Frethog.ACQ Trojan
Frethog.ACQ malware description and removal detail
Categories:Trojan
Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista
Removing Frethog.ACQ:
An up-to-date copy of ExterminateIt should detect and prevent infection from Frethog.ACQ.
If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Frethog.ACQ manually.
To completely manually remove Frethog.ACQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Frethog.ACQ.
- Use Task Manager to terminate the Frethog.ACQ process.
- Delete the original Frethog.ACQ file and folders.
- Delete the system registry key parameters
- Update your antivirus databases or buy antivirus software and perform a full scan of the computer.
We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.
ExterminateIt effectively and automatically removes Frethog.ACQ from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).
Download ExterminateIt! to instantly get rid of Frethog.ACQ!
Also Be Aware of the Following Threats:
Bancos.ICP Trojan Symptoms
Natspammer Trojan Symptoms
Distributed.Deniel.Of.Service.attacks.proposal.based.on.routing DoS Removal
Removing Pugi.SearchExplorer Toolbar
Hotbar.ShopperReports Adware
Hotbar.ShopperReports malware description and removal detail
Categories:Adware,Toolbar
Visible Symptoms:
Files in system folders:
[%COMMON_DESKTOPDIRECTORY%]\Click to Find Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Find And Fix Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Free PC Wallpapers.lnk
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd10E.tmp.exe
[%PROFILE_TEMP%]\cd14D.tmp.exe
[%PROFILE_TEMP%]\cd15B.tmp.exe
[%PROFILE_TEMP%]\cd1BA.tmp.exe
[%PROFILE_TEMP%]\cd1CA.tmp.exe
[%PROFILE_TEMP%]\cd1EA.tmp.exe
[%PROFILE_TEMP%]\cd20.tmp.exe
[%PROFILE_TEMP%]\cd21.tmp.exe
[%PROFILE_TEMP%]\cd23B.tmp.exe
[%PROFILE_TEMP%]\cd26.tmp.exe
[%PROFILE_TEMP%]\cd316.tmp.exe
[%PROFILE_TEMP%]\cd31C.tmp.exe
[%PROFILE_TEMP%]\cd422.tmp.exe
[%PROFILE_TEMP%]\cd49.tmp.exe
[%PROFILE_TEMP%]\cd52.tmp.exe
[%PROFILE_TEMP%]\cd57.tmp.exe
[%PROFILE_TEMP%]\cd7E.tmp.exe
[%PROFILE_TEMP%]\cd84F.tmp.exe
[%PROFILE_TEMP%]\cd95.tmp.exe
[%PROFILE_TEMP%]\cdD8.tmp.exe
[%PROFILE_TEMP%]\cdDD9.tmp.exe
[%PROFILE_TEMP%]\ShprRprt.exe
[%SYSTEM%]\clzctixz.exe
[%SYSTEM%]\gdagsvbl.exe
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd2D.tmp
[%PROFILE_TEMP%]\cd2D.tmp.exe
[%PROFILE_TEMP%]\cd2E.tmp
[%PROFILE_TEMP%]\cd2E.tmp.exe
[%COMMON_DESKTOPDIRECTORY%]\Click to Find Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Find And Fix Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Free PC Wallpapers.lnk
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd10E.tmp.exe
[%PROFILE_TEMP%]\cd14D.tmp.exe
[%PROFILE_TEMP%]\cd15B.tmp.exe
[%PROFILE_TEMP%]\cd1BA.tmp.exe
[%PROFILE_TEMP%]\cd1CA.tmp.exe
[%PROFILE_TEMP%]\cd1EA.tmp.exe
[%PROFILE_TEMP%]\cd20.tmp.exe
[%PROFILE_TEMP%]\cd21.tmp.exe
[%PROFILE_TEMP%]\cd23B.tmp.exe
[%PROFILE_TEMP%]\cd26.tmp.exe
[%PROFILE_TEMP%]\cd316.tmp.exe
[%PROFILE_TEMP%]\cd31C.tmp.exe
[%PROFILE_TEMP%]\cd422.tmp.exe
[%PROFILE_TEMP%]\cd49.tmp.exe
[%PROFILE_TEMP%]\cd52.tmp.exe
[%PROFILE_TEMP%]\cd57.tmp.exe
[%PROFILE_TEMP%]\cd7E.tmp.exe
[%PROFILE_TEMP%]\cd84F.tmp.exe
[%PROFILE_TEMP%]\cd95.tmp.exe
[%PROFILE_TEMP%]\cdD8.tmp.exe
[%PROFILE_TEMP%]\cdDD9.tmp.exe
[%PROFILE_TEMP%]\ShprRprt.exe
[%SYSTEM%]\clzctixz.exe
[%SYSTEM%]\gdagsvbl.exe
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd2D.tmp
[%PROFILE_TEMP%]\cd2D.tmp.exe
[%PROFILE_TEMP%]\cd2E.tmp
[%PROFILE_TEMP%]\cd2E.tmp.exe
In order to ensure that the Hotbar.ShopperReports is launched automatically each time the system is booted, the Hotbar.ShopperReports adds a link to its executable file in the system registry: Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows VistaHKLM\Microsoft\Windows\CurrentVersion\Run
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd10E.tmp.exe
[%PROFILE_TEMP%]\cd14D.tmp.exe
[%PROFILE_TEMP%]\cd15B.tmp.exe
[%PROFILE_TEMP%]\cd1BA.tmp.exe
[%PROFILE_TEMP%]\cd1CA.tmp.exe
[%PROFILE_TEMP%]\cd1EA.tmp.exe
[%PROFILE_TEMP%]\cd20.tmp.exe
[%PROFILE_TEMP%]\cd21.tmp.exe
[%PROFILE_TEMP%]\cd23B.tmp.exe
[%PROFILE_TEMP%]\cd26.tmp.exe
[%PROFILE_TEMP%]\cd316.tmp.exe
[%PROFILE_TEMP%]\cd31C.tmp.exe
[%PROFILE_TEMP%]\cd422.tmp.exe
[%PROFILE_TEMP%]\cd49.tmp.exe
[%PROFILE_TEMP%]\cd52.tmp.exe
[%PROFILE_TEMP%]\cd57.tmp.exe
[%PROFILE_TEMP%]\cd7E.tmp.exe
[%PROFILE_TEMP%]\cd84F.tmp.exe
[%PROFILE_TEMP%]\cd95.tmp.exe
[%PROFILE_TEMP%]\cdD8.tmp.exe
[%PROFILE_TEMP%]\cdDD9.tmp.exe
[%PROFILE_TEMP%]\ShprRprt.exe
[%SYSTEM%]\clzctixz.exe
[%SYSTEM%]\gdagsvbl.exe
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd2D.tmp.exe
[%PROFILE_TEMP%]\cd2E.tmp.exe Detecting Hotbar.ShopperReports:
Files:
[%COMMON_DESKTOPDIRECTORY%]\Click to Find Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Find And Fix Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Free PC Wallpapers.lnk
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd10E.tmp.exe
[%PROFILE_TEMP%]\cd14D.tmp.exe
[%PROFILE_TEMP%]\cd15B.tmp.exe
[%PROFILE_TEMP%]\cd1BA.tmp.exe
[%PROFILE_TEMP%]\cd1CA.tmp.exe
[%PROFILE_TEMP%]\cd1EA.tmp.exe
[%PROFILE_TEMP%]\cd20.tmp.exe
[%PROFILE_TEMP%]\cd21.tmp.exe
[%PROFILE_TEMP%]\cd23B.tmp.exe
[%PROFILE_TEMP%]\cd26.tmp.exe
[%PROFILE_TEMP%]\cd316.tmp.exe
[%PROFILE_TEMP%]\cd31C.tmp.exe
[%PROFILE_TEMP%]\cd422.tmp.exe
[%PROFILE_TEMP%]\cd49.tmp.exe
[%PROFILE_TEMP%]\cd52.tmp.exe
[%PROFILE_TEMP%]\cd57.tmp.exe
[%PROFILE_TEMP%]\cd7E.tmp.exe
[%PROFILE_TEMP%]\cd84F.tmp.exe
[%PROFILE_TEMP%]\cd95.tmp.exe
[%PROFILE_TEMP%]\cdD8.tmp.exe
[%PROFILE_TEMP%]\cdDD9.tmp.exe
[%PROFILE_TEMP%]\ShprRprt.exe
[%SYSTEM%]\clzctixz.exe
[%SYSTEM%]\gdagsvbl.exe
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd2D.tmp
[%PROFILE_TEMP%]\cd2D.tmp.exe
[%PROFILE_TEMP%]\cd2E.tmp
[%PROFILE_TEMP%]\cd2E.tmp.exe
[%COMMON_DESKTOPDIRECTORY%]\Click to Find Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Find And Fix Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Free PC Wallpapers.lnk
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd10E.tmp.exe
[%PROFILE_TEMP%]\cd14D.tmp.exe
[%PROFILE_TEMP%]\cd15B.tmp.exe
[%PROFILE_TEMP%]\cd1BA.tmp.exe
[%PROFILE_TEMP%]\cd1CA.tmp.exe
[%PROFILE_TEMP%]\cd1EA.tmp.exe
[%PROFILE_TEMP%]\cd20.tmp.exe
[%PROFILE_TEMP%]\cd21.tmp.exe
[%PROFILE_TEMP%]\cd23B.tmp.exe
[%PROFILE_TEMP%]\cd26.tmp.exe
[%PROFILE_TEMP%]\cd316.tmp.exe
[%PROFILE_TEMP%]\cd31C.tmp.exe
[%PROFILE_TEMP%]\cd422.tmp.exe
[%PROFILE_TEMP%]\cd49.tmp.exe
[%PROFILE_TEMP%]\cd52.tmp.exe
[%PROFILE_TEMP%]\cd57.tmp.exe
[%PROFILE_TEMP%]\cd7E.tmp.exe
[%PROFILE_TEMP%]\cd84F.tmp.exe
[%PROFILE_TEMP%]\cd95.tmp.exe
[%PROFILE_TEMP%]\cdD8.tmp.exe
[%PROFILE_TEMP%]\cdDD9.tmp.exe
[%PROFILE_TEMP%]\ShprRprt.exe
[%SYSTEM%]\clzctixz.exe
[%SYSTEM%]\gdagsvbl.exe
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd2D.tmp
[%PROFILE_TEMP%]\cd2D.tmp.exe
[%PROFILE_TEMP%]\cd2E.tmp
[%PROFILE_TEMP%]\cd2E.tmp.exe
Folders:
[%APPDATA%]\hbtools
[%APPDATA%]\shopperreports
[%PROGRAM_FILES%]\shopperreports
Registry Keys:
HKEY_CLASSES_ROOT\clsid\{0774f696-d801-4c18-81a7-a3a32b8bef19}
HKEY_CLASSES_ROOT\clsid\{1e6ac766-9094-4bcf-abd3-39e2eaea5fcd}
HKEY_CLASSES_ROOT\clsid\{2178c864-b8bc-41ae-a1fb-eb6a32f87eb1}
HKEY_CLASSES_ROOT\CLSID\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289}
HKEY_CLASSES_ROOT\clsid\{454b4812-e572-4703-a1bb-63490809eac0}
HKEY_CLASSES_ROOT\clsid\{580a1f3f-89b4-433b-bbdb-b97aeb13f3fc}
HKEY_CLASSES_ROOT\clsid\{a798e2b4-b6a0-4b96-8c53-8ec7a3b0895a}
HKEY_CLASSES_ROOT\interface\{34f4d917-31e4-464c-b8b3-84c1ce76b395}
HKEY_CLASSES_ROOT\interface\{3f04cbf7-cd62-4403-b090-b432dedcb159}
HKEY_CLASSES_ROOT\interface\{3f6da8bb-3e45-44e2-b494-c55beaf3b41e}
HKEY_CLASSES_ROOT\interface\{8578d35e-c6c0-4808-9a80-0f6c29a2c423}
HKEY_CLASSES_ROOT\interface\{bc190da5-0187-4d99-b3ac-6c45ea1b9324}
HKEY_CLASSES_ROOT\rprtspsclient.psexecuter
HKEY_CLASSES_ROOT\rprtspsclient.psexecuter.1
HKEY_CLASSES_ROOT\shprrprts.hbax
HKEY_CLASSES_ROOT\shprrprts.hbax.1
HKEY_CLASSES_ROOT\shprrprts.hbcommband
HKEY_CLASSES_ROOT\shprrprts.hbcommband.1
HKEY_CLASSES_ROOT\shprrprts.hbinfoband
HKEY_CLASSES_ROOT\shprrprts.hbinfoband.1
HKEY_CLASSES_ROOT\shprrprts.iebutton
HKEY_CLASSES_ROOT\shprrprts.iebutton.1
HKEY_CLASSES_ROOT\shprrprts.iebuttona
HKEY_CLASSES_ROOT\shprrprts.iebuttona.1
HKEY_CLASSES_ROOT\shprrprts.smrtshprctl
HKEY_CLASSES_ROOT\shprrprts.smrtshprctl.1
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{2178c864-b8bc-41ae-a1fb-eb6a32f87eb1}
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{a798e2b4-b6a0-4b96-8c53-8ec7a3b0895a}
HKEY_CURRENT_USER\software\shopperreports
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbar shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopper reports by hotbar
HKEY_LOCAL_MACHINE\software\shopperreports
HKEY_CLASSES_ROOT\clsid\{2a8a997f-bb9f-48f6-aa2b-2762d50f9289}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2a8a997f-bb9f-48f6-aa2b-2762d50f9289}
Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\5.0\user agent\post platform
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}, hoticon=[%PROGRAM_FILES%]\shopperreports\bin\2.0.0\shprrprt.dll
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}, icon=[%PROGRAM_FILES%]\shopperreports\bin\2.0.0\shprrprt.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
Removing Hotbar.ShopperReports:
An up-to-date copy of ExterminateIt should detect and prevent infection from Hotbar.ShopperReports.
If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Hotbar.ShopperReports manually.
To completely manually remove Hotbar.ShopperReports malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hotbar.ShopperReports.
- Use Task Manager to terminate the Hotbar.ShopperReports process.
- Delete the original Hotbar.ShopperReports file and folders.
- Delete the system registry key parameters
- Update your antivirus databases or buy antivirus software and perform a full scan of the computer.
We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.
ExterminateIt effectively and automatically removes Hotbar.ShopperReports from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).
Download ExterminateIt! to instantly get rid of Hotbar.ShopperReports!
Also Be Aware of the Following Threats:
Runner Trojan Information
BillByCall Adware
BillByCall malware description and removal detail
Categories:Adware
Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista
Removing BillByCall:
An up-to-date copy of ExterminateIt should detect and prevent infection from BillByCall.
If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove BillByCall manually.
To completely manually remove BillByCall malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BillByCall.
- Use Task Manager to terminate the BillByCall process.
- Delete the original BillByCall file and folders.
- Delete the system registry key parameters
- Update your antivirus databases or buy antivirus software and perform a full scan of the computer.
We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.
ExterminateIt effectively and automatically removes BillByCall from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).
Download ExterminateIt! to instantly get rid of BillByCall!
Also Be Aware of the Following Threats:
neostat.pl Tracking Cookie Cleaner
ProBot.Activity.Monitor Spyware Removal instruction