Technical details:
Categories: Trojan,Toolbar
[Kaspersky]AdWare.Win32.ProtectionBar.c,Adware.Win32.ProtectionBar.c,Trojan-Downloader.Win32.Zlob.adl,AdWare.Win32.ProtectionBar.a,AdWare.Win32.ProtectionBar.g,Hoax.Win32.Renos.fo,Hoax.Win32.Renos.fs,AdWare.Win32.ProtectionBar.x,Trojan-Downloader.Win32.Zlob.biu,Trojan-Downloader.Win32.Zlob.acg;
[McAfee]Puper,Puper.dll.gen;
[Other]Win32/Boarim.H,Win32/Boarim.I,Win32.ProtectionBar.J,Hoax.Win32.Renos.ea,Zlob.Media-Codec,Win32/Boarim.M,Win32/Boarim.K,Adware.Win32.ProtectionBar.c,Win32/Boarim.N,Win32/Boarim.O,Trojan.Secup,Win32/Boarim.P,Win32/Borium.T,Win32/Boarim.U,Trojan.Zlob,Win32/Boarim.V,Win32/Boarim.Y,Win32/Boarim.AD,Win32.Boarim.AA,Win32/Boarim.Z,Win32/Boarim.AG,Win32/Boarim.AH ProtectionBar Files:
[%PROGRAM_FILES%]\Media-Codec\iesuninst.exe
[%PROGRAM_FILES%]\Video ActiveX Access\iesbpl.dll
[%PROGRAM_FILES%]\Media-Codec\iesuninst.exe
[%PROGRAM_FILES%]\Video ActiveX Access\iesbpl.dll
ProtectionBar Registry Keys:
HKEY_CLASSES_ROOT\clsid\{052b12f7-86fa-4921-8482-26c42316b522}
ProtectionBar Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
ProtectionBar indications of infection
This symptoms of ProtectionBar detection are the files, registry, and network communication referenced in the technical details section.Method of Infection
Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial.Distribution channels include IRC, peer-to-peer networks, newsgroup postings, e-mail, etc.
Buy Exterminate-It antivirus software and perform a full scan of the computer.
You can also Download Free Trial Version of ExterminateIt! to check your your computer just NOW.
Also Be Aware of the Following Threats:
Removing FCB Trojan
Posts
No comments:
Post a Comment