Remove Malware and Viruses

Hacker's.Heaven malware description and removal detail
Categories:RAT,Hacker Tool

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Hacker's.Heaven:

An up-to-date copy of ExterminateIt should detect and prevent infection from Hacker's.Heaven.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Hacker's.Heaven manually.

To completely manually remove Hacker's.Heaven malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hacker's.Heaven.

1. Use Task Manager to terminate the Hacker's.Heaven process.
2. Delete the original Hacker's.Heaven file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SillyDl.CTN Trojan
Remove EZ.Keylogger Spyware
Remove SDTE Trojan
Remove Consume Hostile Code
Remove Win32.Sincom.ax Trojan

Vxidl.AXP malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AXP:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AXP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.AXP manually.

To completely manually remove Vxidl.AXP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AXP.

1. Use Task Manager to terminate the Vxidl.AXP process.
2. Delete the original Vxidl.AXP file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Backdoor.VB.id Trojan
Remove Hijacker Hostile Code
Remove Pigeon.AUZZ Trojan
Remove Banker.abs Trojan
Remove Pigeon.ASS Trojan

PSW.Kuang malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Panda]Trj/PSW.Kuang.H

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PSW.Kuang:

An up-to-date copy of ExterminateIt should detect and prevent infection from PSW.Kuang.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove PSW.Kuang manually.

To completely manually remove PSW.Kuang malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.Kuang.

1. Use Task Manager to terminate the PSW.Kuang process.
2. Delete the original PSW.Kuang file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove PSW.MiniLD.exe Trojan
Remove WINS.Kill DoS
Remove Bancos.GTL Trojan
Remove BAT.DeltreeY Trojan
Remove Marketscore.Internet.Accelerator Spyware

HFN malware description and removal detail
Categories:RAT

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing HFN:

An up-to-date copy of ExterminateIt should detect and prevent infection from HFN.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove HFN manually.

To completely manually remove HFN malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HFN.

1. Use Task Manager to terminate the HFN process.
2. Delete the original HFN file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Zlob.Fam.PornoPlayer Trojan
Remove Pigeon.ASS Trojan
Remove Pigeon.ANO Trojan
Remove Bancos.AEG Trojan
Remove CWS.QTTasks Hijacker

DirectNetAdvertising.com malware description and removal detail
Categories:Adware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing DirectNetAdvertising.com:

An up-to-date copy of ExterminateIt should detect and prevent infection from DirectNetAdvertising.com.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove DirectNetAdvertising.com manually.

To completely manually remove DirectNetAdvertising.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DirectNetAdvertising.com.

1. Use Task Manager to terminate the DirectNetAdvertising.com process.
2. Delete the original DirectNetAdvertising.com file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Delf.kc Backdoor
Remove Vxidl.AII Trojan
Remove Bancos.GJU Trojan
Remove Zlob Search Hijacker Hijacker
Remove TrojanDownloader.Win32.Small.fq Trojan

Socha malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Computer Associates]Socha

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Socha:

An up-to-date copy of ExterminateIt should detect and prevent infection from Socha.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Socha manually.

To completely manually remove Socha malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Socha.

1. Use Task Manager to terminate the Socha process.
2. Delete the original Socha file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Exception.Manager RAT
Remove McqUpdater Adware
Remove Sparta Backdoor
Remove Sathi Trojan
Remove BAT.DeltreeY Trojan

Bagle.da malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bagle.da:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bagle.da.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Bagle.da manually.

To completely manually remove Bagle.da malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Bagle.da.

1. Use Task Manager to terminate the Bagle.da process.
2. Delete the original Bagle.da file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Hal Trojan
Remove Filuor Trojan
Remove OnlineGuard Ransomware
Remove Z0X Trojan
Remove Phishbank.AMF Trojan

CGI.Bin malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing CGI.Bin:

An up-to-date copy of ExterminateIt should detect and prevent infection from CGI.Bin.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove CGI.Bin manually.

To completely manually remove CGI.Bin malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with CGI.Bin.

1. Use Task Manager to terminate the CGI.Bin process.
2. Delete the original CGI.Bin file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SillyDl.CCB Trojan
Remove Vxidl.BAH Trojan
Remove YAT.beta Backdoor
Remove SH.Hijack Worm
Remove TrojanDownloader.Win32.Small.dg Trojan

Adware.Cinmus malware description and removal detail
Categories:Trojan,Adware
Also known as:

[Kaspersky]AdWare.Win32.Cinmus.a,AdWare.Win32.Cinmus.b;
[McAfee]Adware.Cinmus,Adware-Cinmus;
[Other]Cinmus.AA.dropper,Trojan:Win32/Cinmeng,Trojan.Cinmeng
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\drivers\acpidisk.sys
[%SYSTEM%]\mprmsgse.axz
[%SYSTEM%]\mscpx32r.det
[%PROFILE_TEMP%]\acpidisk.sys
[%PROFILE_TEMP%]\DoSSSetup.dll
[%SYSTEM%]\mallgoo2.dll
[%SYSTEM%]\OLD65.tmp
[%SYSTEM%]\scrsys061130.scr
[%SYSTEM%]\scrsys16_061130.scr
[%SYSTEM%]\webhit.ini
[%SYSTEM%]\webhit.ini.tmp
[%SYSTEM%]\windown1.exe
[%SYSTEM%]\winsys16_061130.dll
[%SYSTEM%]\winsys32_061130.dll
[%WINDOWS%]\Temp\~my1.tmp
[%WINDOWS%]\w1\ad107.exe
[%WINDOWS%]\w1\bind_50016.exe
[%WINDOWS%]\w1\dodolook082.exe
[%WINDOWS%]\w1\w1.exe
[%WINDOWS%]\windown1\ad107.exe
[%WINDOWS%]\windown1\dodolook082.exe
[%WINDOWS%]\windown1\tshz134.exe

In order to ensure that the Adware.Cinmus is launched automatically each time the system is booted, the Adware.Cinmus adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\windown1.exe
[%WINDOWS%]\w1\ad107.exe
[%WINDOWS%]\w1\bind_50016.exe
[%WINDOWS%]\w1\dodolook082.exe
[%WINDOWS%]\w1\w1.exe
[%WINDOWS%]\windown1\ad107.exe
[%WINDOWS%]\windown1\dodolook082.exe
[%WINDOWS%]\windown1\tshz134.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Adware.Cinmus:

Files:
[%SYSTEM%]\drivers\acpidisk.sys
[%SYSTEM%]\mprmsgse.axz
[%SYSTEM%]\mscpx32r.det
[%PROFILE_TEMP%]\acpidisk.sys
[%PROFILE_TEMP%]\DoSSSetup.dll
[%SYSTEM%]\mallgoo2.dll
[%SYSTEM%]\OLD65.tmp
[%SYSTEM%]\scrsys061130.scr
[%SYSTEM%]\scrsys16_061130.scr
[%SYSTEM%]\webhit.ini
[%SYSTEM%]\webhit.ini.tmp
[%SYSTEM%]\windown1.exe
[%SYSTEM%]\winsys16_061130.dll
[%SYSTEM%]\winsys32_061130.dll
[%WINDOWS%]\Temp\~my1.tmp
[%WINDOWS%]\w1\ad107.exe
[%WINDOWS%]\w1\bind_50016.exe
[%WINDOWS%]\w1\dodolook082.exe
[%WINDOWS%]\w1\w1.exe
[%WINDOWS%]\windown1\ad107.exe
[%WINDOWS%]\windown1\dodolook082.exe
[%WINDOWS%]\windown1\tshz134.exe

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{385ab8c6-fb22-4d17-8834-064e2ba0a6f0}
HKEY_CLASSES_ROOT\interface\{385ab8c4-fb22-4d17-8834-064e2ba0a6f0}
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_acpidisk
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\acpidisk
HKEY_CLASSES_ROOT\clsid\{3b30b48f-617d-4f73-a20f-d3d54357f103}
HKEY_CLASSES_ROOT\typelib\{267d696c-5b9b-44d5-b467-684b01ebd665}
HKEY_LOCAL_MACHINE\software\microsoft\idscnp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3b30b48f-617d-4f73-a20f-d3d54357f103}

Removing Adware.Cinmus:

An up-to-date copy of ExterminateIt should detect and prevent infection from Adware.Cinmus.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Adware.Cinmus manually.

To completely manually remove Adware.Cinmus malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Adware.Cinmus.

1. Use Task Manager to terminate the Adware.Cinmus process.
2. Delete the original Adware.Cinmus file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Vxidl.BFH Trojan
Remove WhenUSearch Hijacker
Remove SrvCmd Trojan
Remove Win32.Stash Trojan
Remove Senna.Spy Backdoor

PWS.MSNSteal malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Kaspersky]Trojan.PSW.Ravenpass.b;
[McAfee]PWS-MSNSteal;
[F-Prot]security risk or a "backdoor" program;
[Panda]Trojan Horse;
[Computer Associates]Win32.PSW.Ravenpass.20.B,Win32/Ravenpass.b!PWS!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PWS.MSNSteal:

An up-to-date copy of ExterminateIt should detect and prevent infection from PWS.MSNSteal.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove PWS.MSNSteal manually.

To completely manually remove PWS.MSNSteal malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with PWS.MSNSteal.

1. Use Task Manager to terminate the PWS.MSNSteal process.
2. Delete the original PWS.MSNSteal file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Snowdoor.Server Trojan
Remove Vxidl.AMQ Trojan
Remove Coreflood Trojan
Remove SDTE Trojan
Remove Eachint Downloader

DialerActiveX malware description and removal detail
Categories:Adware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting DialerActiveX:

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{8702d9e1-890b-4bf2-a233-fa44e582b2de}
HKEY_CLASSES_ROOT\clsid\{d53b810f-6219-11d4-95b6-0040950375e7}

Removing DialerActiveX:

An up-to-date copy of ExterminateIt should detect and prevent infection from DialerActiveX.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove DialerActiveX manually.

To completely manually remove DialerActiveX malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with DialerActiveX.

1. Use Task Manager to terminate the DialerActiveX process.
2. Delete the original DialerActiveX file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Posam Trojan
Remove CMDGet Trojan
Remove JS.Sepuc Trojan
Remove Win32.Adult Trojan
Remove Pigeon.AVFE Trojan

PSW.Webmail malware description and removal detail
Categories:Trojan,Backdoor,Hacker Tool
Also known as:

[Eset]Win32/Bregol.A trojan;
[Computer Associates]Win32.PSW.Webmail,Win32/PWS.Greetings.Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PSW.Webmail:

An up-to-date copy of ExterminateIt should detect and prevent infection from PSW.Webmail.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove PSW.Webmail manually.

To completely manually remove PSW.Webmail malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with PSW.Webmail.

1. Use Task Manager to terminate the PSW.Webmail process.
2. Delete the original PSW.Webmail file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.GYM Trojan
Remove Boo's.MSN.Bomber DoS
Remove Vxidl.BFH Trojan
Remove End.of Trojan
Remove Bancos.HZX Trojan

Pigeon.AVGJ malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AVGJ:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AVGJ.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Pigeon.AVGJ manually.

To completely manually remove Pigeon.AVGJ malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Pigeon.AVGJ.

1. Use Task Manager to terminate the Pigeon.AVGJ process.
2. Delete the original Pigeon.AVGJ file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove DuckToy Backdoor
Remove SillyDl.DEB Trojan
Remove Qwertos Backdoor
Remove Natur715 Trojan
Remove Registration.Server.com Tracking Cookie

Bancos.GOS malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.GOS:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.GOS.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Bancos.GOS manually.

To completely manually remove Bancos.GOS malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Bancos.GOS.

1. Use Task Manager to terminate the Bancos.GOS process.
2. Delete the original Bancos.GOS file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Boo's.MSN.Bomber DoS
Remove EMCO.Remote.Shutdown RAT
Remove Bancos.FFS Trojan
Remove BootDr245 Trojan
Remove Pigeon.AVFE Trojan

StripPlayer malware description and removal detail
Categories:Adware,Downloader
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\activestripsetup.dll
[%WINDOWS%]\system\activestripsetup.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting StripPlayer:

Files:
[%SYSTEM%]\activestripsetup.dll
[%WINDOWS%]\system\activestripsetup.dll

Folders:
[%PROGRAM_FILES%]\strip-player

Registry Keys:
HKEY_CLASSES_ROOT\activestripsetup.egstripdownload
HKEY_CLASSES_ROOT\activestripsetup.egstripdownload.1
HKEY_CLASSES_ROOT\clsid\{357aa41a-b7a8-4632-a27d-5b980b25cf43}
HKEY_CLASSES_ROOT\clsid\{bc23f736-c5be-47fb-b459-1757933e5df3}
HKEY_CLASSES_ROOT\clsid\{e3f7205f-2ae0-4bf0-816b-2d24a5f20ec7}
HKEY_CLASSES_ROOT\interface\{bc23f736-c5be-47fb-b459-1757933e5df3}
HKEY_CLASSES_ROOT\typelib\{357aa41a-b7a8-4632-a27d-5b980b25cf43}

Removing StripPlayer:

An up-to-date copy of ExterminateIt should detect and prevent infection from StripPlayer.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove StripPlayer manually.

To completely manually remove StripPlayer malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with StripPlayer.

1. Use Task Manager to terminate the StripPlayer process.
2. Delete the original StripPlayer file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Netscope Hostile Code
Remove Vxidl.AII Trojan
Remove Pigeon.EQL Trojan
Remove Pigeon.AVSY Trojan
Remove DMLoad Downloader

Bancos.FXU malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.FXU:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.FXU.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Bancos.FXU manually.

To completely manually remove Bancos.FXU malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Bancos.FXU.

1. Use Task Manager to terminate the Bancos.FXU process.
2. Delete the original Bancos.FXU file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Hijacker Hostile Code
Remove Lame Trojan
Remove SaveNow.Download Adware
Remove QQshou Trojan
Remove SillyFDC.Y Worm

AOAnarchy malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing AOAnarchy:

An up-to-date copy of ExterminateIt should detect and prevent infection from AOAnarchy.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove AOAnarchy manually.

To completely manually remove AOAnarchy malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with AOAnarchy.

1. Use Task Manager to terminate the AOAnarchy process.
2. Delete the original AOAnarchy file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.HKZ Trojan
Remove TrojanDownloader.Win32.Dyfuca.cn Downloader
Remove Bancos.GJU Trojan
Remove BootDr245 Trojan
Remove JS.Dragdrop!exploit Trojan

Uptofind malware description and removal detail
Categories:Toolbar

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Uptofind:

Folders:
[%PROGRAM_FILES%]\Related Search

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{48a1ee0f-e7c6-4c46-9018-e0bb2dc9ee45}
HKEY_CLASSES_ROOT\clsid\{52bb33e3-d00f-4464-9250-4bc533f34f64}
HKEY_CLASSES_ROOT\clsid\{662064e8-8976-4d36-a770-2316362c99d5}
HKEY_CLASSES_ROOT\clsid\{685559fc-c836-43a2-b1ef-91b355f045e2}
HKEY_CLASSES_ROOT\codek.div5
HKEY_CLASSES_ROOT\codek.div5.1
HKEY_CLASSES_ROOT\interface\{12b92e82-8b7d-4a19-a2f1-431155478caf}
HKEY_CLASSES_ROOT\interface\{a3a08f60-b81c-401f-a99e-2b493dfb80bd}
HKEY_CLASSES_ROOT\relatedsearch.relatedsearchobj
HKEY_CLASSES_ROOT\relatedsearch.relatedsearchobj.1
HKEY_CLASSES_ROOT\typelib\{0e945e50-9cb7-4845-a2ce-b7a28f4c7122}
HKEY_CLASSES_ROOT\typelib\{5a3322c8-3ac6-471f-8be9-97803b9d581b}
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&related search
HKEY_CURRENT_USER\software\relatedsearch
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\related toolbar

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar

Removing Uptofind:

An up-to-date copy of ExterminateIt should detect and prevent infection from Uptofind.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Uptofind manually.

To completely manually remove Uptofind malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Uptofind.

1. Use Task Manager to terminate the Uptofind process.
2. Delete the original Uptofind file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove FDoS.Pestil Trojan
Remove JS.Dragdrop!exploit Trojan
Remove Pigeon.AKR Trojan
Remove Hax.Console DoS
Remove SmartClicks.com Tracking Cookie

Bancos.GYM malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.GYM:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.GYM.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Bancos.GYM manually.

To completely manually remove Bancos.GYM malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Bancos.GYM.

1. Use Task Manager to terminate the Bancos.GYM process.
2. Delete the original Bancos.GYM file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Search200 Adware
Remove Agobot.bq Trojan
Remove HVL.ListMaker RAT
Remove CMDGet Trojan
Remove Exception.Manager RAT

FastSearch malware description and removal detail
Categories:Toolbar
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\fsearchbar.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting FastSearch:

Files:
[%SYSTEM%]\fsearchbar.dll

Registry Keys:
HKEY_CLASSES_ROOT\appid\fsearchbar.dll
HKEY_CLASSES_ROOT\clsid\{044d9f9f-0ee0-4e9b-b89b-5ebca0f852cc}
HKEY_CLASSES_ROOT\fsearchbar.fbarstart
HKEY_CLASSES_ROOT\fsearchbar.fbarstart.1
HKEY_CLASSES_ROOT\fsearchbar.fsearchband
HKEY_CLASSES_ROOT\fsearchbar.fsearchband.1
HKEY_LOCAL_MACHINE\software\fsbar

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar

Removing FastSearch:

An up-to-date copy of ExterminateIt should detect and prevent infection from FastSearch.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove FastSearch manually.

To completely manually remove FastSearch malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with FastSearch.

1. Use Task Manager to terminate the FastSearch process.
2. Delete the original FastSearch file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Eliza Trojan
Remove WordMacro.MadDog Trojan
Remove Hackers.Black.Tools Trojan
Remove QDown Downloader
Remove Win32.Sbot Trojan

Lesson malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Torm.358,Rape.Paradis.300,Torm.205;
[McAfee]Lesson;
[Panda]Lesson_2.358,Lesson_1.300,Lesson_I.465,Tormentor.205;
[Computer Associates]Lesson II.358,Lesson_I.300,Lesson I

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Lesson:

An up-to-date copy of ExterminateIt should detect and prevent infection from Lesson.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Lesson manually.

To completely manually remove Lesson malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Lesson.

1. Use Task Manager to terminate the Lesson process.
2. Delete the original Lesson file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Vxidl.ADK Trojan
Remove Pigeon.AWGD Trojan
Remove SillyFDC.Y Worm
Remove Livestat.com Tracking Cookie
Remove Bancos.GDZ Trojan

adlandpro.com malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing adlandpro.com:

An up-to-date copy of ExterminateIt should detect and prevent infection from adlandpro.com.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove adlandpro.com manually.

To completely manually remove adlandpro.com malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with adlandpro.com.

1. Use Task Manager to terminate the adlandpro.com process.
2. Delete the original adlandpro.com file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Eachint Downloader
Remove Coldfeet Trojan
Remove VB.Picasso Trojan
Remove Stadich Trojan
Remove Netscope Hostile Code

SillyDl.AOE malware description and removal detail
Categories:Downloader
Also known as:

[Other]Win32/SillyDl.AOE

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.AOE:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.AOE.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove SillyDl.AOE manually.

To completely manually remove SillyDl.AOE malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with SillyDl.AOE.

1. Use Task Manager to terminate the SillyDl.AOE process.
2. Delete the original SillyDl.AOE file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.EYP Trojan
Remove OsirisX.KeyLogger Spyware
Remove Leprosy.Seneca Trojan
Remove Snooby Trojan
Remove Sonitro RAT

IRC.II.DCC malware description and removal detail
Categories:DoS

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing IRC.II.DCC:

An up-to-date copy of ExterminateIt should detect and prevent infection from IRC.II.DCC.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove IRC.II.DCC manually.

To completely manually remove IRC.II.DCC malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with IRC.II.DCC.

1. Use Task Manager to terminate the IRC.II.DCC process.
2. Delete the original IRC.II.DCC file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Fingerprint.Java Hostile Code
Remove Pigeon.AVSY Trojan
Remove Bancos.GVK Trojan
Remove Unifyda Backdoor
Remove VB.nl Backdoor

Ads2.ZDNet.com malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Ads2.ZDNet.com:

An up-to-date copy of ExterminateIt should detect and prevent infection from Ads2.ZDNet.com.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Ads2.ZDNet.com manually.

To completely manually remove Ads2.ZDNet.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ads2.ZDNet.com.

1. Use Task Manager to terminate the Ads2.ZDNet.com process.
2. Delete the original Ads2.ZDNet.com file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove JS.Sepuc Trojan
Remove Vxidl.AIT Trojan
Remove Busted Spyware
Remove Livestat.com Tracking Cookie
Remove Sathi Trojan

Serstroy malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan-Downloader.Win32.Agent.gbz;
[Other]TrojanClicker:Win32/Worbe.D

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Serstroy:

Registry Values:
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionrun

Removing Serstroy:

An up-to-date copy of ExterminateIt should detect and prevent infection from Serstroy.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Serstroy manually.

To completely manually remove Serstroy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Serstroy.

1. Use Task Manager to terminate the Serstroy process.
2. Delete the original Serstroy file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.AVDZ Trojan
Remove CrazyCrunch Trojan
Remove Coldfeet Trojan
Remove Direct.Revenue Adware
Remove TinyM Downloader

Win32.VB.fm malware description and removal detail
Categories:Trojan
Also known as:

[Panda]Trojan Horse

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win32.VB.fm:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win32.VB.fm.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Win32.VB.fm manually.

To completely manually remove Win32.VB.fm malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Win32.VB.fm.

1. Use Task Manager to terminate the Win32.VB.fm process.
2. Delete the original Win32.VB.fm file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Justice Trojan
Remove IEFEATS.A Trojan
Remove Fizzle.Wizzle.Entertainment.Searchbar Toolbar
Remove Sex.Cookie Tracking Cookie
Remove Gonads Trojan

Bancos.BQT malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.BQT:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.BQT.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Bancos.BQT manually.

To completely manually remove Bancos.BQT malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Bancos.BQT.

1. Use Task Manager to terminate the Bancos.BQT process.
2. Delete the original Bancos.BQT file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Sex.Cookie Tracking Cookie
Remove Win32.DigitalM.A!Trojan Trojan
Remove Need2Find Adware
Remove TrojanDownloader.Win32.Small.dg Trojan
Remove OnlineGuard Ransomware

Vxidl.AWL malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AWL:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AWL.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.AWL manually.

To completely manually remove Vxidl.AWL malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AWL.

1. Use Task Manager to terminate the Vxidl.AWL process.
2. Delete the original Vxidl.AWL file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Coldfeet Trojan
Remove CouponBar Toolbar
Remove Frethog.ACF Trojan
Remove Swine.Flu Trojan
Remove Delf.kc Backdoor

Perl.Hadic malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Perl.Hadic:

An up-to-date copy of ExterminateIt should detect and prevent infection from Perl.Hadic.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Perl.Hadic manually.

To completely manually remove Perl.Hadic malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Perl.Hadic.

1. Use Task Manager to terminate the Perl.Hadic process.
2. Delete the original Perl.Hadic file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove VB.cc Adware
Remove Appkiller.src Trojan
Remove CrazyCrunch Trojan
Remove ProHack.Exe.Joiner Trojan
Remove JS.Dragdrop!exploit Trojan