tech.ebugg-i.com

About Virus W32.Golem.A and Removal tips

2008-03-17T23:55:00.000-07:00

W32.Golem.A is a virus that circulate itself by infects executable files on all local and remote drives except the system drive.

To remove W32.Golem.A virus follow this procedure

1. Disable System Restore (Windows Me/XP) [+].

2. Update computer anti virus software with latest virus definitions.

3. Backup system registry[+].

4. Restart your system in safe-mode.[+]

5. Run a full system virus scan using your updated anti virus program.

Adware.Superiorads - Adware

2008-03-14T23:38:00.000-07:00

Adware.Superiorads is an adware pop-up program that installs a Browser Helper Object for Internet Explorer and this adware displays pop-up advertisements on the computer.

Systems Affected: All- Windows

Source: Symantec

W32.IRCBot.DCN - Backdoor Worm

2008-03-13T09:59:00.000-07:00

W32.IRCBot.DCN is a worm that opens a backdoor on infected computer. This backdoor allows a remote attacker to gain access to that computer. Then the worm tries to connects to IRC server:help.dawnsoul.net:7654.

Worm W32.IRCBot.DCN may download potentially harmful files from remote sites to infected system.

This worm propagate by copying itself to shared folders, network shares and also through Common Internet File System (CISF) shares with weak passwords.

Systems Affected: All Windows

Source: Symantec

SpywareSweeperPro - Suspicious Application

2008-03-12T09:18:00.000-07:00

SpywareSweeperPro is a suspicious application that may give fake, overstated reports of threats on the computer.

Application Name: SpywareSweeperPro
Published by: spyware-sweeper.com

Systems Affected: All Windows

How to remove Suspicious Application SpywareSweeperPro ?

Source: Symantec

Infostealer.Geemarc - Trojan

2008-03-10T21:50:00.000-07:00

Infostealer.Geemarc is a Trojan that steals any Gmail / Googlemail login information like Username and Passwords. Then the Trojan mails theses details to the author.

Systems Affected: All- Windows

Source: Symantec

How to remove Trojan Infostealer.Geemarc ?

VBS.Autill - Worm

2008-03-10T10:18:00.000-07:00

VBS.Autill is a worm that propagate by copying itself to all drives on the infected system. The worm tries to remove all files with '.VBS' extension on the infected computer.

Systems Infected: All Windows

Source: Symantec

Spyware.ChilyEMon - Spyware

2008-03-08T00:48:00.000-08:00

Chily Employee Activity Monitoring Software(Spyware.ChilyEMon) is a spyware program that logs keystrokes, Views screen shots of every desktop activity performed by a user, monitors FTP transfers, monitors Internet activity, Gains full access of the computer, monitors all the programs and application windows accessed over time, Monitors all of the systems over the LAN which the agent is installed upon

Aplication Name: Chily Employee Activity Monitoring Software
Publisher: Chily Softech Pvt. Ltd
Web Location: www.recoveryfix.com

How to remove Spyware.ChilyEMon ?

Source: Symantec

Trackware.ProSearch - Trackware

2008-03-07T23:47:00.000-08:00

Trackware.ProSearch is a trackware program that monitors and records all search queries to search engines like Google, Yahoo, and MSN. Then the program upload this search queries/keyword information to a remote site - prosearchsite.com . The program must be manually installed.

Systems Affected: All Windows

Source: Symantec

Trojan.Trafbrush - Trojan

2008-03-07T22:35:00.000-08:00

Trojan.Trafbrush is a Trojan horse that access some remote sites and then downloads these files.

1. config.ini
2. list.dic

These files contain lists of URLs and search keywords. The Trojan attempts to access URLs in these files at regular intervals using Internet Explorer. The Trojan also tries to access this site ‘luckycn.cn’ and update itself using File Transfer Protocol (FTP) .

Source: Symantec

CasinoOnNet - Suspicious/Unwanted Program

2008-03-07T22:25:00.000-08:00

CasinoOnNet is a potentially suspicious/unwanted program has been installed on computers without notice or permission. This application allows users to play online gambling games.

Application Name: CasinoOnNet
Published by: 888.com

Source: Symantec

Backdoor.Sanjicom - Trojan

2008-03-07T22:01:00.000-08:00

Backdoor.Sanjicom is a Trojan that create a back door on the infected computer .
This Trojan also uses a rootkit program to avoid detection and It also exploit NDIS and TCP/IP drivers to hide its network access.
Systems Affected: All Windows

Source: Symantec

Free Key Logger - Spyware

2008-03-06T06:10:00.000-08:00

Spyware.FreeKeyLog is a spyware program that logs keystrokes from the infected/installed computer.

To avoid detection this spy ware may run silently in the background.

Published by: Virtuoza

Source: Symantec

How to remove Spyware FreeKeyLog ?

MySuperSpy - Spyware

2008-03-06T05:53:00.000-08:00

MySuperSpy is a spy ware program that have keystroke logging and screen capturing activities.

Infected systems: All Windows

Source: Symantec

Remove Tips >>

W32.Mytob.SA@mm - Mass-Mailing Worm

2008-03-06T05:22:00.000-08:00

W32.Mytob.SA@mm is a worm that spreads by mass-mailing itself to the email addresses collected from the infected system. This worm reduces or disable security settings.

Source: Symantec

Trojan.Mdropper.AA - Trojan

2008-03-06T04:52:00.000-08:00

Trojan.Mdropper.AA is a Trojan horse that may download harmful files from remote location and exploits the Microsoft Excel Remote code Execution Vulnerability .

Source: Symantec

MySpaceIM Monitor Sniffer - Spyware

2008-03-05T20:51:00.000-08:00

Spyware.MySpaceIMSnif is a spyware program that sniff and logs MySpaceIM chat sessions information over a local area network.

Application Name: MySpaceIM Monitor Sniffer
Published by: IMMonitor LTD.
Infected Systems: All Windows

Source: Symantec

SymbOS.Commwarrior.C - Worm - Nokia/Symbian OS

2008-03-05T09:23:00.000-08:00

SymbOS.Commwarrior.C is a worm that runs on Symbian OS/ Nokia mobile phones .This worm propagate using Bluetooth, Multimedia Messaging Service (MMS), and Multmedia Cards (MMC) services.

Possible File name: SymCommander_1_06.sis.
** Randomly changing file name with extension ".sis".

Source: Symantec

SearchAndDestroy is a Suspicious Application

2008-03-05T08:40:00.000-08:00

SearchAndDestroy is a suspicious application that gives overstated reports of threats like virus, Spywares, Malwares on the computer.

Application Source: search-and-destroy.com
Systems Affected: All Windows.

SymbOS.Multidropper.A - Trojan - Symbian OS / Nokia

2008-03-05T07:55:00.000-08:00

SymbOS.Multidropper.A is a Trojan which drops SymbOS.Commwarrior.C, SymbOS.Beselo.A and SymbOS.Kiazha.A on devices which runs on Symbian OS.
Nokia Mobile phones are vulnerable to this threat .

Infected Systems: Symbian OS/ Nokia 60 Series
Source: Symantec

How to remove Trojan SymbOS.Multidropper.A ?

W32.Noddaba - Worm

2008-03-05T07:45:00.000-08:00

W32.Noddaba is a worm that spreads through removable drives like USB. This worm copies itself to removable drives on infected system .

Systems Affected: All Windows
Source: Symantec

Infostealer.Scrapkut - Trojan

2008-03-05T07:22:00.001-08:00

Infostealer.Scrapkut is a trojan that steals (financial) information for banking Web sites and then uploads the stolen information to remote sites/attackers.

Carrier: W32.Scrapkut.
Source: Symantec

Infostealer.Scrapkut - Trojan

2008-03-05T07:22:00.000-08:00

Infostealer.Scrapkut is a trojan that steals (financial) information for banking Web sites and then uploads the stolen information to remote sites/attackers.

Carrier: W32.Scrapkut.
Source: Symantec

How to remove Trojan Infostealer.Scrapkut ?

W32.Vimm - Virus

2008-03-04T01:24:00.000-08:00

A virus that contaminate 'exe' files in hard drive.

Infected Systems: All Windows

Source: Symantec

Trojan.Monagrey - Trojan

2008-03-04T01:16:00.000-08:00

Trojan ‘Monagrey’ displays a fake alert message stating that the computer is compromised by a virus called "MonaRonaDona" .

This Trojan also alter the internet search result and displays a website that hosts a misleading application called "Unigray" as one of the top results.

InfeStop - Misleading Application

2008-02-29T22:32:00.000-08:00

InfeStop is a misleading-application that may give fake, overstated reports of threats on the computer.

Source: Symantec