DesignerLG.exe – adware DollarRevenue
We received the file DESIGNERLG.EXE and detected thatDESIGNERLG.EXE is not good. DESIGNERLG.EXE is Adware. You should remove the file DESIGNERLG.EXE. Kill the process DESIGNERLG.EXE and remove DESIGNERLG.EXE from Windows. Malware Analysis of “DESIGNERLG.EXE” Executed: images.gif Removed: DesignerLG.exe. Full path: C:\Documents and Settings\All Users\Application Data\Designer\DesignerLG.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: DesignerLG.exe Author: Aurora Related File: [...]
Removal Tool
IEHost2Services.dll – trojan Themida
Is the file IEHOST2SERVICES.DLL located on your computer? Then your computer is infected. We do suggest you should remove IEHOST2SERVICES.DLL from your computer as soon as possible. IEHOST2SERVICES.DLL is Trojan/Backdoor. Kill the process IEHOST2SERVICES.DLL and remove IEHOST2SERVICES.DLL from the Windows startup. Malware Analysis of “IEHOST2SERVICES.DLL” Executed: g.exe Removed: IEHost2Services.dll. Full path: C:\WINDOWS\system32\IEHost2Services.dll —————————————————————————————————————————- Detected by [...]
Removal Tool
DBR99006.OCX – trojan Siggen2
The file DBR99006.OCX is malware related. You must delete the file DBR99006.OCX immediately! Delete the file DBR99006.OCX without delay! Kill the process DBR99006.OCX and remove DBR99006.OCX from the Windows startup. Malware Analysis of “DBR99006.OCX” Executed: web06.exe Removed: dbr99006.ocx. Full path: C:\WINDOWS\system32\dbr99006.ocx —————————————————————————————————————————- Detected by UnHackMe: Item Name: E0200804 Author: Related File: C:\WINDOWS\system32\DBR99006.OCX Type: Keyboard Listeners [...]
Removal Tool
UNNISTTALL.EXE – trojan Banker
The program D1B81CDFFA2.DLL is used for hidden penetration into PC and its remote administration. UnHackMe is recommended as a reliable program for solving the problem with D1B81CDFFA2.DLL. Download for free: http://www.unhackme.com Malware Analysis of “UNNISTTALL.EXE” Executed: install_flash_player.exe Removed: Unnisttall.exe. Full path: C:\Unnisttall.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: CIPA Author: Unknown Related File: C:\UNNISTTALL.EXE Type: [...]
Removal Tool
D1B81CDFFA2.DLL – backdoor Delf
The program D1B81CDFFA2.DLL is used for hidden penetration into PC and its remote administration. UnHackMe is recommended as a reliable program for solving the problem with D1B81CDFFA2.DLL. Download for free: http://www.unhackme.com Malware Analysis of “D1B81CDFFA2.DLL” Executed: intimacao.exe Removed: d1b81cdffa2.dll. Full path: C:\Program Files\d1b81cdffa2.dll —————————————————————————————————————————- Detected by UnHackMe: Item Name: {7D94E7AF-D89A-4CAB-B284-3EAA916C48DA} Author: Adobe Systems Incorporated Related [...]
Removal Tool
SERVECR.EXE – backdoor Hupigon
The program SERVECR.EXE is used for hidden penetration into PC and its remote administration. UnHackMe is recommended as a reliable program for solving the problem with SERVECR.EXE. Download for free: http://www.unhackme.com Malware Analysis of “SERVECR.EXE” Executed: jx31.exe Removed: servecr.exe. Full path: C:\WINDOWS\system32\servecr.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: servicse Author: Related File: C:\WINDOWS\system32\servecr.exe Type: Auto [...]
Removal Tool
GAVSDE1.BIN.EXE – rootkit SpyEye
Rootkit GAVSDE1.BIN.EXE is software that enables continued privileged access to a computer while actively hiding its presence. Detection and removal of GAVSDE1.BIN.EXE may be a very difficult process. You should use anti-rootkit software to fix the GAVSDE1.BIN.EXE problem. Malware Analysis of “GAVSDE1.BIN.EXE” Executed: readme.exe Removed: gavsde1.Bin.exe. Full path: C:\gavsde1.Bin\gavsde1.Bin.exe —————————————————————————————————————————- Detected by UnHackMe: – none [...]
Removal Tool
GOOGLEUPDATEBETA.EXE – trojan Menti
We checked up the file GOOGLEUPDATEBETA.EXE and found it hazardous. The file GOOGLEUPDATEBETA.EXE must be deleted from the system immediately. Kill the process GOOGLEUPDATEBETA.EXE and remove GOOGLEUPDATEBETA.EXE from the Windows startup. Malware Analysis of “GOOGLEUPDATEBETA.EXE” Executed: lert.exe Removed: GoogleUpdateBeta.exe. Full path: C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdateBeta.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: GoogleUpdateBeta Author: Related [...]
Removal Tool
WIN_UPDATE.EXE – trojan Banker
The file WIN_UPDATE.EXE is malware related. You must delete the file WIN_UPDATE.EXE immediately! Delete the file WIN_UPDATE.EXE without delay! Kill the process WIN_UPDATE.EXE and remove WIN_UPDATE.EXE from the Windows startup. Malware Analysis of “WIN_UPDATE.EXE” Executed: futebol.exe Removed: win_update.exe. Full path: C:\WINDOWS\system32\win_update.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: Author: Microsoft Corporation Related File: C:\WINDOWS\SYSTEM32\WIN_UPDATE.EXE Type: Registry [...]
Removal Tool
SETUI70VIR.EXE – Fake AntiVirus “Antimalware Doctor”
The file SETUI70VIR.EXE is a part of Fake Antiviral software. You must delete the file SETUI70VIR.EXE immediately! Delete the file SETUI70VIR.EXE without delay! Kill the process SETUI70VIR.EXE and remove SETUI70VIR.EXE from the Windows startup. Malware Analysis of “Antimalware Doctor” Executed: cov700delt.exe Removed: setui70vir.exe Full path: C:\Documents and Settings\Administrator\Application Data\B34B7AF9CB40065433C8C631C37A9A2D\setui70vir.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: [...]
Removal Tool
WINUPDATE.EXE – trojan Agent
We checked up the file winupdate.exe and found it hazardous. The file winupdate.exe must be deleted from the system immediately. Kill the process winupdate.exe and remove winupdate.exe from the Windows startup. Malware Analysis of “WINUPDATE.EXE” Executed: winupdate.exe Removed: winupdate.exe. Full path: C:\WINDOWS\winupdate\winupdate.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: winupdate Author: Related File: C:\WINDOWS\WINUPDATE\WINUPDATE.EXE Type: Registry [...]
Removal Tool
CLEANHDM.EXE – backdoor Clemag
The program CLEANHDM.EXE is used for hidden penetration into PC and its remote administration. UnHackMe is recommended as a reliable program for solving the problem with CLEANHDM.EXE. Download for free: http://www.unhackme.com Malware Analysis of “CLEANHDM.EXE” Executed: rpyjxy.exe Removed: cleanhdm.exe. Full path: C:\Documents and Settings\Administrator\Application Data\cleanhdm.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: 209.172.52.73 www.google.com Author: Unknown [...]
Removal Tool
MSCONFIGE.EXE – worm Jorik
The file MSCONFIGE.EXE is a computer worm. The worm MSCONFIGE.EXE is a self-replicating malicious program, which uses a computer network to send copies of itself to other computers. You must fix the MSCONFIGE.EXE problem as soon as possible! Delete the file MSCONFIGE.EXE from all infected computers in your network. Set up your network firewall against [...]
Removal Tool
SYSTEM34.EXE – backdoor Turkojan
The program SYSTEM34.EXE is used for hidden penetration into PC and its remote administration. UnHackMe is recommended as a reliable program for solving the problem with SYSTEM34.EXE. Download for free: http://www.unhackme.com Malware Analysis of “SYSTEM34.EXE” Executed: msnmsqr.exe Removed: system34.exe. Full path: C:\WINDOWS\system32\system34.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: system34.exe Author: LIA Related File: C:\WINDOWS\SYSTEM32\SYSTEM34.EXE Type: [...]
Removal Tool
HP3900.SYS – rootkit Banker
Rootkit HP3900.SYS is software that enables continued privileged access to a computer while actively hiding its presence. Detection and removal of HP3900.SYS may be a very difficult process. You should use anti-rootkit software to fix the HP3900.SYS problem. Malware Analysis of “HP3900.SYS” Executed: ki.exe Removed: hp3900.sys. Full path: C:\WINDOWS\system32\drivers\hp3900.sys —————————————————————————————————————————- Detected by UnHackMe: – none [...]
Removal Tool
agroio.sys – rootkit BANKER
Rootkit AGROIO.SYS is software that enables continued privileged access to a computer while actively hiding its presence. Detection and removal of AGROIO.SYS may be a very difficult process. You should use anti-rootkit software to fix the AGROIO.SYS problem. Malware Analysis of “AGROIO.SYS” Executed: ki.exe Removed: agroio.sys. Full path: C:\WINDOWS\system32\drivers\agroio.sys —————————————————————————————————————————- Detected by UnHackMe: – none [...]
Removal Tool
splwod64.exe – trojan Zapchast
We checked up the file SPLWOD64.EXE and found it hazardous. The file SPLWOD64.EXE must be deleted from the system immediately. Kill the process SPLWOD64.EXE and remove SPLWOD64.EXE from the Windows startup. Malware Analysis of “SPLWOD64.EXE” Executed: plugin-santander.exe Removed: splwod64.exe. Full path: C:\WINDOWS\splwod64.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: G-Buster Browser Defense Author: Unknown Related File: [...]
Removal Tool
tempfile.exe – worm Rebhip
The file tempfile.exe is a computer worm. The worm tempfile.exe is a self-replicating malicious program, which uses a computer network to send copies of itself to other computers. You must fix the tempfile.exe problem as soon as possible! Delete the file tempfile.exe from all infected computers in your network. Set up your network firewall against [...]
Removal Tool
193.106.175.130 – Malware Domain
he site 193.106.175.130 is used to spread malware. Protect your computer against this site: 193.106.175.130. Delete the lines including193.106.175.130 from the %SysDir%\drivers\etc\hosts file. Removed all rows with “193.106.175.130″ from “%SysDir%\drivers\etc\hosts” file Executed Malware: WINDOWS UPDATES.EXE —————————————————————————————————————————- How to quickly detect malware presence? Files modified: C:\WINDOWS\system32\drivers\etc\hosts —————————————————————————————————————————- WINDOWS UPDATES.EXE is known as: Gen:Trojan.Heur.VP.bm1@aKo1ePmi, Trojan-Dropper.Win32.VB, Trojan:Win32/Dynamer!dtc, Trojan.Agent/Gen-Koobface[Bonkers] [...]
Removal Tool
explorer.dll – trojan SCKeyLog
We checked some samples of EXPLORER.DLL and detected the file EXPLORER.DLL as threat. Remove the EXPLORER.DLL file from your computer right now. Removal tool: http://www.unhackme.com Malware Analysis of “EXPLORER.DLL” Executed: autogamehack.exe Removed: explorer.dll. Full path: C:\WINDOWS\system32\explorer.dll —————————————————————————————————————————- Detected by UnHackMe: Item Name: shell Author: Unknown Related File: Explorer.exe Type: System.ini Item Name: explorer Author: Related [...]
Removal Tool
“XP Antivirus 2012″ – Fake AntiVirus
The file “XP Antivirus 2012″ is a Fake Antiviral software. You must delete the “XP Antivirus 2012″ immediately! Delete the “XP Antivirus 2012″ without delay! Kill the process “XP Antivirus 2012″ and remove “XP Antivirus 2012″ from the Windows startup. Malware Analysis of “XP Antivirus 2012″ Executed: dogsex.avi.exe Removed: bwd.exe. Full path: C:\Documents and Settings\Administrator\Local [...]
Removal Tool
saes.exe – Fake AntiVirus “Kingsoft Antivirus”
The file saes.exe is a part of Fake Antiviral software. You must delete the file saes.exe immediately! Delete the file saes.exe without delay! Kill the process saes.exe and remove saes.exe from the Windows startup. Malware Analysis of “Kingsoft Antivirus WebShield Service” Executed: bbedasetup_w9281.exe Removed: saes.exe. Full path: C:\Documents and Settings\All Users\Application Data\vcry\saes.exe —————————————————————————————————————————- Detected by [...]
Removal Tool
VBSHELL.TLB – adware Inetspeak
We received the file VBSHELL.TLB and detected thatVBSHELL.TLB is not good. VBSHELL.TLB is Adware. You should remove the file VBSHELL.TLB. Kill the process VBSHELL.TLB and remove VBSHELL.TLB from Windows. Malware Analysis of “VBSHELL.TLB” Executed: prot_kitamordecisao.exe Removed: VBSHELL.TLB. Full path: C:\ProgramData\BHO\VBSHELL.TLB —————————————————————————————————————————- Detected by UnHackMe: Item Name: {0B3EA0C4-D25A-44ED-9ED7-286993B41CD1} Author: Microsoft Corp© Related File: C:\PROGRAMDATA\BHO\SILVERLIGHT.DLL Type: Browser [...]
Removal Tool
seekapp132.exe – adware Zwangi
We received the file seekapp.exe132 and detected thatseekapp.exe132 is not good. seekapp.exe132 is Adware. You should remove the file seekapp.exe132. Kill the process seekapp.exe132 and remove seekapp.exe132 from Windows. Malware Analysis of “seekapp132.exe” Executed: skasetup-132-skapwd2.exe Removed: seekapp132.exe. Full path: C:\Documents and Settings\All Users\Application Data\Seekapp\seekapp132.exe —————————————————————————————————————————- Detected by UnHackMe: SEEKAPP132.EXE Default location: C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION [...]
Removal Tool
seekapp.exe – adware Zwangi
We received the file seekapp.exe and detected thatseekapp.exe is not good. seekapp.exe is Adware. You should remove the file seekapp.exe. Kill the process seekapp.exe and remove seekapp.exe from Windows. Malware Analysis of “seekapp.exe” Executed: skasetup-132-skapwd2.exe Removed: seekapp.exe. Full path: C:\Program Files\Seekapp\seekapp.exe —————————————————————————————————————————- Detected by UnHackMe: SEEKAPP.EXE Default location: C:\PROGRAM FILES\SEEKAPP\SEEKAPP.EXE MD5: FBDC2DA56D7794963B74ED95EB0FFA20 SHA1: 8C516133 0BADC044 [...]
Removal Tool
wm.tmp – trojan Agent
The file wm.tmp is malware related. You must delete the file wm.tmp immediately! Delete the file wm.tmp without delay! Kill the process wm.tmp and remove wm.tmp from the Windows startup. Malware Analysis of “wm.tmp” Executed: wmgj.exe Removed: wm.tmp. Full path: C:\WINDOWS\wm.tmp —————————————————————————————————————————- Detected by UnHackMe: Item Name: AppInit_DLLs Author: Unknown Related File: C:\WINDOWS\wm.tmp Type: List [...]
Removal Tool
Cam.exe – worm Ainslot
The file Cam.exe is a computer worm. The worm Cam.exe is a self-replicating malicious program, which uses a computer network to send copies of itself to other computers. You must fix the Cam.exe problem as soon as possible! Delete the file Cam.exe from all infected computers in your network. Set up your network firewall against [...]
Removal Tool
websrv.exe – trojan CeeInject
The file websrv.exe can destroy your system, thus making the computer to work abnormally. websrv.exe is a dangerous file. Removewebsrv.exe from your computer immediately. Kill the process websrv.exe and remove websrv.exe from the Windows startup. Malware Analysis of “websrv.exe” Executed: newstubb.exe Removed: websrv.exe. Full path: C:\WINDOWS\system32\updates\websrv.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: Policies Author: Unknown [...]
Removal Tool
gsgu.exe – trojan VB
The file gsgu.exe is malware related. You must delete the file gsgu.exe immediately! Delete the file gsgu.exe without delay! Kill the process gsgu.exe and remove gsgu.exe from the Windows startup. Malware Analysis of “gsgu.exe” Executed: kp.exe Removed: gsgu.exe. Full path: C:\Documents and Settings\Administrator\Application Data\gsgu.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: Input Manager Author: Related File: [...]
Removal Tool
servis.exe – trojan Buzus
Is the file servis.exe located on your computer? Then your computer is infected. We do suggest you should remove servis.exe from your computer as soon as possible. servis.exe is Trojan/Backdoor. Kill the process servis.exe and remove servis.exe from the Windows startup. Malware Analysis of “servis.exe” Executed: checkupinst.exe Removed: servis.exe. Full path: C:\WINDOWS\system32\srvis\servis.exe —————————————————————————————————————————- Detected by [...]
Removal Tool
- Remember: the best way to remove rootkits is from the outside!
