Trojan List 51: February 2009

Wednesday, February 4, 2009

Nazgul Trojan

Nazgul description:
Nazgul Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Nazgul:

you can run trial version of ExterminateIt, or remove Nazgul manually.

To completely manually remove Nazgul malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Nazgul.

Tuesday, February 3, 2009

HLLO.Sym Trojan

HLLO.Sym description:
HLLO.Sym Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing HLLO.Sym:

you can run trial version of ExterminateIt, or remove HLLO.Sym manually.

To completely manually remove HLLO.Sym malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HLLO.Sym.

ecommerce.com Tracking Cookie

Click here to remove ecommerce.com malware

ecommerce.com description:
ecommerce.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing ecommerce.com:

you can run trial version of ExterminateIt, or remove ecommerce.com manually.

To completely manually remove ecommerce.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ecommerce.com.

Pigeon.AVPP Trojan

Click here to remove Pigeon.AVPP malware

Pigeon.AVPP description:
Pigeon.AVPP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVPP:

you can run trial version of ExterminateIt, or remove Pigeon.AVPP manually.

To completely manually remove Pigeon.AVPP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVPP.

PC Spyware

PC description:
PC Category:Spyware,Hacker Tool
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing PC:

you can run trial version of ExterminateIt, or remove PC manually.

To completely manually remove PC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PC.

Pigeon.AVFF Trojan

Click here to remove Pigeon.AVFF malware

Pigeon.AVFF description:
Pigeon.AVFF Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVFF:

you can run trial version of ExterminateIt, or remove Pigeon.AVFF manually.

To completely manually remove Pigeon.AVFF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVFF.

Bancos.AKP Trojan

Bancos.AKP description:
Bancos.AKP Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing Bancos.AKP:

you can run trial version of ExterminateIt, or remove Bancos.AKP manually.

To completely manually remove Bancos.AKP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.AKP.

Media.AdVantage Adware

Click here to remove Media.AdVantage malware

Media.AdVantage description:
Media.AdVantage Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection Media.AdVantage :

Media.AdVantage Files:
[%PROGRAM_FILES%]\AdVantage\AdVantage.cch
[%PROGRAM_FILES%]\AdVantage\AdVantage.db
[%PROGRAM_FILES%]\AdVantage\AdVantage.exe
[%PROGRAM_FILES%]\AdVantage\AdVantage.htm
[%PROGRAM_FILES%]\AdVantage\AdVUninst.exe
[%PROGRAM_FILES%]\AdVantage\ffext.mod
[%PROGRAM_FILES%]\AdVantage\TR.dll
[%PROGRAM_FILES%]\AdVantage\user.db
[%PROGRAM_FILES%]\AdVantage\AdVantage.cch
[%PROGRAM_FILES%]\AdVantage\AdVantage.db
[%PROGRAM_FILES%]\AdVantage\AdVantage.exe
[%PROGRAM_FILES%]\AdVantage\AdVantage.htm
[%PROGRAM_FILES%]\AdVantage\AdVUninst.exe
[%PROGRAM_FILES%]\AdVantage\ffext.mod
[%PROGRAM_FILES%]\AdVantage\TR.dll
[%PROGRAM_FILES%]\AdVantage\user.db

Media.AdVantage Registry Keys:
HKEY_CLASSES_ROOT\appid\{69e0089f-28bc-4bb5-862b-e2b07c3b83c6}
HKEY_CLASSES_ROOT\clsid\{602d9049-b4ac-4a25-bf75-a9b54d747cba}
HKEY_CLASSES_ROOT\interface\{5ac3a9ef-c0f8-41d4-b4e2-b7cebb794151}
HKEY_CLASSES_ROOT\interface\{862def42-89aa-49fa-ae1f-8a84b1b08a17}
HKEY_CLASSES_ROOT\interface\{f6e4845d-1d13-4bc0-942d-b9191524cc48}
HKEY_CLASSES_ROOT\typelib\{dabf362d-d442-4402-9208-ca9ed70dd01e}
HKEY_CURRENT_USER\software\advantage

Media.AdVantage Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing Media.AdVantage:

you can run trial version of ExterminateIt, or remove Media.AdVantage manually.

To completely manually remove Media.AdVantage malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Media.AdVantage.

FR.Lite RAT

FR.Lite description:
FR.Lite Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing FR.Lite:

you can run trial version of ExterminateIt, or remove FR.Lite manually.

To completely manually remove FR.Lite malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FR.Lite.

Monday, February 2, 2009

PCSentinel.CommonComponents Spyware

Click here to remove PCSentinel.CommonComponents malware

PCSentinel.CommonComponents description:
PCSentinel.CommonComponents Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Detection PCSentinel.CommonComponents :

PCSentinel.CommonComponents Folders:
[%PROGRAM_FILES%]\PC Sentinel Software
[%PROGRAM_FILES%]\PCS-234
[%PROGRAM_FILES%]\PCS-236
[%PROGRAM_FILES%]\PCS-237

PCSentinel.CommonComponents Registry Keys:
HKEY_CURRENT_USER\software\local appwizard-generated applications\clsr
HKEY_CURRENT_USER\software\pc sentinel software
HKEY_CURRENT_USER\software\pcs-234
HKEY_CURRENT_USER\software\pcs-236
HKEY_CURRENT_USER\software\pcs-237
HKEY_LOCAL_MACHINE\software\pc sentinel software
HKEY_LOCAL_MACHINE\software\pcs-234
HKEY_LOCAL_MACHINE\software\pcs-236
HKEY_LOCAL_MACHINE\software\pcs-237

PCSentinel.CommonComponents Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing PCSentinel.CommonComponents:

you can run trial version of ExterminateIt, or remove PCSentinel.CommonComponents manually.

To completely manually remove PCSentinel.CommonComponents malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PCSentinel.CommonComponents.

V4.more.info.on.the.encryption Trojan

Click here to remove V4.more.info.on.the.encryption malware

V4.more.info.on.the.encryption description:
V4.more.info.on.the.encryption Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing V4.more.info.on.the.encryption:

you can run trial version of ExterminateIt, or remove V4.more.info.on.the.encryption manually.

To completely manually remove V4.more.info.on.the.encryption malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with V4.more.info.on.the.encryption.

BackConstructor Trojan

Click here to remove BackConstructor malware

BackConstructor description:
BackConstructor Category:Trojan,Backdoor,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing BackConstructor:

you can run trial version of ExterminateIt, or remove BackConstructor manually.

To completely manually remove BackConstructor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BackConstructor.

Jep.Russ.joke Trojan

Click here to remove Jep.Russ.joke malware

Jep.Russ.joke description:
Jep.Russ.joke Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Jep.Russ.joke:

you can run trial version of ExterminateIt, or remove Jep.Russ.joke manually.

To completely manually remove Jep.Russ.joke malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Jep.Russ.joke.

enmarketing.com Tracking Cookie

Click here to remove enmarketing.com malware

enmarketing.com description:
enmarketing.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing enmarketing.com:

you can run trial version of ExterminateIt, or remove enmarketing.com manually.

To completely manually remove enmarketing.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with enmarketing.com.

Win.AOLPS.Waol Trojan

Click here to remove Win.AOLPS.Waol malware

Win.AOLPS.Waol description:
Win.AOLPS.Waol Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Win.AOLPS.Waol:

you can run trial version of ExterminateIt, or remove Win.AOLPS.Waol manually.

To completely manually remove Win.AOLPS.Waol malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win.AOLPS.Waol.

Turtle.Identd RAT

Click here to remove Turtle.Identd malware

Turtle.Identd description:
Turtle.Identd Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Turtle.Identd:

you can run trial version of ExterminateIt, or remove Turtle.Identd manually.

To completely manually remove Turtle.Identd malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Turtle.Identd.

Pigeon.AXA Trojan

Pigeon.AXA description:
Pigeon.AXA Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AXA:

you can run trial version of ExterminateIt, or remove Pigeon.AXA manually.

To completely manually remove Pigeon.AXA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AXA.

Dos32.MakeDirs Trojan

Click here to remove Dos32.MakeDirs malware

Dos32.MakeDirs description:
Dos32.MakeDirs Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Dos32.MakeDirs:

you can run trial version of ExterminateIt, or remove Dos32.MakeDirs manually.

To completely manually remove Dos32.MakeDirs malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Dos32.MakeDirs.

mIRC.Logare Trojan

Click here to remove mIRC.Logare malware

mIRC.Logare description:
mIRC.Logare Category:Trojan,Worm,Backdoor,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Worms can be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.

Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing mIRC.Logare:

you can run trial version of ExterminateIt, or remove mIRC.Logare manually.

To completely manually remove mIRC.Logare malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with mIRC.Logare.

God Trojan

God description:
God Category:Trojan,Spyware
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Removing God:

you can run trial version of ExterminateIt, or remove God manually.

To completely manually remove God malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with God.

Kiev.Boot Trojan

Kiev.Boot description:
Kiev.Boot Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Kiev.Boot:

you can run trial version of ExterminateIt, or remove Kiev.Boot manually.

To completely manually remove Kiev.Boot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Kiev.Boot.

Bancos.IOB Trojan

Bancos.IOB description:
Bancos.IOB Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Bancos.IOB :

Bancos.IOB Files:
[%SYSTEM%]\orkutkut.exe
[%SYSTEM%]\orkutkut.exe

Removing Bancos.IOB:

you can run trial version of ExterminateIt, or remove Bancos.IOB manually.

To completely manually remove Bancos.IOB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.IOB.

AIM.Robber Trojan

AIM.Robber description:
AIM.Robber Category:Trojan,Backdoor,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing AIM.Robber:

you can run trial version of ExterminateIt, or remove AIM.Robber manually.

To completely manually remove AIM.Robber malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AIM.Robber.

Nacown Trojan

Nacown description:
Nacown Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Nacown:

you can run trial version of ExterminateIt, or remove Nacown manually.

To completely manually remove Nacown malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Nacown.

Win32.PSW.Ges Trojan

Click here to remove Win32.PSW.Ges malware

Win32.PSW.Ges description:
Win32.PSW.Ges Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Win32.PSW.Ges:

you can run trial version of ExterminateIt, or remove Win32.PSW.Ges manually.

To completely manually remove Win32.PSW.Ges malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.PSW.Ges.

Sunday, February 1, 2009

Pigeon.ECS Trojan

Pigeon.ECS description:
Pigeon.ECS Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ECS:

you can run trial version of ExterminateIt, or remove Pigeon.ECS manually.

To completely manually remove Pigeon.ECS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ECS.

Fake.login.for.ICQ Trojan

Click here to remove Fake.login.for.ICQ malware

Fake.login.for.ICQ description:
Fake.login.for.ICQ Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Fake.login.for.ICQ:

you can run trial version of ExterminateIt, or remove Fake.login.for.ICQ manually.

To completely manually remove Fake.login.for.ICQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Fake.login.for.ICQ.

Instahp Trojan

Instahp description:
Instahp Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Instahp:

you can run trial version of ExterminateIt, or remove Instahp manually.

To completely manually remove Instahp malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Instahp.

Yeke Trojan

Yeke description:
Yeke Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Yeke:

you can run trial version of ExterminateIt, or remove Yeke manually.

To completely manually remove Yeke malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Yeke.

SillyDl.CBD Trojan

Click here to remove SillyDl.CBD malware

SillyDl.CBD description:
SillyDl.CBD Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CBD:

you can run trial version of ExterminateIt, or remove SillyDl.CBD manually.

To completely manually remove SillyDl.CBD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CBD.

Bat.ServU!Trojan Backdoor

Click here to remove Bat.ServU!Trojan malware

Bat.ServU!Trojan description:
Bat.ServU!Trojan Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Bat.ServU!Trojan:

you can run trial version of ExterminateIt, or remove Bat.ServU!Trojan manually.

To completely manually remove Bat.ServU!Trojan malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bat.ServU!Trojan.

Win32.TrojanDownloader.Dyfica Trojan

Click here to remove Win32.TrojanDownloader.Dyfica malware

Win32.TrojanDownloader.Dyfica description:
Win32.TrojanDownloader.Dyfica Category:Trojan,Downloader
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Trojans-downloaders downloads and installs new malware or adware on the computer.

Detection Win32.TrojanDownloader.Dyfica :

Win32.TrojanDownloader.Dyfica Files:
[%PROFILE_TEMP%]\optimize.exe
[%PROFILE_TEMP%]\optimize.exe

Removing Win32.TrojanDownloader.Dyfica:

you can run trial version of ExterminateIt, or remove Win32.TrojanDownloader.Dyfica manually.

To completely manually remove Win32.TrojanDownloader.Dyfica malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.TrojanDownloader.Dyfica.

Vxidl.AAR Trojan

Vxidl.AAR description:
Vxidl.AAR Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AAR:

you can run trial version of ExterminateIt, or remove Vxidl.AAR manually.

To completely manually remove Vxidl.AAR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AAR.

Foil Trojan

Foil description:
Foil Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Foil:

you can run trial version of ExterminateIt, or remove Foil manually.

To completely manually remove Foil malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Foil.

Backdoor.Fraggle.Server Trojan

Click here to remove Backdoor.Fraggle.Server malware

Backdoor.Fraggle.Server description:
Backdoor.Fraggle.Server Category:Trojan,Backdoor
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Backdoor.Fraggle.Server:

you can run trial version of ExterminateIt, or remove Backdoor.Fraggle.Server manually.

To completely manually remove Backdoor.Fraggle.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.Fraggle.Server.

Pigeon.ACH Trojan

Pigeon.ACH description:
Pigeon.ACH Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ACH:

you can run trial version of ExterminateIt, or remove Pigeon.ACH manually.

To completely manually remove Pigeon.ACH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ACH.

Grand Trojan

Grand description:
Grand Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Grand:

you can run trial version of ExterminateIt, or remove Grand manually.

To completely manually remove Grand malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Grand.

Cyber.Informer Spyware

Click here to remove Cyber.Informer malware

Cyber.Informer description:
Cyber.Informer Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing Cyber.Informer:

you can run trial version of ExterminateIt, or remove Cyber.Informer manually.

To completely manually remove Cyber.Informer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Cyber.Informer.

POWKrash Trojan

POWKrash description:
POWKrash Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing POWKrash:

you can run trial version of ExterminateIt, or remove POWKrash manually.

To completely manually remove POWKrash malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with POWKrash.

Comodo.Trust BHO

Click here to remove Comodo.Trust malware

Comodo.Trust description:
Comodo.Trust Category:BHO,Hijacker,Toolbar
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

Detection Comodo.Trust :

Comodo.Trust Files:
[%WINDOWS%]\system\ttbbho.dll
[%WINDOWS%]\system\ttbbho.dll

Comodo.Trust Registry Keys:
HKEY_CLASSES_ROOT\clsid\{093caf40-3ba6-4071-a050-e830cbdc6480}
HKEY_CLASSES_ROOT\clsid\{d80e1356-ac78-4218-961c-a7689b4cb7fe}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d80e1356-ac78-4218-961c-a7689b4cb7fe}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d80e1356-ac78-4218-961c-a7689b4cb7fe}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d80e1356-ac78-4218-961c-a7689b4cb7fe}

Removing Comodo.Trust:

you can run trial version of ExterminateIt, or remove Comodo.Trust manually.

To completely manually remove Comodo.Trust malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Comodo.Trust.

Annoy Trojan

Annoy description:
Annoy Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Annoy:

you can run trial version of ExterminateIt, or remove Annoy manually.

To completely manually remove Annoy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Annoy.

pdis.com.au Tracking Cookie

Click here to remove pdis.com.au malware

pdis.com.au description:
pdis.com.au Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing pdis.com.au:

you can run trial version of ExterminateIt, or remove pdis.com.au manually.

To completely manually remove pdis.com.au malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with pdis.com.au.

Classroom.Spy.Professional Spyware

Click here to remove Classroom.Spy.Professional malware

Classroom.Spy.Professional description:
Classroom.Spy.Professional Category:Spyware
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Detection Classroom.Spy.Professional :

Classroom.Spy.Professional Folders:
[%COMMON_PROGRAMS%]\Classroom Spy Pro
[%PROGRAM_FILES%]\Classroom Spy Pro

Classroom.Spy.Professional Registry Keys:
HKEY_LOCAL_MACHINE\system\controlset001\services\nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent\security

Classroom.Spy.Professional Registry Values:
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nlcsagent\enum

Removing Classroom.Spy.Professional:

you can run trial version of ExterminateIt, or remove Classroom.Spy.Professional manually.

To completely manually remove Classroom.Spy.Professional malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Classroom.Spy.Professional.

Lame Trojan

Lame description:
Lame Category:Trojan,Backdoor,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Lame:

you can run trial version of ExterminateIt, or remove Lame manually.

To completely manually remove Lame malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Lame.

Adult.Search.Portal Trojan

Click here to remove Adult.Search.Portal malware

Adult.Search.Portal description:
Adult.Search.Portal Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Adult.Search.Portal:

you can run trial version of ExterminateIt, or remove Adult.Search.Portal manually.

To completely manually remove Adult.Search.Portal malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Adult.Search.Portal.