WORM_PROLACO.AC

Data de publicação: 13 outubro 2012

Worm:Win32/Prolaco.gen!C (Microsoft); IRC/Flood.ff (McAfee); W32.Ackantta@mm (Symantec); Trojan-Dropper.Win32.Typic.bev (Kaspersky); Worm.Win32.Prolaco.gen.c (v) (Sunbelt); Rootkit.36329 (FSecure)

Plataforma:

Windows 2000, Windows XP, Windows Server 2003

Classificao do risco total:

Potencial de dano:

Potencial de distribuição:

infecção relatada:

Baixo

Medium

Alto

Crítico

Tipo de grayware:
Worm
Destrutivo:
Não
Criptografado:
In the Wild:
Sim

Visão geral

Detalhes técnicos

Tipo de compactação: 439,808 bytes

Tipo de arquivo: EXE

Residente na memória: Sim

Data de recebimento das amostras iniciais: 23 julho 2012

Installation

Schleust die folgenden Eigenkopien in das betroffene System ein:

%System%\AdobeARMI.exe
%Program Files%\icq\shared folder\K-Lite Mega Codec v5.5.1.exe
%Program Files%\icq\shared folder\YouTubeGet 5.4.exe
%Program Files%\icq\shared folder\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%Program Files%\icq\shared folder\K-Lite Mega Codec v5.6.1 Portable.exe
%Program Files%\icq\shared folder\Adobe Photoshop CS4 crack.exe
%Program Files%\icq\shared folder\VmWare 7.0 keygen.exe
%Program Files%\icq\shared folder\WinRAR v3.x keygen RaZoR.exe
%Program Files%\icq\shared folder\Twitter FriendAdder 2.1.1.exe
%Program Files%\icq\shared folder\PDF Unlocker v2.0.3.exe
%Program Files%\icq\shared folder\Image Size Reducer Pro v1.0.1.exe
%Program Files%\icq\shared folder\Anti-Porn v13.5.12.29.exe
%Program Files%\icq\shared folder\Norton Internet Security 2010 crack.exe
%Program Files%\icq\shared folder\Kaspersky AntiVirus 2010 crack.exe
%Program Files%\icq\shared folder\PDF-XChange Pro.exe
%Program Files%\icq\shared folder\Windows 7 Ultimate keygen.exe
%Program Files%\icq\shared folder\RapidShare Killer AIO 2010.exe
%Program Files%\icq\shared folder\Ashampoo Snap 3.02.exe
%Program Files%\icq\shared folder\Blaze DVD Player Pro v6.52.exe
%Program Files%\icq\shared folder\Adobe Illustrator CS4 crack.exe
%Program Files%\icq\shared folder\Rapidshare Auto Downloader 3.8.exe
%Program Files%\icq\shared folder\Trojan Killer v2.9.4173.exe
%Program Files%\icq\shared folder\PDF to Word Converter 3.0.exe
%Program Files%\icq\shared folder\Google SketchUp 7.1 Pro.exe
%Program Files%\icq\shared folder\McAfee Total Protection 2010.exe
%Program Files%\icq\shared folder\Mp3 Splitter and Joiner Pro v3.48.exe
%Program Files%\icq\shared folder\Youtube Music Downloader 1.0.exe
%Program Files%\icq\shared folder\Adobe Acrobat Reader keygen.exe
%Program Files%\icq\shared folder\VmWare keygen.exe
%Program Files%\icq\shared folder\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%Program Files%\icq\shared folder\Ad-aware 2010.exe
%Program Files%\icq\shared folder\BitDefender AntiVirus 2010 Keygen.exe
%Program Files%\icq\shared folder\Norton Anti-Virus 2010 Enterprise Crack.exe
%Program Files%\icq\shared folder\Total Commander7 license+keygen.exe
%Program Files%\icq\shared folder\LimeWire Pro v4.18.3.exe
%Program Files%\icq\shared folder\Download Accelerator Plus v9.exe
%Program Files%\icq\shared folder\Internet Download Manager V5.exe
%Program Files%\icq\shared folder\Myspace theme collection.exe
%Program Files%\icq\shared folder\Nero 9 9.2.6.0 keygen.exe
%Program Files%\icq\shared folder\Motorola, nokia, ericsson mobil phone tools.exe
%Program Files%\icq\shared folder\Absolute Video Converter 6.2.exe
%Program Files%\icq\shared folder\Daemon Tools Pro 4.11.exe
%Program Files%\icq\shared folder\Download Boost 2.0.exe
%Program Files%\icq\shared folder\Avast 4.8 Professional.exe
%Program Files%\icq\shared folder\Grand Theft Auto IV (Offline Activation).exe
%Program Files%\icq\shared folder\Alcohol 120 v1.9.7.exe
%Program Files%\icq\shared folder\CleanMyPC Registry Cleaner v6.02.exe
%Program Files%\icq\shared folder\Super Utilities Pro 2009 11.0.exe
%Program Files%\icq\shared folder\Power ISO v4.2 + keygen axxo.exe
%Program Files%\icq\shared folder\G-Force Platinum v3.7.5.exe
%Program Files%\icq\shared folder\Divx Pro 7 + keymaker.exe
%Program Files%\icq\shared folder\Magic Video Converter 8 0 2 18.exe
%Program Files%\icq\shared folder\Sophos antivirus updater bypass.exe
%Program Files%\icq\shared folder\DVD Tools Nero 10.5.6.0.exe
%Program Files%\icq\shared folder\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%Program Files%\icq\shared folder\PDF password remover (works with all acrobat reader).exe
%Program Files%\icq\shared folder\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%Program Files%\icq\shared folder\Windows2008 keygen and activator.exe
%Program Files%\icq\shared folder\Tuneup Ultilities 2010.exe
%Program Files%\icq\shared folder\Kaspersky Internet Security 2010 keygen.exe
%Program Files%\icq\shared folder\Windows XP PRO Corp SP3 valid-key generator.exe
%Program Files%\icq\shared folder\Starcraft2 Patch v0.2.exe
%Program Files%\icq\shared folder\Starcraft2 keys.txt.exe
%Program Files%\icq\shared folder\Starcraft2 Crack.exe
%Program Files%\icq\shared folder\Starcraft2 Oblivion DLL.exe
%Program Files%\icq\shared folder\Starcraft2.exe
%Program Files%\grokster\my grokster\K-Lite Mega Codec v5.5.1.exe
%Program Files%\grokster\my grokster\YouTubeGet 5.4.exe
%Program Files%\grokster\my grokster\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%Program Files%\grokster\my grokster\K-Lite Mega Codec v5.6.1 Portable.exe
%Program Files%\grokster\my grokster\Adobe Photoshop CS4 crack.exe
%Program Files%\grokster\my grokster\VmWare 7.0 keygen.exe
%Program Files%\grokster\my grokster\WinRAR v3.x keygen RaZoR.exe
%Program Files%\grokster\my grokster\Twitter FriendAdder 2.1.1.exe
%Program Files%\grokster\my grokster\PDF Unlocker v2.0.3.exe
%Program Files%\grokster\my grokster\Image Size Reducer Pro v1.0.1.exe
%Program Files%\grokster\my grokster\Anti-Porn v13.5.12.29.exe
%Program Files%\grokster\my grokster\Norton Internet Security 2010 crack.exe
%Program Files%\grokster\my grokster\Kaspersky AntiVirus 2010 crack.exe
%Program Files%\grokster\my grokster\PDF-XChange Pro.exe
%Program Files%\grokster\my grokster\Windows 7 Ultimate keygen.exe
%Program Files%\grokster\my grokster\RapidShare Killer AIO 2010.exe
%Program Files%\grokster\my grokster\Ashampoo Snap 3.02.exe
%Program Files%\grokster\my grokster\Blaze DVD Player Pro v6.52.exe
%Program Files%\grokster\my grokster\Adobe Illustrator CS4 crack.exe
%Program Files%\grokster\my grokster\Rapidshare Auto Downloader 3.8.exe
%Program Files%\grokster\my grokster\Trojan Killer v2.9.4173.exe
%Program Files%\grokster\my grokster\PDF to Word Converter 3.0.exe
%Program Files%\grokster\my grokster\Google SketchUp 7.1 Pro.exe
%Program Files%\grokster\my grokster\McAfee Total Protection 2010.exe
%Program Files%\grokster\my grokster\Mp3 Splitter and Joiner Pro v3.48.exe
%Program Files%\grokster\my grokster\Youtube Music Downloader 1.0.exe
%Program Files%\grokster\my grokster\Adobe Acrobat Reader keygen.exe
%Program Files%\grokster\my grokster\VmWare keygen.exe
%Program Files%\grokster\my grokster\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%Program Files%\grokster\my grokster\Ad-aware 2010.exe
%Program Files%\grokster\my grokster\BitDefender AntiVirus 2010 Keygen.exe
%Program Files%\grokster\my grokster\Norton Anti-Virus 2010 Enterprise Crack.exe
%Program Files%\grokster\my grokster\Total Commander7 license+keygen.exe
%Program Files%\grokster\my grokster\LimeWire Pro v4.18.3.exe
%Program Files%\grokster\my grokster\Download Accelerator Plus v9.exe
%Program Files%\grokster\my grokster\Internet Download Manager V5.exe
%Program Files%\grokster\my grokster\Myspace theme collection.exe
%Program Files%\grokster\my grokster\Nero 9 9.2.6.0 keygen.exe
%Program Files%\grokster\my grokster\Motorola, nokia, ericsson mobil phone tools.exe
%Program Files%\grokster\my grokster\Absolute Video Converter 6.2.exe
%Program Files%\grokster\my grokster\Daemon Tools Pro 4.11.exe
%Program Files%\grokster\my grokster\Download Boost 2.0.exe
%Program Files%\grokster\my grokster\Avast 4.8 Professional.exe
%Program Files%\grokster\my grokster\Grand Theft Auto IV (Offline Activation).exe
%Program Files%\grokster\my grokster\Alcohol 120 v1.9.7.exe
%Program Files%\grokster\my grokster\CleanMyPC Registry Cleaner v6.02.exe
%Program Files%\grokster\my grokster\Super Utilities Pro 2009 11.0.exe
%Program Files%\grokster\my grokster\Power ISO v4.2 + keygen axxo.exe
%Program Files%\grokster\my grokster\G-Force Platinum v3.7.5.exe
%Program Files%\grokster\my grokster\Divx Pro 7 + keymaker.exe
%Program Files%\grokster\my grokster\Magic Video Converter 8 0 2 18.exe
%Program Files%\grokster\my grokster\Sophos antivirus updater bypass.exe
%Program Files%\grokster\my grokster\DVD Tools Nero 10.5.6.0.exe
%Program Files%\grokster\my grokster\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%Program Files%\grokster\my grokster\PDF password remover (works with all acrobat reader).exe
%Program Files%\grokster\my grokster\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%Program Files%\grokster\my grokster\Windows2008 keygen and activator.exe
%Program Files%\grokster\my grokster\Tuneup Ultilities 2010.exe
%Program Files%\grokster\my grokster\Kaspersky Internet Security 2010 keygen.exe
%Program Files%\grokster\my grokster\Windows XP PRO Corp SP3 valid-key generator.exe
%Program Files%\grokster\my grokster\Starcraft2 Patch v0.2.exe
%Program Files%\grokster\my grokster\Starcraft2 keys.txt.exe
%Program Files%\grokster\my grokster\Starcraft2 Crack.exe
%Program Files%\grokster\my grokster\Starcraft2 Oblivion DLL.exe
%Program Files%\grokster\my grokster\Starcraft2.exe
%Program Files%\emule\incoming\K-Lite Mega Codec v5.5.1.exe
%Program Files%\emule\incoming\YouTubeGet 5.4.exe
%Program Files%\emule\incoming\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%Program Files%\emule\incoming\K-Lite Mega Codec v5.6.1 Portable.exe
%Program Files%\emule\incoming\Adobe Photoshop CS4 crack.exe
%Program Files%\emule\incoming\VmWare 7.0 keygen.exe
%Program Files%\emule\incoming\WinRAR v3.x keygen RaZoR.exe
%Program Files%\emule\incoming\Twitter FriendAdder 2.1.1.exe
%Program Files%\emule\incoming\PDF Unlocker v2.0.3.exe
%Program Files%\emule\incoming\Image Size Reducer Pro v1.0.1.exe
%Program Files%\emule\incoming\Anti-Porn v13.5.12.29.exe
%Program Files%\emule\incoming\Norton Internet Security 2010 crack.exe
%Program Files%\emule\incoming\Kaspersky AntiVirus 2010 crack.exe
%Program Files%\emule\incoming\PDF-XChange Pro.exe
%Program Files%\emule\incoming\Windows 7 Ultimate keygen.exe
%Program Files%\emule\incoming\RapidShare Killer AIO 2010.exe
%Program Files%\emule\incoming\Ashampoo Snap 3.02.exe
%Program Files%\emule\incoming\Blaze DVD Player Pro v6.52.exe
%Program Files%\emule\incoming\Adobe Illustrator CS4 crack.exe
%Program Files%\emule\incoming\Rapidshare Auto Downloader 3.8.exe
%Program Files%\emule\incoming\Trojan Killer v2.9.4173.exe
%Program Files%\emule\incoming\PDF to Word Converter 3.0.exe
%Program Files%\emule\incoming\Google SketchUp 7.1 Pro.exe
%Program Files%\emule\incoming\McAfee Total Protection 2010.exe
%Program Files%\emule\incoming\Mp3 Splitter and Joiner Pro v3.48.exe
%Program Files%\emule\incoming\Youtube Music Downloader 1.0.exe
%Program Files%\emule\incoming\Adobe Acrobat Reader keygen.exe
%Program Files%\emule\incoming\VmWare keygen.exe
%Program Files%\emule\incoming\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%Program Files%\emule\incoming\Ad-aware 2010.exe
%Program Files%\emule\incoming\BitDefender AntiVirus 2010 Keygen.exe
%Program Files%\emule\incoming\Norton Anti-Virus 2010 Enterprise Crack.exe
%Program Files%\emule\incoming\Total Commander7 license+keygen.exe
%Program Files%\emule\incoming\LimeWire Pro v4.18.3.exe
%Program Files%\emule\incoming\Download Accelerator Plus v9.exe
%Program Files%\emule\incoming\Internet Download Manager V5.exe
%Program Files%\emule\incoming\Myspace theme collection.exe
%Program Files%\emule\incoming\Nero 9 9.2.6.0 keygen.exe
%Program Files%\emule\incoming\Motorola, nokia, ericsson mobil phone tools.exe
%Program Files%\emule\incoming\Absolute Video Converter 6.2.exe
%Program Files%\emule\incoming\Daemon Tools Pro 4.11.exe
%Program Files%\emule\incoming\Download Boost 2.0.exe
%Program Files%\emule\incoming\Avast 4.8 Professional.exe
%Program Files%\emule\incoming\Grand Theft Auto IV (Offline Activation).exe
%Program Files%\emule\incoming\Alcohol 120 v1.9.7.exe
%Program Files%\emule\incoming\CleanMyPC Registry Cleaner v6.02.exe
%Program Files%\emule\incoming\Super Utilities Pro 2009 11.0.exe
%Program Files%\emule\incoming\Power ISO v4.2 + keygen axxo.exe
%Program Files%\emule\incoming\G-Force Platinum v3.7.5.exe
%Program Files%\emule\incoming\Divx Pro 7 + keymaker.exe
%Program Files%\emule\incoming\Magic Video Converter 8 0 2 18.exe
%Program Files%\emule\incoming\Sophos antivirus updater bypass.exe
%Program Files%\emule\incoming\DVD Tools Nero 10.5.6.0.exe
%Program Files%\emule\incoming\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%Program Files%\emule\incoming\PDF password remover (works with all acrobat reader).exe
%Program Files%\emule\incoming\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%Program Files%\emule\incoming\Windows2008 keygen and activator.exe
%Program Files%\emule\incoming\Tuneup Ultilities 2010.exe
%Program Files%\emule\incoming\Kaspersky Internet Security 2010 keygen.exe
%Program Files%\emule\incoming\Windows XP PRO Corp SP3 valid-key generator.exe
%Program Files%\emule\incoming\Starcraft2 Patch v0.2.exe
%Program Files%\emule\incoming\Starcraft2 keys.txt.exe
%Program Files%\emule\incoming\Starcraft2 Crack.exe
%Program Files%\emule\incoming\Starcraft2 Oblivion DLL.exe
%Program Files%\emule\incoming\Starcraft2.exe
%Program Files%\morpheus\my shared folder\K-Lite Mega Codec v5.5.1.exe
%Program Files%\morpheus\my shared folder\YouTubeGet 5.4.exe
%Program Files%\morpheus\my shared folder\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%Program Files%\morpheus\my shared folder\K-Lite Mega Codec v5.6.1 Portable.exe
%Program Files%\morpheus\my shared folder\Adobe Photoshop CS4 crack.exe
%Program Files%\morpheus\my shared folder\VmWare 7.0 keygen.exe
%Program Files%\morpheus\my shared folder\WinRAR v3.x keygen RaZoR.exe
%Program Files%\morpheus\my shared folder\Twitter FriendAdder 2.1.1.exe
%Program Files%\morpheus\my shared folder\PDF Unlocker v2.0.3.exe
%Program Files%\morpheus\my shared folder\Image Size Reducer Pro v1.0.1.exe
%Program Files%\morpheus\my shared folder\Anti-Porn v13.5.12.29.exe
%Program Files%\morpheus\my shared folder\Norton Internet Security 2010 crack.exe
%Program Files%\morpheus\my shared folder\Kaspersky AntiVirus 2010 crack.exe
%Program Files%\morpheus\my shared folder\PDF-XChange Pro.exe
%Program Files%\morpheus\my shared folder\Windows 7 Ultimate keygen.exe
%Program Files%\morpheus\my shared folder\RapidShare Killer AIO 2010.exe
%Program Files%\morpheus\my shared folder\Ashampoo Snap 3.02.exe
%Program Files%\morpheus\my shared folder\Blaze DVD Player Pro v6.52.exe
%Program Files%\morpheus\my shared folder\Adobe Illustrator CS4 crack.exe
%Program Files%\morpheus\my shared folder\Rapidshare Auto Downloader 3.8.exe
%Program Files%\morpheus\my shared folder\Trojan Killer v2.9.4173.exe
%Program Files%\morpheus\my shared folder\PDF to Word Converter 3.0.exe
%Program Files%\morpheus\my shared folder\Google SketchUp 7.1 Pro.exe
%Program Files%\morpheus\my shared folder\McAfee Total Protection 2010.exe
%Program Files%\morpheus\my shared folder\Mp3 Splitter and Joiner Pro v3.48.exe
%Program Files%\morpheus\my shared folder\Youtube Music Downloader 1.0.exe
%Program Files%\morpheus\my shared folder\Adobe Acrobat Reader keygen.exe
%Program Files%\morpheus\my shared folder\VmWare keygen.exe
%Program Files%\morpheus\my shared folder\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%Program Files%\morpheus\my shared folder\Ad-aware 2010.exe
%Program Files%\morpheus\my shared folder\BitDefender AntiVirus 2010 Keygen.exe
%Program Files%\morpheus\my shared folder\Norton Anti-Virus 2010 Enterprise Crack.exe
%Program Files%\morpheus\my shared folder\Total Commander7 license+keygen.exe
%Program Files%\morpheus\my shared folder\LimeWire Pro v4.18.3.exe
%Program Files%\morpheus\my shared folder\Download Accelerator Plus v9.exe
%Program Files%\morpheus\my shared folder\Internet Download Manager V5.exe
%Program Files%\morpheus\my shared folder\Myspace theme collection.exe
%Program Files%\morpheus\my shared folder\Nero 9 9.2.6.0 keygen.exe
%Program Files%\morpheus\my shared folder\Motorola, nokia, ericsson mobil phone tools.exe
%Program Files%\morpheus\my shared folder\Absolute Video Converter 6.2.exe
%Program Files%\morpheus\my shared folder\Daemon Tools Pro 4.11.exe
%Program Files%\morpheus\my shared folder\Download Boost 2.0.exe
%Program Files%\morpheus\my shared folder\Avast 4.8 Professional.exe
%Program Files%\morpheus\my shared folder\Grand Theft Auto IV (Offline Activation).exe
%Program Files%\morpheus\my shared folder\Alcohol 120 v1.9.7.exe
%Program Files%\morpheus\my shared folder\CleanMyPC Registry Cleaner v6.02.exe
%Program Files%\morpheus\my shared folder\Super Utilities Pro 2009 11.0.exe
%Program Files%\morpheus\my shared folder\Power ISO v4.2 + keygen axxo.exe
%Program Files%\morpheus\my shared folder\G-Force Platinum v3.7.5.exe
%Program Files%\morpheus\my shared folder\Divx Pro 7 + keymaker.exe
%Program Files%\morpheus\my shared folder\Magic Video Converter 8 0 2 18.exe
%Program Files%\morpheus\my shared folder\Sophos antivirus updater bypass.exe
%Program Files%\morpheus\my shared folder\DVD Tools Nero 10.5.6.0.exe
%Program Files%\morpheus\my shared folder\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%Program Files%\morpheus\my shared folder\PDF password remover (works with all acrobat reader).exe
%Program Files%\morpheus\my shared folder\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%Program Files%\morpheus\my shared folder\Windows2008 keygen and activator.exe
%Program Files%\morpheus\my shared folder\Tuneup Ultilities 2010.exe
%Program Files%\morpheus\my shared folder\Kaspersky Internet Security 2010 keygen.exe
%Program Files%\morpheus\my shared folder\Windows XP PRO Corp SP3 valid-key generator.exe
%Program Files%\morpheus\my shared folder\Starcraft2 Patch v0.2.exe
%Program Files%\morpheus\my shared folder\Starcraft2 keys.txt.exe
%Program Files%\morpheus\my shared folder\Starcraft2 Crack.exe
%Program Files%\morpheus\my shared folder\Starcraft2 Oblivion DLL.exe
%Program Files%\morpheus\my shared folder\Starcraft2.exe
%Program Files%\limewire\shared\K-Lite Mega Codec v5.5.1.exe
%Program Files%\limewire\shared\YouTubeGet 5.4.exe
%Program Files%\limewire\shared\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%Program Files%\limewire\shared\K-Lite Mega Codec v5.6.1 Portable.exe
%Program Files%\limewire\shared\Adobe Photoshop CS4 crack.exe
%Program Files%\limewire\shared\VmWare 7.0 keygen.exe
%Program Files%\limewire\shared\WinRAR v3.x keygen RaZoR.exe
%Program Files%\limewire\shared\Twitter FriendAdder 2.1.1.exe
%Program Files%\limewire\shared\PDF Unlocker v2.0.3.exe
%Program Files%\limewire\shared\Image Size Reducer Pro v1.0.1.exe
%Program Files%\limewire\shared\Anti-Porn v13.5.12.29.exe
%Program Files%\limewire\shared\Norton Internet Security 2010 crack.exe
%Program Files%\limewire\shared\Kaspersky AntiVirus 2010 crack.exe
%Program Files%\limewire\shared\PDF-XChange Pro.exe
%Program Files%\limewire\shared\Windows 7 Ultimate keygen.exe
%Program Files%\limewire\shared\RapidShare Killer AIO 2010.exe
%Program Files%\limewire\shared\Ashampoo Snap 3.02.exe
%Program Files%\limewire\shared\Blaze DVD Player Pro v6.52.exe
%Program Files%\limewire\shared\Adobe Illustrator CS4 crack.exe
%Program Files%\limewire\shared\Rapidshare Auto Downloader 3.8.exe
%Program Files%\limewire\shared\Trojan Killer v2.9.4173.exe
%Program Files%\limewire\shared\PDF to Word Converter 3.0.exe
%Program Files%\limewire\shared\Google SketchUp 7.1 Pro.exe
%Program Files%\limewire\shared\McAfee Total Protection 2010.exe
%Program Files%\limewire\shared\Mp3 Splitter and Joiner Pro v3.48.exe
%Program Files%\limewire\shared\Youtube Music Downloader 1.0.exe
%Program Files%\limewire\shared\Adobe Acrobat Reader keygen.exe
%Program Files%\limewire\shared\VmWare keygen.exe
%Program Files%\limewire\shared\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%Program Files%\limewire\shared\Ad-aware 2010.exe
%Program Files%\limewire\shared\BitDefender AntiVirus 2010 Keygen.exe
%Program Files%\limewire\shared\Norton Anti-Virus 2010 Enterprise Crack.exe
%Program Files%\limewire\shared\Total Commander7 license+keygen.exe
%Program Files%\limewire\shared\LimeWire Pro v4.18.3.exe
%Program Files%\limewire\shared\Download Accelerator Plus v9.exe
%Program Files%\limewire\shared\Internet Download Manager V5.exe
%Program Files%\limewire\shared\Myspace theme collection.exe
%Program Files%\limewire\shared\Nero 9 9.2.6.0 keygen.exe
%Program Files%\limewire\shared\Motorola, nokia, ericsson mobil phone tools.exe
%Program Files%\limewire\shared\Absolute Video Converter 6.2.exe
%Program Files%\limewire\shared\Daemon Tools Pro 4.11.exe
%Program Files%\limewire\shared\Download Boost 2.0.exe
%Program Files%\limewire\shared\Avast 4.8 Professional.exe
%Program Files%\limewire\shared\Grand Theft Auto IV (Offline Activation).exe
%Program Files%\limewire\shared\Alcohol 120 v1.9.7.exe
%Program Files%\limewire\shared\CleanMyPC Registry Cleaner v6.02.exe
%Program Files%\limewire\shared\Super Utilities Pro 2009 11.0.exe
%Program Files%\limewire\shared\Power ISO v4.2 + keygen axxo.exe
%Program Files%\limewire\shared\G-Force Platinum v3.7.5.exe
%Program Files%\limewire\shared\Divx Pro 7 + keymaker.exe
%Program Files%\limewire\shared\Magic Video Converter 8 0 2 18.exe
%Program Files%\limewire\shared\Sophos antivirus updater bypass.exe
%Program Files%\limewire\shared\DVD Tools Nero 10.5.6.0.exe
%Program Files%\limewire\shared\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%Program Files%\limewire\shared\PDF password remover (works with all acrobat reader).exe
%Program Files%\limewire\shared\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%Program Files%\limewire\shared\Windows2008 keygen and activator.exe
%Program Files%\limewire\shared\Tuneup Ultilities 2010.exe
%Program Files%\limewire\shared\Kaspersky Internet Security 2010 keygen.exe
%Program Files%\limewire\shared\Windows XP PRO Corp SP3 valid-key generator.exe
%Program Files%\limewire\shared\Starcraft2 Patch v0.2.exe
%Program Files%\limewire\shared\Starcraft2 keys.txt.exe
%Program Files%\limewire\shared\Starcraft2 Crack.exe
%Program Files%\limewire\shared\Starcraft2 Oblivion DLL.exe
%Program Files%\limewire\shared\Starcraft2.exe
%Program Files%\tesla\files\K-Lite Mega Codec v5.5.1.exe
%Program Files%\tesla\files\YouTubeGet 5.4.exe
%Program Files%\tesla\files\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%Program Files%\tesla\files\K-Lite Mega Codec v5.6.1 Portable.exe
%Program Files%\tesla\files\Adobe Photoshop CS4 crack.exe
%Program Files%\tesla\files\VmWare 7.0 keygen.exe
%Program Files%\tesla\files\WinRAR v3.x keygen RaZoR.exe
%Program Files%\tesla\files\Twitter FriendAdder 2.1.1.exe
%Program Files%\tesla\files\PDF Unlocker v2.0.3.exe
%Program Files%\tesla\files\Image Size Reducer Pro v1.0.1.exe
%Program Files%\tesla\files\Anti-Porn v13.5.12.29.exe
%Program Files%\tesla\files\Norton Internet Security 2010 crack.exe
%Program Files%\tesla\files\Kaspersky AntiVirus 2010 crack.exe
%Program Files%\tesla\files\PDF-XChange Pro.exe
%Program Files%\tesla\files\Windows 7 Ultimate keygen.exe
%Program Files%\tesla\files\RapidShare Killer AIO 2010.exe
%Program Files%\tesla\files\Ashampoo Snap 3.02.exe
%Program Files%\tesla\files\Blaze DVD Player Pro v6.52.exe
%Program Files%\tesla\files\Adobe Illustrator CS4 crack.exe
%Program Files%\tesla\files\Rapidshare Auto Downloader 3.8.exe
%Program Files%\tesla\files\Trojan Killer v2.9.4173.exe
%Program Files%\tesla\files\PDF to Word Converter 3.0.exe
%Program Files%\tesla\files\Google SketchUp 7.1 Pro.exe
%Program Files%\tesla\files\McAfee Total Protection 2010.exe
%Program Files%\tesla\files\Mp3 Splitter and Joiner Pro v3.48.exe
%Program Files%\tesla\files\Youtube Music Downloader 1.0.exe
%Program Files%\tesla\files\Adobe Acrobat Reader keygen.exe
%Program Files%\tesla\files\VmWare keygen.exe
%Program Files%\tesla\files\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%Program Files%\tesla\files\Ad-aware 2010.exe
%Program Files%\tesla\files\BitDefender AntiVirus 2010 Keygen.exe
%Program Files%\tesla\files\Norton Anti-Virus 2010 Enterprise Crack.exe
%Program Files%\tesla\files\Total Commander7 license+keygen.exe
%Program Files%\tesla\files\LimeWire Pro v4.18.3.exe
%Program Files%\tesla\files\Download Accelerator Plus v9.exe
%Program Files%\tesla\files\Internet Download Manager V5.exe
%Program Files%\tesla\files\Myspace theme collection.exe
%Program Files%\tesla\files\Nero 9 9.2.6.0 keygen.exe
%Program Files%\tesla\files\Motorola, nokia, ericsson mobil phone tools.exe
%Program Files%\tesla\files\Absolute Video Converter 6.2.exe
%Program Files%\tesla\files\Daemon Tools Pro 4.11.exe
%Program Files%\tesla\files\Download Boost 2.0.exe
%Program Files%\tesla\files\Avast 4.8 Professional.exe
%Program Files%\tesla\files\Grand Theft Auto IV (Offline Activation).exe
%Program Files%\tesla\files\Alcohol 120 v1.9.7.exe
%Program Files%\tesla\files\CleanMyPC Registry Cleaner v6.02.exe
%Program Files%\tesla\files\Super Utilities Pro 2009 11.0.exe
%Program Files%\tesla\files\Power ISO v4.2 + keygen axxo.exe
%Program Files%\tesla\files\G-Force Platinum v3.7.5.exe
%Program Files%\tesla\files\Divx Pro 7 + keymaker.exe
%Program Files%\tesla\files\Magic Video Converter 8 0 2 18.exe
%Program Files%\tesla\files\Sophos antivirus updater bypass.exe
%Program Files%\tesla\files\DVD Tools Nero 10.5.6.0.exe
%Program Files%\tesla\files\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%Program Files%\tesla\files\PDF password remover (works with all acrobat reader).exe
%Program Files%\tesla\files\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%Program Files%\tesla\files\Windows2008 keygen and activator.exe
%Program Files%\tesla\files\Tuneup Ultilities 2010.exe
%Program Files%\tesla\files\Kaspersky Internet Security 2010 keygen.exe
%Program Files%\tesla\files\Windows XP PRO Corp SP3 valid-key generator.exe
%Program Files%\tesla\files\Starcraft2 Patch v0.2.exe
%Program Files%\tesla\files\Starcraft2 keys.txt.exe
%Program Files%\tesla\files\Starcraft2 Crack.exe
%Program Files%\tesla\files\Starcraft2 Oblivion DLL.exe
%Program Files%\tesla\files\Starcraft2.exe
%Program Files%\winmx\shared\K-Lite Mega Codec v5.5.1.exe
%Program Files%\winmx\shared\YouTubeGet 5.4.exe
%Program Files%\winmx\shared\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%Program Files%\winmx\shared\K-Lite Mega Codec v5.6.1 Portable.exe
%Program Files%\winmx\shared\Adobe Photoshop CS4 crack.exe
%Program Files%\winmx\shared\VmWare 7.0 keygen.exe
%Program Files%\winmx\shared\WinRAR v3.x keygen RaZoR.exe
%Program Files%\winmx\shared\Twitter FriendAdder 2.1.1.exe
%Program Files%\winmx\shared\PDF Unlocker v2.0.3.exe
%Program Files%\winmx\shared\Image Size Reducer Pro v1.0.1.exe
%Program Files%\winmx\shared\Anti-Porn v13.5.12.29.exe
%Program Files%\winmx\shared\Norton Internet Security 2010 crack.exe
%Program Files%\winmx\shared\Kaspersky AntiVirus 2010 crack.exe
%Program Files%\winmx\shared\PDF-XChange Pro.exe
%Program Files%\winmx\shared\Windows 7 Ultimate keygen.exe
%Program Files%\winmx\shared\RapidShare Killer AIO 2010.exe
%Program Files%\winmx\shared\Ashampoo Snap 3.02.exe
%Program Files%\winmx\shared\Blaze DVD Player Pro v6.52.exe
%Program Files%\winmx\shared\Adobe Illustrator CS4 crack.exe
%Program Files%\winmx\shared\Rapidshare Auto Downloader 3.8.exe
%Program Files%\winmx\shared\Trojan Killer v2.9.4173.exe
%Program Files%\winmx\shared\PDF to Word Converter 3.0.exe
%Program Files%\winmx\shared\Google SketchUp 7.1 Pro.exe
%Program Files%\winmx\shared\McAfee Total Protection 2010.exe
%Program Files%\winmx\shared\Mp3 Splitter and Joiner Pro v3.48.exe
%Program Files%\winmx\shared\Youtube Music Downloader 1.0.exe
%Program Files%\winmx\shared\Adobe Acrobat Reader keygen.exe
%Program Files%\winmx\shared\VmWare keygen.exe
%Program Files%\winmx\shared\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%Program Files%\winmx\shared\Ad-aware 2010.exe
%Program Files%\winmx\shared\BitDefender AntiVirus 2010 Keygen.exe
%Program Files%\winmx\shared\Norton Anti-Virus 2010 Enterprise Crack.exe
%Program Files%\winmx\shared\Total Commander7 license+keygen.exe
%Program Files%\winmx\shared\LimeWire Pro v4.18.3.exe
%Program Files%\winmx\shared\Download Accelerator Plus v9.exe
%Program Files%\winmx\shared\Internet Download Manager V5.exe
%Program Files%\winmx\shared\Myspace theme collection.exe
%Program Files%\winmx\shared\Nero 9 9.2.6.0 keygen.exe
%Program Files%\winmx\shared\Motorola, nokia, ericsson mobil phone tools.exe
%Program Files%\winmx\shared\Absolute Video Converter 6.2.exe
%Program Files%\winmx\shared\Daemon Tools Pro 4.11.exe
%Program Files%\winmx\shared\Download Boost 2.0.exe
%Program Files%\winmx\shared\Avast 4.8 Professional.exe
%Program Files%\winmx\shared\Grand Theft Auto IV (Offline Activation).exe
%Program Files%\winmx\shared\Alcohol 120 v1.9.7.exe
%Program Files%\winmx\shared\CleanMyPC Registry Cleaner v6.02.exe
%Program Files%\winmx\shared\Super Utilities Pro 2009 11.0.exe
%Program Files%\winmx\shared\Power ISO v4.2 + keygen axxo.exe
%Program Files%\winmx\shared\G-Force Platinum v3.7.5.exe
%Program Files%\winmx\shared\Divx Pro 7 + keymaker.exe
%Program Files%\winmx\shared\Magic Video Converter 8 0 2 18.exe
%Program Files%\winmx\shared\Sophos antivirus updater bypass.exe
%Program Files%\winmx\shared\DVD Tools Nero 10.5.6.0.exe
%Program Files%\winmx\shared\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%Program Files%\winmx\shared\PDF password remover (works with all acrobat reader).exe
%Program Files%\winmx\shared\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%Program Files%\winmx\shared\Windows2008 keygen and activator.exe
%Program Files%\winmx\shared\Tuneup Ultilities 2010.exe
%Program Files%\winmx\shared\Kaspersky Internet Security 2010 keygen.exe
%Program Files%\winmx\shared\Windows XP PRO Corp SP3 valid-key generator.exe
%Program Files%\winmx\shared\Starcraft2 Patch v0.2.exe
%Program Files%\winmx\shared\Starcraft2 keys.txt.exe
%Program Files%\winmx\shared\Starcraft2 Crack.exe
%Program Files%\winmx\shared\Starcraft2 Oblivion DLL.exe
%Program Files%\winmx\shared\Starcraft2.exe
%System Root%\Downloads\K-Lite Mega Codec v5.5.1.exe
%System Root%\Downloads\YouTubeGet 5.4.exe
%System Root%\Downloads\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
%System Root%\Downloads\K-Lite Mega Codec v5.6.1 Portable.exe
%System Root%\Downloads\Adobe Photoshop CS4 crack.exe
%System Root%\Downloads\VmWare 7.0 keygen.exe
%System Root%\Downloads\WinRAR v3.x keygen RaZoR.exe
%System Root%\Downloads\Twitter FriendAdder 2.1.1.exe
%System Root%\Downloads\PDF Unlocker v2.0.3.exe
%System Root%\Downloads\Image Size Reducer Pro v1.0.1.exe
%System Root%\Downloads\Anti-Porn v13.5.12.29.exe
%System Root%\Downloads\Norton Internet Security 2010 crack.exe
%System Root%\Downloads\Kaspersky AntiVirus 2010 crack.exe
%System Root%\Downloads\PDF-XChange Pro.exe
%System Root%\Downloads\Windows 7 Ultimate keygen.exe
%System Root%\Downloads\RapidShare Killer AIO 2010.exe
%System Root%\Downloads\Ashampoo Snap 3.02.exe
%System Root%\Downloads\Blaze DVD Player Pro v6.52.exe
%System Root%\Downloads\Adobe Illustrator CS4 crack.exe
%System Root%\Downloads\Rapidshare Auto Downloader 3.8.exe
%System Root%\Downloads\Trojan Killer v2.9.4173.exe
%System Root%\Downloads\PDF to Word Converter 3.0.exe
%System Root%\Downloads\Google SketchUp 7.1 Pro.exe
%System Root%\Downloads\McAfee Total Protection 2010.exe
%System Root%\Downloads\Mp3 Splitter and Joiner Pro v3.48.exe
%System Root%\Downloads\Youtube Music Downloader 1.0.exe
%System Root%\Downloads\Adobe Acrobat Reader keygen.exe
%System Root%\Downloads\VmWare keygen.exe
%System Root%\Downloads\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
%System Root%\Downloads\Ad-aware 2010.exe
%System Root%\Downloads\BitDefender AntiVirus 2010 Keygen.exe
%System Root%\Downloads\Norton Anti-Virus 2010 Enterprise Crack.exe
%System Root%\Downloads\Total Commander7 license+keygen.exe
%System Root%\Downloads\LimeWire Pro v4.18.3.exe
%System Root%\Downloads\Download Accelerator Plus v9.exe
%System Root%\Downloads\Internet Download Manager V5.exe
%System Root%\Downloads\Myspace theme collection.exe
%System Root%\Downloads\Nero 9 9.2.6.0 keygen.exe
%System Root%\Downloads\Motorola, nokia, ericsson mobil phone tools.exe
%System Root%\Downloads\Absolute Video Converter 6.2.exe
%System Root%\Downloads\Daemon Tools Pro 4.11.exe
%System Root%\Downloads\Download Boost 2.0.exe
%System Root%\Downloads\Avast 4.8 Professional.exe
%System Root%\Downloads\Grand Theft Auto IV (Offline Activation).exe
%System Root%\Downloads\Alcohol 120 v1.9.7.exe
%System Root%\Downloads\CleanMyPC Registry Cleaner v6.02.exe
%System Root%\Downloads\Super Utilities Pro 2009 11.0.exe
%System Root%\Downloads\Power ISO v4.2 + keygen axxo.exe
%System Root%\Downloads\G-Force Platinum v3.7.5.exe
%System Root%\Downloads\Divx Pro 7 + keymaker.exe
%System Root%\Downloads\Magic Video Converter 8 0 2 18.exe
%System Root%\Downloads\Sophos antivirus updater bypass.exe
%System Root%\Downloads\DVD Tools Nero 10.5.6.0.exe
%System Root%\Downloads\Winamp.Pro.v7.33.PowerPack.Portable+installer.exe
%System Root%\Downloads\PDF password remover (works with all acrobat reader).exe
%System Root%\Downloads\Microsoft.Windows 7 ULTIMATE FINAL activator+keygen x86.exe
%System Root%\Downloads\Windows2008 keygen and activator.exe
%System Root%\Downloads\Tuneup Ultilities 2010.exe
%System Root%\Downloads\Kaspersky Internet Security 2010 keygen.exe
%System Root%\Downloads\Windows XP PRO Corp SP3 valid-key generator.exe
%System Root%\Downloads\Starcraft2 Patch v0.2.exe
%System Root%\Downloads\Starcraft2 keys.txt.exe
%System Root%\Downloads\Starcraft2 Crack.exe
%System Root%\Downloads\Starcraft2 Oblivion DLL.exe
%System Root%\Downloads\Starcraft2.exe

Erstellt die folgenden Ordner:

%Program Files%\Mozilla Firefox
%Program Files%\Mozilla Firefox\extensions
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content
%User Profile%\Application Data\SystemProc

(Hinweis: %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.. %User Profile% ist der Ordner für Benutzerprofile des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername} unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername} unter Windows NT und C:\Dokumente und Einstellungen\{Benutzername} unter Windows 2000, XP und Server 2003.)

Autostart-Technik

Fügt folgende Registrierungseinträge hinzu, um bei jedem Systemstart automatisch ausgeführt zu werden.

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Adobe Reader Updater6 = "%System%\AdobeARMI.exe"

Andere Systemänderungen

Fügt die folgenden Registrierungsschlüssel hinzu:

HKEY_LOCAL_MACHINE\Software\Microsoft\
Adobe6

HKEY_CURRENT_USER\Software\Microsoft\
Adobe6

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer\Run

Fügt die folgenden Registrierungseinträge hinzu:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer
adobe076 = "11"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer
adobe086 = "22"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%System%\AdobeARMI.exe = "%System%\AdobeARMI.exe:*:Enabled:Explorer"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UACDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer\Run
RTHDBPL = "%System%\adobereader.exe"

HKEY_CURRENT_USER\Identities
KillSelf = "ok"

HKEY_CURRENT_USER\Identities
Curr version = "25"

HKEY_CURRENT_USER\Identities
First Start = "%System%\adobereader.exe"

HKEY_CURRENT_USER\Identities
Last Date = "22-11-2011"

HKEY_CURRENT_USER\Identities
Send Inst = "ok"

HKEY_CURRENT_USER\Identities
Inst Date = "22-11-2011"

HKEY_CURRENT_USER\Identities
Popup count = "0"

HKEY_CURRENT_USER\Identities
Popup time = "0"

HKEY_CURRENT_USER\Identities
Popup date = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer\Run
RTHDBPL = "%User Profile%\SystemProc\lsass.exe"

Einschleusungsroutine

Schleust die folgenden Dateien ein:

%System%\AdobeARMI.exe
%System%\adobereader.exe
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\install.rdf
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome.manifest
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content\timer.xul
%User Profile%\SystemProc\lsass.exe

(Hinweis: %System% ist der Windows Systemordner. Er lautet in der Regel C:\Windows\System unter Windows 98 und ME, C:\WINNT\System32 unter Windows NT und 2000 sowie C:\Windows\System32 unter Windows XP und Server 2003.. %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.. %User Profile% ist der Ordner für Benutzerprofile des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername} unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername} unter Windows NT und C:\Dokumente und Einstellungen\{Benutzername} unter Windows 2000, XP und Server 2003.)

Solução

Mecanismo de varredura mínima: 9.200

Step 1

Für Windows ME und XP Benutzer: Stellen Sie vor einer Suche sicher, dass die Systemwiederherstellung deaktiviert ist, damit der gesamte Computer durchsucht werden kann.

Step 2

Im abgesicherten Modus neu starten

[ Saber mais ]

Step 3

Diesen Registrierungsschlüssel löschen

[ Saber mais ]

Wichtig: Eine nicht ordnungsgemäße Bearbeitung der Windows Registrierung kann zu einer dauerhaften Fehlfunktion des Systems führen. Führen Sie diesen Schritt nur durch, wenn Sie mit der Vorgehensweise vertraut sind oder wenn Sie Ihren Systemadministrator um Unterstützung bitten können. Lesen Sie ansonsten zuerst diesen Microsoft Artikel, bevor Sie die Registrierung Ihres Computers ändern.

In HKEY_LOCAL_MACHINE\Software\Microsoft
- Adobe6

In HKEY_CURRENT_USER\Software\Microsoft
- Adobe6

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Run

Step 4

Diesen Registrierungswert löschen

[ Saber mais ]

In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Adobe Reader Updater6 = "%System%\AdobeARMI.exe"

In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
- adobe076 = "11"

In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
- adobe086 = "22"

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
- %System%\AdobeARMI.exe = "%System%\AdobeARMI.exe:*:Enabled:Explorer"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
- EnableLUA = "0"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- UACDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
- RTHDBPL = "%System%\adobereader.exe"

In HKEY_CURRENT_USER\Identities
- KillSelf = "ok"

In HKEY_CURRENT_USER\Identities
- Curr version = "25"

In HKEY_CURRENT_USER\Identities
- First Start = "%System%\adobereader.exe"

In HKEY_CURRENT_USER\Identities
- Last Date = "22-11-2011"

In HKEY_CURRENT_USER\Identities
- Send Inst = "ok"

In HKEY_CURRENT_USER\Identities
- Inst Date = "22-11-2011"

In HKEY_CURRENT_USER\Identities
- Popup count = "0"

In HKEY_CURRENT_USER\Identities
- Popup time = "0"

In HKEY_CURRENT_USER\Identities
- Popup date = "0"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
- RTHDBPL = "%User Profile%\SystemProc\lsass.exe"

Den Registrierungswert löschen, den diese Malware/Grayware/Spyware erstellt hat:

Öffnen Sie den Registrierungs-Editor. Klicken Sie auf Start > Ausführen, geben Sie REGEDIT ein, und drücken Sie dann die Eingabetaste.
Doppelklicken Sie im linken Fensterbereich auf:
HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Run
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Adobe Reader Updater6 = "%System%\AdobeARMI.exe"
Doppelklicken Sie im linken Fensterbereich auf:
HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
adobe076 = "11"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
adobe086 = "22"
Doppelklicken Sie im linken Fensterbereich auf:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Services>SharedAccess>Parameters>FirewallPolicy>StandardProfile>AuthorizedApplications>List
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
%System%\AdobeARMI.exe = "%System%\AdobeARMI.exe:*:Enabled:Explorer"
Doppelklicken Sie im linken Fensterbereich auf:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>policies>system
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
EnableLUA = "0"
Doppelklicken Sie im linken Fensterbereich auf:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Security Center
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
UACDisableNotify = "1"
Doppelklicken Sie im linken Fensterbereich auf:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>policies>Explorer>Run
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
RTHDBPL = "%System%\adobereader.exe"
Doppelklicken Sie im linken Fensterbereich auf:
HKEY_CURRENT_USER>Identities
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
KillSelf = "ok"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Curr version = "25"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
First Start = "%System%\adobereader.exe"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Last Date = "22-11-2011"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Send Inst = "ok"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Inst Date = "22-11-2011"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Popup count = "0"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Popup time = "0"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
Popup date = "0"
Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
RTHDBPL = "%User Profile%\SystemProc\lsass.exe"
Schließen Sie den Registrierungs-Editor.

Step 5

Diese Dateien suchen und löschen

[ Saber mais ]

Möglicherweise sind einige Komponentendateien verborgen. Aktivieren Sie unbedingt das Kontrollkästchen Versteckte Elemente durchsuchen unter "Weitere erweiterte Optionen", um alle verborgenen Dateien und Ordner in den Suchergebnissen zu berücksichtigen.

%System%\AdobeARMI.exe
%System%\adobereader.exe
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\install.rdf
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome.manifest
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content\timer.xul
%User Profile%\SystemProc\lsass.exe

Step 6

Diese Ordner suchen und löschen

[ Saber mais ]

Aktivieren Sie unbedingt das Kontrollkästchen Versteckte Elemente durchsuchen unter Weitere erweiterte Optionen, um alle verborgenen Ordner in den Suchergebnissen zu berücksichtigen.

%Program Files%\Mozilla Firefox
%Program Files%\Mozilla Firefox\extensions
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome
%Program Files%\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content
%User Profile%\Application Data\SystemProc

Step 7

Führen Sie den Neustart im normalen Modus durch, und durchsuchen Sie Ihren Computer mit Ihrem Trend Micro Produkt nach Dateien, die als WORM_PROLACO.AC entdeckt werden. Falls die entdeckten Dateien bereits von Ihrem Trend Micro Produkt gesäubert, gelöscht oder in Quarantäne verschoben wurden, sind keine weiteren Schritte erforderlich. Dateien in Quarantäne können einfach gelöscht werden. Auf dieser Knowledge-Base-Seite finden Sie weitere Informationen.

Participe da nossa pesquisa!

WORM_PROLACO.AC

Visão geral

Detalhes técnicos

Solução

Recursos

Suporte

Sobre a Trend

Country Headquarters

WORM_PROLACO.AC

Visão geral

Detalhes técnicos

Solução

Recursos

Suporte

Sobre a Trend

Country Headquarters

Américas

Oriente Médio & África

Europa

Ásia&Pacífico