Trojan List 51

Nazgul Trojan

2009-02-04T00:32:00.001-08:00

Nazgul description:
Nazgul Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Nazgul:

you can run trial version of ExterminateIt, or remove Nazgul manually.

To completely manually remove Nazgul malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Nazgul.

HLLO.Sym Trojan

2009-02-03T17:45:00.001-08:00

HLLO.Sym description:
HLLO.Sym Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing HLLO.Sym:

you can run trial version of ExterminateIt, or remove HLLO.Sym manually.

To completely manually remove HLLO.Sym malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HLLO.Sym.

ecommerce.com Tracking Cookie

2009-02-03T14:20:00.001-08:00

ecommerce.com description:
ecommerce.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing ecommerce.com:

you can run trial version of ExterminateIt, or remove ecommerce.com manually.

To completely manually remove ecommerce.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ecommerce.com.

Pigeon.AVPP Trojan

2009-02-03T13:56:00.001-08:00

Pigeon.AVPP description:
Pigeon.AVPP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVPP:

you can run trial version of ExterminateIt, or remove Pigeon.AVPP manually.

To completely manually remove Pigeon.AVPP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVPP.

PC Spyware

2009-02-03T13:04:00.001-08:00

PC description:
PC Category:Spyware,Hacker Tool
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing PC:

you can run trial version of ExterminateIt, or remove PC manually.

To completely manually remove PC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PC.

Pigeon.AVFF Trojan

2009-02-03T08:41:00.001-08:00

Pigeon.AVFF description:
Pigeon.AVFF Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVFF:

you can run trial version of ExterminateIt, or remove Pigeon.AVFF manually.

To completely manually remove Pigeon.AVFF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVFF.

Bancos.AKP Trojan

2009-02-03T02:06:00.001-08:00

Bancos.AKP description:
Bancos.AKP Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing Bancos.AKP:

you can run trial version of ExterminateIt, or remove Bancos.AKP manually.

To completely manually remove Bancos.AKP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.AKP.

Media.AdVantage Adware

2009-02-03T02:01:00.001-08:00

Media.AdVantage description:
Media.AdVantage Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection Media.AdVantage :

Media.AdVantage Files:
[%PROGRAM_FILES%]\AdVantage\AdVantage.cch
[%PROGRAM_FILES%]\AdVantage\AdVantage.db
[%PROGRAM_FILES%]\AdVantage\AdVantage.exe
[%PROGRAM_FILES%]\AdVantage\AdVantage.htm
[%PROGRAM_FILES%]\AdVantage\AdVUninst.exe
[%PROGRAM_FILES%]\AdVantage\ffext.mod
[%PROGRAM_FILES%]\AdVantage\TR.dll
[%PROGRAM_FILES%]\AdVantage\user.db
[%PROGRAM_FILES%]\AdVantage\AdVantage.cch
[%PROGRAM_FILES%]\AdVantage\AdVantage.db
[%PROGRAM_FILES%]\AdVantage\AdVantage.exe
[%PROGRAM_FILES%]\AdVantage\AdVantage.htm
[%PROGRAM_FILES%]\AdVantage\AdVUninst.exe
[%PROGRAM_FILES%]\AdVantage\ffext.mod
[%PROGRAM_FILES%]\AdVantage\TR.dll
[%PROGRAM_FILES%]\AdVantage\user.db

Media.AdVantage Registry Keys:
HKEY_CLASSES_ROOT\appid\{69e0089f-28bc-4bb5-862b-e2b07c3b83c6}
HKEY_CLASSES_ROOT\clsid\{602d9049-b4ac-4a25-bf75-a9b54d747cba}
HKEY_CLASSES_ROOT\interface\{5ac3a9ef-c0f8-41d4-b4e2-b7cebb794151}
HKEY_CLASSES_ROOT\interface\{862def42-89aa-49fa-ae1f-8a84b1b08a17}
HKEY_CLASSES_ROOT\interface\{f6e4845d-1d13-4bc0-942d-b9191524cc48}
HKEY_CLASSES_ROOT\typelib\{dabf362d-d442-4402-9208-ca9ed70dd01e}
HKEY_CURRENT_USER\software\advantage

Media.AdVantage Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing Media.AdVantage:

you can run trial version of ExterminateIt, or remove Media.AdVantage manually.

To completely manually remove Media.AdVantage malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Media.AdVantage.

FR.Lite RAT

2009-02-03T00:26:00.001-08:00

FR.Lite description:
FR.Lite Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing FR.Lite:

you can run trial version of ExterminateIt, or remove FR.Lite manually.

To completely manually remove FR.Lite malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FR.Lite.

PCSentinel.CommonComponents Spyware

2009-02-02T20:24:00.001-08:00

PCSentinel.CommonComponents description:
PCSentinel.CommonComponents Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Detection PCSentinel.CommonComponents :

PCSentinel.CommonComponents Folders:
[%PROGRAM_FILES%]\PC Sentinel Software
[%PROGRAM_FILES%]\PCS-234
[%PROGRAM_FILES%]\PCS-236
[%PROGRAM_FILES%]\PCS-237

PCSentinel.CommonComponents Registry Keys:
HKEY_CURRENT_USER\software\local appwizard-generated applications\clsr
HKEY_CURRENT_USER\software\pc sentinel software
HKEY_CURRENT_USER\software\pcs-234
HKEY_CURRENT_USER\software\pcs-236
HKEY_CURRENT_USER\software\pcs-237
HKEY_LOCAL_MACHINE\software\pc sentinel software
HKEY_LOCAL_MACHINE\software\pcs-234
HKEY_LOCAL_MACHINE\software\pcs-236
HKEY_LOCAL_MACHINE\software\pcs-237

PCSentinel.CommonComponents Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing PCSentinel.CommonComponents:

you can run trial version of ExterminateIt, or remove PCSentinel.CommonComponents manually.

To completely manually remove PCSentinel.CommonComponents malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PCSentinel.CommonComponents.

V4.more.info.on.the.encryption Trojan

2009-02-02T19:46:00.001-08:00

V4.more.info.on.the.encryption description:
V4.more.info.on.the.encryption Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing V4.more.info.on.the.encryption:

you can run trial version of ExterminateIt, or remove V4.more.info.on.the.encryption manually.

To completely manually remove V4.more.info.on.the.encryption malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with V4.more.info.on.the.encryption.

BackConstructor Trojan

2009-02-02T18:36:00.001-08:00

BackConstructor description:
BackConstructor Category:Trojan,Backdoor,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing BackConstructor:

you can run trial version of ExterminateIt, or remove BackConstructor manually.

To completely manually remove BackConstructor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BackConstructor.

Jep.Russ.joke Trojan

2009-02-02T17:53:00.001-08:00

Jep.Russ.joke description:
Jep.Russ.joke Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Jep.Russ.joke:

you can run trial version of ExterminateIt, or remove Jep.Russ.joke manually.

To completely manually remove Jep.Russ.joke malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Jep.Russ.joke.

enmarketing.com Tracking Cookie

2009-02-02T11:38:00.001-08:00

enmarketing.com description:
enmarketing.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing enmarketing.com:

you can run trial version of ExterminateIt, or remove enmarketing.com manually.

To completely manually remove enmarketing.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with enmarketing.com.

Win.AOLPS.Waol Trojan

2009-02-02T11:05:00.001-08:00

Win.AOLPS.Waol description:
Win.AOLPS.Waol Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Win.AOLPS.Waol:

you can run trial version of ExterminateIt, or remove Win.AOLPS.Waol manually.

To completely manually remove Win.AOLPS.Waol malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win.AOLPS.Waol.

Turtle.Identd RAT

2009-02-02T08:29:00.001-08:00

Turtle.Identd description:
Turtle.Identd Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Turtle.Identd:

you can run trial version of ExterminateIt, or remove Turtle.Identd manually.

To completely manually remove Turtle.Identd malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Turtle.Identd.

Pigeon.AXA Trojan

2009-02-02T07:33:00.001-08:00

Pigeon.AXA description:
Pigeon.AXA Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AXA:

you can run trial version of ExterminateIt, or remove Pigeon.AXA manually.

To completely manually remove Pigeon.AXA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AXA.

Dos32.MakeDirs Trojan

2009-02-02T07:25:00.001-08:00

Dos32.MakeDirs description:
Dos32.MakeDirs Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Dos32.MakeDirs:

you can run trial version of ExterminateIt, or remove Dos32.MakeDirs manually.

To completely manually remove Dos32.MakeDirs malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Dos32.MakeDirs.

mIRC.Logare Trojan

2009-02-02T06:50:00.001-08:00

mIRC.Logare description:
mIRC.Logare Category:Trojan,Worm,Backdoor,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Worms can be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.

Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing mIRC.Logare:

you can run trial version of ExterminateIt, or remove mIRC.Logare manually.

To completely manually remove mIRC.Logare malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with mIRC.Logare.

God Trojan

2009-02-02T04:50:00.001-08:00

God description:
God Category:Trojan,Spyware
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Removing God:

you can run trial version of ExterminateIt, or remove God manually.

To completely manually remove God malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with God.

Kiev.Boot Trojan

2009-02-02T02:43:00.001-08:00

Kiev.Boot description:
Kiev.Boot Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Kiev.Boot:

you can run trial version of ExterminateIt, or remove Kiev.Boot manually.

To completely manually remove Kiev.Boot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Kiev.Boot.

Bancos.IOB Trojan

2009-02-02T02:17:00.001-08:00

Bancos.IOB description:
Bancos.IOB Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Bancos.IOB :

Bancos.IOB Files:
[%SYSTEM%]\orkutkut.exe
[%SYSTEM%]\orkutkut.exe

Removing Bancos.IOB:

you can run trial version of ExterminateIt, or remove Bancos.IOB manually.

To completely manually remove Bancos.IOB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.IOB.

AIM.Robber Trojan

2009-02-02T02:15:00.001-08:00

AIM.Robber description:
AIM.Robber Category:Trojan,Backdoor,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing AIM.Robber:

you can run trial version of ExterminateIt, or remove AIM.Robber manually.

To completely manually remove AIM.Robber malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AIM.Robber.

Nacown Trojan

2009-02-02T02:11:00.001-08:00

Nacown description:
Nacown Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Nacown:

you can run trial version of ExterminateIt, or remove Nacown manually.

To completely manually remove Nacown malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Nacown.

Win32.PSW.Ges Trojan

2009-02-02T01:23:00.001-08:00

Win32.PSW.Ges description:
Win32.PSW.Ges Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Win32.PSW.Ges:

you can run trial version of ExterminateIt, or remove Win32.PSW.Ges manually.

To completely manually remove Win32.PSW.Ges malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.PSW.Ges.