New FakeAlert

Posted by Marcin on June 19th, 2008

Trojan.FakeAlert is a trojan which installs via fake codecs or browser exploits. Once installed it delivers popup advertisements for useless products. These symptoms will be accompanied by the installation of a rogue application with no user prompts or action required. Trojan.FakeAlert has been updated and now installs the following directory.

C:\Program Files\PCHealthCenter

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.FakeAlert

New Zlob

Posted by Marcin on June 17th, 2008

New Zlob has been released again. It installs the following files, folders and registry entries.

C:\Windows\System32\214075
C:\Windows\System32\funfsnv.dll
C:\Program Files\Web Technologies

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{99f8405b-63d1-421a-83bb-7b4b0642ac28} = eulogical

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Zlob

AntiSpyCheck

Posted by Marcin on June 12th, 2008

A new rogue, AntiSpyCheck, has been released. It is advertised by a trojan.

AntiSpyCheck

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.

Removal instructions for AntiSpyCheck

Marcin Kleczynski

New Zlob

Posted by Marcin on June 12th, 2008

New Zlob has been released again. It installs the following files and registry entries.

C:\Windows\System32\kfcpnd.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{5c7b71bb-6d49-4bdc-b60d-f9fe0481eb5f} = campaniform

We have provided removal instructions for anybody unfortunate to have been infected by this trojan.

Removal instructions for Trojan.Zlob

MalwarePatrolPro

Posted by Marcin on May 30th, 2008

Another new rogue application has been discovered.

MalwarePatrolPro

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded this application.

Removal instructions for MalwarePatrolPro

Marcin Kleczynski

PCPrivacyCleaner

Posted by Marcin on May 30th, 2008

A new rogue has been discovered.

PCPrivacyCleaner

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded this application.

Removal instructions for PCPrivacyCleaner

Marcin Kleczynski

AdvancedXPFixer

Posted by Marcin on May 20th, 2008

A new rogue, AdvancedXPFixer, part of the iSecurity group has been released. It is advertised by a trojan.

AdvancedXPFixer

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.

Removal instructions for AdvancedXPFixer

Marcin Kleczynski

Advanced XP Defender, XP SecurityCenter

Posted by Marcin on May 17th, 2008

Details of two new rogues, Advanced XP Defender and XP SecurityCenter, below.

Advanced XP Defender

XP SecurityCenter

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.

Removal instructions for Advanced XP Defender
Removal instructions for XP SecurityCenter

Marcin Kleczynski

VideoAccessCodec

Posted by Marcin on May 17th, 2008

VideoAccessCodec has been updated. The codec installs the following files.

C:\Windows\pxgdslro.dll
C:\Windows\mdtgkswr.exe
C:\Windows\gnowmebk.dll
C:\Windows\gktxaspm.dll
C:\Windows\eova.exe

We have provided removal instructions for anybody unfortunate to have been infected by this codec.

Removal instructions for VideoAccessCodec

VideoAccessCodec

Posted by Marcin on May 9th, 2008

VideoAccessCodec has been updated. The codec installs the following files.

C:\Windows\vbksrofa.dll
C:\Windows\pvnsmfor.dll
C:\Windows\oadkxrts.exe
C:\Windows\mpfanvqg.dll

We have provided removal instructions for anybody unfortunate to have been infected by this codec.

Removal instructions for VideoAccessCodec


Wordpress Theme by Tech Replies
Powered By Wordpress
Copyright © 2008 Malwarebytes Blog. All rights reserved.