|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 beta3.exe - Dangerous
W32.Uisgon.A is a worm that copies itself to network shares. Related files: %Windir%\[WORM FILENAME].[EXTENSION] %CurrentFolder%\[CHINESE CHARACTERS]Beta3.exe %Windir%\[CHINESE CHARACTERS]Beta3.exe [DRIVE LETTER]:\[WORM FILENAME].bat The worm then creates the following files: %CurrentFolder%/sleep.vbe - a harmless file c:\ubye.txt - a harmless file %CurrentFolder%/inf.tem - a harmless file %Windir%\[WORM FILENAME].vbe - a harmless file %CurrentFolder%]\uishere-[NUMBER].txt - a harmless file [DRIVE LETTER]:\[3 RANDOM LETTERS].[EXTENSION] - a harmless file [DRIVE LETTER]:\[WORM FILENAME].vbe - a harmless file c:\8bye.txt %CurrentFolder%\s.vbe %Windir%\uda.a %Windir%\bakfiles\[CHINESE CHARACTERS].bat %Windir%\bakfiles\uda.a C:\Documents and Settings\All Users\[CHINESE CHARACTERS]\[WORM FILENAME].vbe %Windir%\[CHINESE CHARACTERS].txt Read more: http://www.symantec.com/enterprise/secur... Kill the process [CHINESE CHARACTERS]Beta3.exe and remove [CHINESE CHARACTERS]Beta3.exe from Windows startup using RegRun Reanimator. http://www.regrun.com Removal: beta3.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: May 12 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
