|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 pangkalp1nang.exe - Dangerous
W32.Romariory@mm is a mass-mailing worm that spreads through removable devices and network shares. It masquerades as the Super Mario Brothers game. Related files: %Windir%\winlogon.exe %System%\msvbvm60.dll.exe C:\explorer.exe %UserProfile%\Application Data\Emma.exe %UserProfile%\Application Data\Alisa.exe %UserProfile%\My Documents\Mario Bross.exe %UserProfile%\My Documents\Solitaire Card.exe %UserProfile%\My Documents\Minesweeper.exe %System%\PANGKALP1NANG.EXE %System%\SMUNSA_PKP_GAME.EXE C:\Documents and Settings\All Users\Documents\Bola Pantul.exe C:\Documents and Settings\All Users\Documents\MyHearts.exe C:\Documents and Settings\All Users\Documents\FreeCard.exe %SystemDrive%\Game\Minesweeper.exe %SystemDrive%\Game\My Heart.exe %SystemDrive%\Game\Bola.exe %SystemDrive%\Game\Kartu.exe %SystemDrive%\Game\Legend.exe %SystemDrive%\Game\Smart.exe %SystemDrive%\Game\Crazy Mouse.exe %SystemDrive%\Game\Text Animation.exe %SystemDrive%\Game\Pink Panther.exe %SystemDrive%\Game\Start Hide.exe %SystemDrive%\Game\XP Button.exe %SystemDrive%\Game\Goncang.exe %SystemDrive%\Game\Kelap Kelip.exe %SystemDrive%\Game\Layar Jatuh.exe %SystemDrive%\Game\Dark Screen.exe %SystemDrive%\Mario.exe %UserProfile%\Application Data\Emira.ini %UserProfile%\Application Data\Aliciana.htt %Windir%\Tasks\At1.job (a scheduled task to run the worm everyday at a specified time) %Temp%\inf[RANDOM].tmp (a clean copy of the Super Mario Brothers game) C:\Program Files\mario.exe (clean copy of the Super Mario Brothers game) %SystemDrive%\xplorer.exe %SystemDrive%\desktop.ini %SystemDrive%\Alicia.htt Read more: http://www.symantec.com/enterprise/secur... Kill the process PANGKALP1NANG.EXE and remove PANGKALP1NANG.EXE from Windows startup using RegRun Reanimator. http://www.regrun.com Removal: pangkalp1nang.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: May 12 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
