Malwarebytes Blog http://malwarebytes.besttechie.net Fri, 09 May 2008 21:19:44 +0000 http://wordpress.org/?v=2.3.3 en VideoAccessCodec http://malwarebytes.besttechie.net/2008/05/09/videoaccesscodec-4/ http://malwarebytes.besttechie.net/2008/05/09/videoaccesscodec-4/#comments Fri, 09 May 2008 21:19:44 +0000 Marcin http://malwarebytes.besttechie.net/2008/05/09/videoaccesscodec-4/ VideoAccessCodec has been updated. The codec installs the following files.

C:\Windows\vbksrofa.dll
C:\Windows\pvnsmfor.dll
C:\Windows\oadkxrts.exe
C:\Windows\mpfanvqg.dll

We have provided removal instructions for anybody unfortunate to have been infected by this codec.

Removal instructions for VideoAccessCodec

]]> http://malwarebytes.besttechie.net/2008/05/09/videoaccesscodec-4/feed/ Trojan.Agent http://malwarebytes.besttechie.net/2008/05/08/trojanagent/ http://malwarebytes.besttechie.net/2008/05/08/trojanagent/#comments Thu, 08 May 2008 22:21:56 +0000 Marcin http://malwarebytes.besttechie.net/2008/05/08/trojanagent/ Trojan.Agent is installed via an exploit. The trojan installs the following file:

C:\sysdump.dll

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Agent

]]> http://malwarebytes.besttechie.net/2008/05/08/trojanagent/feed/ Trojan.BHO http://malwarebytes.besttechie.net/2008/05/08/trojanbho/ http://malwarebytes.besttechie.net/2008/05/08/trojanbho/#comments Thu, 08 May 2008 22:16:56 +0000 Marcin http://malwarebytes.besttechie.net/2008/05/08/trojanbho/ Trojan.BHO is installed via an exploit. The trojan installs the following file:

C:\autoex.dll

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.BHO

]]> http://malwarebytes.besttechie.net/2008/05/08/trojanbho/feed/ Spyware.Passwords http://malwarebytes.besttechie.net/2008/05/08/spywarepasswords/ http://malwarebytes.besttechie.net/2008/05/08/spywarepasswords/#comments Thu, 08 May 2008 22:07:32 +0000 Marcin http://malwarebytes.besttechie.net/2008/05/08/spywarepasswords/ Spyware.Passwords installs via exploit without user interaction. Once installed, it slows down the system dramatically. The malware installs the following files:

C:\Program Files\DefWatch.exe
C:\Program Files\ctfmon.exe
C:\Windows\System32\donj32drv.dll

We have provided removal instructions for anybody unfortunate to have been infected by this malware.

Removal instructions for Spyware.Passwords

]]> http://malwarebytes.besttechie.net/2008/05/08/spywarepasswords/feed/ New Zlob http://malwarebytes.besttechie.net/2008/05/07/new-zlob-12/ http://malwarebytes.besttechie.net/2008/05/07/new-zlob-12/#comments Wed, 07 May 2008 21:28:46 +0000 Marcin http://malwarebytes.besttechie.net/2008/05/07/new-zlob-12/ New Zlob has been released again. It installs the following files and registry entries.

C:\Windows\System32\rtmipr.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} = delayingly

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Zlob

]]> http://malwarebytes.besttechie.net/2008/05/07/new-zlob-12/feed/ New Zlob http://malwarebytes.besttechie.net/2008/05/05/new-zlob-11/ http://malwarebytes.besttechie.net/2008/05/05/new-zlob-11/#comments Tue, 06 May 2008 03:17:00 +0000 Marcin http://malwarebytes.besttechie.net/2008/05/05/new-zlob-11/ New Zlob has been released again. It installs the following files and registry entries.

C:\Windows\System32\qdsba.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{af73a174-ea1b-4f0b-b0b1-fe1486a6719c} = communa

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Zlob

]]> http://malwarebytes.besttechie.net/2008/05/05/new-zlob-11/feed/ New Zlob http://malwarebytes.besttechie.net/2008/04/28/new-zlob-10/ http://malwarebytes.besttechie.net/2008/04/28/new-zlob-10/#comments Mon, 28 Apr 2008 22:11:20 +0000 Marcin http://malwarebytes.besttechie.net/2008/04/28/new-zlob-10/ New Zlob has been released again. It installs the following files and registry entries.

C:\Windows\System32\uyhjw.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{4d51e91c-e917-4b7f-89ff-abe471e16927} = enswathes

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Zlob

]]> http://malwarebytes.besttechie.net/2008/04/28/new-zlob-10/feed/ IE AntiVirus http://malwarebytes.besttechie.net/2008/04/24/ie-antivirus/ http://malwarebytes.besttechie.net/2008/04/24/ie-antivirus/#comments Fri, 25 Apr 2008 01:18:11 +0000 Marcin http://malwarebytes.besttechie.net/2008/04/24/ie-antivirus/ A new rogue by the name of IE AntiVirus has been discovered.

IE AntiVirus

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.

Removal instructions for IE AntiVirus

Marcin Kleczynski

]]> http://malwarebytes.besttechie.net/2008/04/24/ie-antivirus/feed/ New Zlob http://malwarebytes.besttechie.net/2008/04/21/new-zlob-9/ http://malwarebytes.besttechie.net/2008/04/21/new-zlob-9/#comments Mon, 21 Apr 2008 19:49:58 +0000 Marcin http://malwarebytes.besttechie.net/2008/04/21/new-zlob-9/ New Zlob has been released again. It installs the following files and registry entries.

C:\Windows\System32\rkaxfza.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{eb9f614b-ea44-40d0-8829-542e4f254739} = garcea

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Zlob

]]> http://malwarebytes.besttechie.net/2008/04/21/new-zlob-9/feed/ VideoAccessCodec http://malwarebytes.besttechie.net/2008/04/19/videoaccesscodec-3/ http://malwarebytes.besttechie.net/2008/04/19/videoaccesscodec-3/#comments Sat, 19 Apr 2008 15:42:08 +0000 Marcin http://malwarebytes.besttechie.net/2008/04/19/videoaccesscodec-3/ VideoAccessCodec has been updated. The codec installs the following files.

C:\Windows\dpevflbg.dll
C:\Windows\olgdqarf.exe
C:\Windows\vadokmxt.dll
C:\Windows\wdpoefan.dll
C:\Windows\wxvgsdbq.exe

We have provided removal instructions for anybody unfortunate to have been infected by this codec.

Removal instructions for VideoAccessCodec

]]> http://malwarebytes.besttechie.net/2008/04/19/videoaccesscodec-3/feed/