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Univ.ow:

An up-to-date copy of ExterminateIt should detect and prevent infection from Univ.ow.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Univ.ow manually.

To completely manually remove Univ.ow malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Univ.ow.

1. Use Task Manager to terminate the Univ.ow process.
2. Delete the original Univ.ow file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Sathi Trojan
Remove Leprosy.Seneca Trojan
Remove Bancos.FZD Trojan
Remove SillyDl.CFI Trojan
Remove Agent.gd Downloader

Remote.Config malware description and removal detail
Categories:RAT

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Remote.Config:

An up-to-date copy of ExterminateIt should detect and prevent infection from Remote.Config.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Remote.Config manually.

To completely manually remove Remote.Config malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Remote.Config.

1. Use Task Manager to terminate the Remote.Config process.
2. Delete the original Remote.Config file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SillyDl.CFI Trojan
Remove Spy.SCKeyLog Trojan
Remove TinyM Downloader
Remove PWS.BR.gen Trojan
Remove FDoS.Udp.Storm DoS

Vxidl.AXK malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AXK:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AXK.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Vxidl.AXK manually.

To completely manually remove Vxidl.AXK malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Vxidl.AXK.

1. Use Task Manager to terminate the Vxidl.AXK process.
2. Delete the original Vxidl.AXK file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.EPE Trojan
Remove Sathi Trojan
Remove Pigeon.AVFE Trojan
Remove Cleanator Ransomware
Remove East Trojan

Sparta malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.Spartadoor.10,Backdoor.Spartadoor.11.a,Backdoor.Spartadoor.11.b;
[McAfee]BackDoor-AFC;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program,Bck/Spartadoor.11;
[Computer Associates]Backdoor/Sparta!Server,Backdoor/Spartadoor.B!Server,Win32.Sparta.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Sparta:

An up-to-date copy of ExterminateIt should detect and prevent infection from Sparta.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Sparta manually.

To completely manually remove Sparta malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Sparta.

1. Use Task Manager to terminate the Sparta process.
2. Delete the original Sparta file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.HGG Trojan
Remove AOLPS.OG2!Trojan Trojan
Remove Tedon Trojan
Remove Bancos.GAQ Trojan
Remove PHP.Chaploit Trojan

rute malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing rute:

An up-to-date copy of ExterminateIt should detect and prevent infection from rute.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove rute manually.

To completely manually remove rute malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with rute.

1. Use Task Manager to terminate the rute process.
2. Delete the original rute file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Win32.DoS.Fedup Hacker Tool
Remove PWS.Fantast.gen Trojan
Remove Extreme.DM.com Tracking Cookie
Remove FDoS.Udp.Storm DoS
Remove Spy.SCKeyLog Trojan

EZ.Keylogger malware description and removal detail
Categories:Spyware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting EZ.Keylogger:

Folders:
[%PROGRAM_FILES%]\KSS
[%WINDOWS%]\Downloaded Installations\{9A09E822-4CC3-4DFB-B558-0D0600E1CD4}

Registry Keys:
HKEY_CURRENT_USER\software\microsoft\installer\assemblies\c:|program files|kss|syslog|syslog.exe
HKEY_CURRENT_USER\software\microsoft\installer\features\8918c93cd3293964096250925453f981
HKEY_CURRENT_USER\software\microsoft\installer\products\8918c93cd3293964096250925453f981
HKEY_CURRENT_USER\software\microsoft\installer\upgradecodes\8c0dcef348b156b4695df4db1b6d04d5
HKEY_LOCAL_MACHINE\software\microsoft\windows\current version\installer\upgrade codes\8c0dcef348b156b4695df4db1b6d04d5
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{c39c8198-923d-4693-9026-052945359f18}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

Removing EZ.Keylogger:

An up-to-date copy of ExterminateIt should detect and prevent infection from EZ.Keylogger.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove EZ.Keylogger manually.

To completely manually remove EZ.Keylogger malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with EZ.Keylogger.

1. Use Task Manager to terminate the EZ.Keylogger process.
2. Delete the original EZ.Keylogger file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Dosh RAT
Remove OTX.Preloader Downloader
Remove TrustyHound Spyware
Remove WordMacro.MadDog Trojan
Remove Pripi Trojan

Pigeon.EZZ malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EZZ:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EZZ.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Pigeon.EZZ manually.

To completely manually remove Pigeon.EZZ malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Pigeon.EZZ.

1. Use Task Manager to terminate the Pigeon.EZZ process.
2. Delete the original Pigeon.EZZ file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Dewkin Trojan
Remove Grog.Villino Trojan
Remove OutsBot Trojan
Remove OTX.Preloader Downloader
Remove ShipUp Trojan

Pincher malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pincher:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pincher.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Pincher manually.

To completely manually remove Pincher malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Pincher.

1. Use Task Manager to terminate the Pincher process.
2. Delete the original Pincher file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove TinyM Downloader
Remove SillyDl.CFI Trojan
Remove Fizzle.Wizzle.Entertainment.Searchbar Toolbar
Remove Bancos.AGN Trojan
Remove Pigeon.AHL Trojan

Pigeon.EMK malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EMK:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EMK.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Pigeon.EMK manually.

To completely manually remove Pigeon.EMK malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Pigeon.EMK.

1. Use Task Manager to terminate the Pigeon.EMK process.
2. Delete the original Pigeon.EMK file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.AVVM Trojan
Remove Ebates.Moe.Money.Maker BHO
Remove BAT.DeltreeY Trojan
Remove FDoS.ICQPager Trojan
Remove Pigeon.AKR Trojan

NetPal malware description and removal detail
Categories:BHO,Hijacker,Toolbar
Also known as:

[Kaspersky]Trojan-Dropper.Win32.Small.ff;
[Panda]Adware/NetPals;
[Other]Adware.Netpal
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\kernellos.dll
[%SYSTEM%]\n3tpa1.dll
[%SYSTEM%]\netpal.dll
[%SYSTEM%]\netpals.dll
[%WINDOWS%]\downloaded program files\netpal.inf
[%WINDOWS%]\lastgood\downloaded program files\netpal.inf
[%WINDOWS%]\lastgood\system32\netpal.dll
[%WINDOWS%]\system\n3tpa1.dll
[%WINDOWS%]\system\netpal.dll
[%WINDOWS%]\system\netpals.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting NetPal:

Files:
[%SYSTEM%]\kernellos.dll
[%SYSTEM%]\n3tpa1.dll
[%SYSTEM%]\netpal.dll
[%SYSTEM%]\netpals.dll
[%WINDOWS%]\downloaded program files\netpal.inf
[%WINDOWS%]\lastgood\downloaded program files\netpal.inf
[%WINDOWS%]\lastgood\system32\netpal.dll
[%WINDOWS%]\system\n3tpa1.dll
[%WINDOWS%]\system\netpal.dll
[%WINDOWS%]\system\netpals.dll

Folders:
[%FAVORITES%]\netpal games

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{000E7270-CC7A-0786-8E7A-DA09B51938A6}
HKEY_CLASSES_ROOT\typelib\{0cf28135-b1dc-4f50-ab58-7cf5701a6ed6}
HKEY_CURRENT_USER\software\destiny
HKEY_LOCAL_MACHINE\software\classes\clsid\{000e7270-cc7a-0786-8e7a-da09b51938a6}
HKEY_LOCAL_MACHINE\software\destiny
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000E7270-CC7A-0786-8E7A-DA09B51938A6}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\dmo
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\npo
HKEY_CLASSES_ROOT\clsid\{000e7270-cc7a-0786-8e7a-da09b51938a6}
HKEY_CLASSES_ROOT\clsid\{6085fb5b-c281-4b9c-8e5d-d2792ea30d2f}
HKEY_CLASSES_ROOT\netpaliexplore.netpal
HKEY_CLASSES_ROOT\netpaliexplore.netpal.1
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{000e7270-cc7a-0786-8e7a-da09b51938a6}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{6085fb5b-c281-4b9c-8e5d-d2792ea30d2f}
HKEY_CLASSES_ROOT\typelib\{984654d4-ae5d-40f8-98b3-f018c2d39bce}
HKEY_LOCAL_MACHINE\software\classes\clsid\{6085fb5b-c281-4b9c-8e5d-d2792ea30d2f}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{000e7270-cc7a-0786-8e7a-da09b51938a6}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6085fb5b-c281-4b9c-8e5d-d2792ea30d2f}

Removing NetPal:

An up-to-date copy of ExterminateIt should detect and prevent infection from NetPal.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove NetPal manually.

To completely manually remove NetPal malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with NetPal.

1. Use Task Manager to terminate the NetPal process.
2. Delete the original NetPal file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove TrustyHound Spyware
Remove SpaMacIDaL Trojan
Remove Spy.SCKeyLog Trojan
Remove Pigeon.AKR Trojan
Remove REG.Drakken Trojan

Dosh malware description and removal detail
Categories:RAT
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\wincp.exe
[%WINDOWS%]\windpd.bqi

In order to ensure that the Dosh is launched automatically each time the system is booted, the Dosh adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\wincp.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Dosh:

Files:
[%WINDOWS%]\wincp.exe
[%WINDOWS%]\windpd.bqi

Removing Dosh:

An up-to-date copy of ExterminateIt should detect and prevent infection from Dosh.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Dosh manually.

To completely manually remove Dosh malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Dosh.

1. Use Task Manager to terminate the Dosh process.
2. Delete the original Dosh file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SillyFDC.Y Worm
Remove Bancos.HNA Trojan
Remove Pigeon.AVMW Trojan
Remove SillyDl.CBC Trojan
Remove Bancos.GXZ Trojan

SillyDl.CBC malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CBC:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CBC.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove SillyDl.CBC manually.

To completely manually remove SillyDl.CBC malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with SillyDl.CBC.

1. Use Task Manager to terminate the SillyDl.CBC process.
2. Delete the original SillyDl.CBC file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove FTP.SSSrv Trojan
Remove Pigeon.AWGD Trojan
Remove CMD32 Trojan
Remove Direct.Revenue Adware
Remove Qwertos Backdoor

Pigeon.EQL malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EQL:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EQL.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Pigeon.EQL manually.

To completely manually remove Pigeon.EQL malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Pigeon.EQL.

1. Use Task Manager to terminate the Pigeon.EQL process.
2. Delete the original Pigeon.EQL file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.GAQ Trojan
Remove Pigeon.AFR Trojan
Remove SearchExe.cookie Tracking Cookie
Remove SpaMacIDaL Trojan
Remove Mudrop Trojan

ICQ.Patch malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]packed: ExePack

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing ICQ.Patch:

An up-to-date copy of ExterminateIt should detect and prevent infection from ICQ.Patch.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove ICQ.Patch manually.

To completely manually remove ICQ.Patch malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with ICQ.Patch.

1. Use Task Manager to terminate the ICQ.Patch process.
2. Delete the original ICQ.Patch file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.AWFY Trojan
Remove VB.ia Trojan
Remove Punky Trojan
Remove Coldfeet Trojan
Remove SpyMon Spyware

Ebates.Moe.Money.Maker malware description and removal detail
Categories:BHO

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Ebates.Moe.Money.Maker:

Folders:
[%PROGRAMS%]\ebates moe money maker
[%PROGRAM_FILES%]\ebatesmoemoneymaker4

Registry Keys:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{F2B441CC-E026-47FB-BDC3-A07750FA3D2C}
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\ebates.
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\unebmm10350
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\{f2b441cc-e026-47fb-bdc3-a07750fa3d2c}

Removing Ebates.Moe.Money.Maker:

An up-to-date copy of ExterminateIt should detect and prevent infection from Ebates.Moe.Money.Maker.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Ebates.Moe.Money.Maker manually.

To completely manually remove Ebates.Moe.Money.Maker malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Ebates.Moe.Money.Maker.

1. Use Task Manager to terminate the Ebates.Moe.Money.Maker process.
2. Delete the original Ebates.Moe.Money.Maker file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Complete.Keystroke.Logger Spyware
Remove Green.Caterpillar Trojan
Remove Bancos.IJM Trojan
Remove OTX.Preloader Downloader
Remove Rage Trojan

FTP.SSSrv malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.FTP.SSSrv;
[McAfee]BackDoor-AGG;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program;
[Computer Associates]Backdoor/FTP.SSSrv

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing FTP.SSSrv:

An up-to-date copy of ExterminateIt should detect and prevent infection from FTP.SSSrv.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove FTP.SSSrv manually.

To completely manually remove FTP.SSSrv malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with FTP.SSSrv.

1. Use Task Manager to terminate the FTP.SSSrv process.
2. Delete the original FTP.SSSrv file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove ProBot.Activity.Monitor Spyware
Remove FDoS.ICQPager Trojan
Remove SillyDl.BCV Trojan
Remove Clickxchange.com Tracking Cookie
Remove WhlpIntOvrflw.A!exploit Trojan

SH.Hijack malware description and removal detail
Categories:Worm,Hijacker
Also known as:

[Panda]Worm Generic,Linux/Hijack;
[Computer Associates]SH.Hijack.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SH.Hijack:

An up-to-date copy of ExterminateIt should detect and prevent infection from SH.Hijack.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove SH.Hijack manually.

To completely manually remove SH.Hijack malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with SH.Hijack.

1. Use Task Manager to terminate the SH.Hijack process.
2. Delete the original SH.Hijack file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Complete.Keystroke.Logger Spyware
Remove BAT.Ditty Trojan
Remove VB.ia Trojan
Remove Bat.Zor Trojan
Remove Pigeon.AHL Trojan

Mudrop malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Mudrop:

An up-to-date copy of ExterminateIt should detect and prevent infection from Mudrop.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Mudrop manually.

To completely manually remove Mudrop malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Mudrop.

1. Use Task Manager to terminate the Mudrop process.
2. Delete the original Mudrop file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove VB.cc Adware
Remove Taskmom Trojan
Remove Progenic.Mail Backdoor
Remove Pigeon.AVFE Trojan
Remove QDown Downloader

CB malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing CB:

An up-to-date copy of ExterminateIt should detect and prevent infection from CB.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove CB manually.

To completely manually remove CB malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with CB.

1. Use Task Manager to terminate the CB process.
2. Delete the original CB file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.DSF Trojan
Remove SillyDl.BCV Trojan
Remove Appkiller.src Trojan
Remove Pigeon.AWFY Trojan
Remove ProBot.Activity.Monitor Spyware

Bancos.GBS malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.GBS:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.GBS.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Bancos.GBS manually.

To completely manually remove Bancos.GBS malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Bancos.GBS.

1. Use Task Manager to terminate the Bancos.GBS process.
2. Delete the original Bancos.GBS file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.AFR Trojan
Remove As1.falkag.de Tracking Cookie
Remove Upidet Trojan
Remove Spy.Striker Trojan
Remove Searchtraffic Tracking Cookie

Upidet malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Backdoor.Win32.Vb.ate;
[Other]Win32/Upidet.A,Backdoor.Trojan
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\mschkdsk.exe

In order to ensure that the Upidet is launched automatically each time the system is booted, the Upidet adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\mschkdsk.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Upidet:

Files:
[%SYSTEM%]\mschkdsk.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Upidet:

An up-to-date copy of ExterminateIt should detect and prevent infection from Upidet.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Upidet manually.

To completely manually remove Upidet malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Upidet.

1. Use Task Manager to terminate the Upidet process.
2. Delete the original Upidet file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove BackDoor.AMQ Trojan
Remove Optix.Pager Backdoor
Remove Pigeon.AKR Trojan
Remove Direct.Revenue Adware
Remove Bancos.GXZ Trojan