MalwarePatrolPro

Posted by Marcin Kleczynski on May 30th, 2008

Another new rogue application has been discovered.

MalwarePatrolPro

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded this application.

Removal instructions for MalwarePatrolPro

Marcin Kleczynski

PCPrivacyCleaner

Posted by Marcin Kleczynski on May 30th, 2008

A new rogue has been discovered.

PCPrivacyCleaner

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded this application.

Removal instructions for PCPrivacyCleaner

Marcin Kleczynski

AdvancedXPFixer

Posted by Marcin Kleczynski on May 20th, 2008

A new rogue, AdvancedXPFixer, part of the iSecurity group has been released. It is advertised by a trojan.

AdvancedXPFixer

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.

Removal instructions for AdvancedXPFixer

Marcin Kleczynski

Advanced XP Defender, XP SecurityCenter

Posted by Marcin Kleczynski on May 17th, 2008

Details of two new rogues, Advanced XP Defender and XP SecurityCenter, below.

Advanced XP Defender

XP SecurityCenter

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.

Removal instructions for Advanced XP Defender
Removal instructions for XP SecurityCenter

Marcin Kleczynski

VideoAccessCodec

Posted by Marcin Kleczynski on May 17th, 2008

VideoAccessCodec has been updated. The codec installs the following files.

C:\Windows\pxgdslro.dll
C:\Windows\mdtgkswr.exe
C:\Windows\gnowmebk.dll
C:\Windows\gktxaspm.dll
C:\Windows\eova.exe

We have provided removal instructions for anybody unfortunate to have been infected by this codec.

Removal instructions for VideoAccessCodec

VideoAccessCodec

Posted by Marcin Kleczynski on May 9th, 2008

VideoAccessCodec has been updated. The codec installs the following files.

C:\Windows\vbksrofa.dll
C:\Windows\pvnsmfor.dll
C:\Windows\oadkxrts.exe
C:\Windows\mpfanvqg.dll

We have provided removal instructions for anybody unfortunate to have been infected by this codec.

Removal instructions for VideoAccessCodec

Trojan.Agent

Posted by Marcin Kleczynski on May 8th, 2008

Trojan.Agent is installed via an exploit. The trojan installs the following file:

C:\sysdump.dll

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Agent

Trojan.BHO

Posted by Marcin Kleczynski on May 8th, 2008

Trojan.BHO is installed via an exploit. The trojan installs the following file:

C:\autoex.dll

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.BHO

Spyware.Passwords

Posted by Marcin Kleczynski on May 8th, 2008

Spyware.Passwords installs via exploit without user interaction. Once installed, it slows down the system dramatically. The malware installs the following files:

C:\Program Files\DefWatch.exe
C:\Program Files\ctfmon.exe
C:\Windows\System32\donj32drv.dll

We have provided removal instructions for anybody unfortunate to have been infected by this malware.

Removal instructions for Spyware.Passwords

New Zlob

Posted by Marcin Kleczynski on May 7th, 2008

New Zlob has been released again. It installs the following files and registry entries.

C:\Windows\System32\rtmipr.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} = delayingly

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Zlob


Wordpress Theme by Tech Replies
Powered By Wordpress
Copyright © 2008 Malwarebytes blog. All rights reserved.