Posted by Marcin Kleczynski on May 30th, 2008
Another new rogue application has been discovered.

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded this application.
Removal instructions for MalwarePatrolPro
Marcin Kleczynski
Posted by Marcin Kleczynski on May 30th, 2008
A new rogue has been discovered.

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded this application.
Removal instructions for PCPrivacyCleaner
Marcin Kleczynski
Posted by Marcin Kleczynski on May 20th, 2008
A new rogue, AdvancedXPFixer, part of the iSecurity group has been released. It is advertised by a trojan.

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for AdvancedXPFixer
Marcin Kleczynski
Posted by Marcin Kleczynski on May 17th, 2008
Details of two new rogues, Advanced XP Defender and XP SecurityCenter, below.


If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for Advanced XP Defender
Removal instructions for XP SecurityCenter
Marcin Kleczynski
Posted by Marcin Kleczynski on May 17th, 2008
VideoAccessCodec has been updated. The codec installs the following files.
C:\Windows\pxgdslro.dll
C:\Windows\mdtgkswr.exe
C:\Windows\gnowmebk.dll
C:\Windows\gktxaspm.dll
C:\Windows\eova.exe
We have provided removal instructions for anybody unfortunate to have been infected by this codec.
Removal instructions for VideoAccessCodec
Posted by Marcin Kleczynski on May 9th, 2008
VideoAccessCodec has been updated. The codec installs the following files.
C:\Windows\vbksrofa.dll
C:\Windows\pvnsmfor.dll
C:\Windows\oadkxrts.exe
C:\Windows\mpfanvqg.dll
We have provided removal instructions for anybody unfortunate to have been infected by this codec.
Removal instructions for VideoAccessCodec
Posted by Marcin Kleczynski on May 8th, 2008
Trojan.Agent is installed via an exploit. The trojan installs the following file:
C:\sysdump.dll
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Agent
Posted by Marcin Kleczynski on May 8th, 2008
Trojan.BHO is installed via an exploit. The trojan installs the following file:
C:\autoex.dll
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.BHO
Posted by Marcin Kleczynski on May 8th, 2008
Spyware.Passwords installs via exploit without user interaction. Once installed, it slows down the system dramatically. The malware installs the following files:
C:\Program Files\DefWatch.exe
C:\Program Files\ctfmon.exe
C:\Windows\System32\donj32drv.dll
We have provided removal instructions for anybody unfortunate to have been infected by this malware.
Removal instructions for Spyware.Passwords
Posted by Marcin Kleczynski on May 7th, 2008
New Zlob has been released again. It installs the following files and registry entries.
C:\Windows\System32\rtmipr.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} = delayingly
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Recent Comments