Sunday, November 16, 2008

Nebuler Trojan

Click here to remove Nebuler malware
Nebuler description:
Nebuler Category:Trojan,Downloader
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Trojans-downloaders downloads and installs new malware or adware on the computer.

Detection Nebuler :

Nebuler Files:
[%PROFILE_TEMP%]\temp.fr????
[%PROFILE_TEMP%]\win.exe
[%SYSTEM%]\winbjv32.dat
[%SYSTEM%]\winexz32.dll
[%SYSTEM%]\wingdm32.dll
[%SYSTEM%]\wingsa32.dll
[%SYSTEM%]\winhoq32.dll
[%SYSTEM%]\winjvd32.dll
[%SYSTEM%]\winkgv32.dll
[%SYSTEM%]\winkvs32.dll
[%SYSTEM%]\winkxe32.dll
[%SYSTEM%]\winlnu32.dll
[%SYSTEM%]\winmqx32.dll
[%SYSTEM%]\winmqx32.dll.mwt
[%SYSTEM%]\winqpb32.dll
[%SYSTEM%]\winrcq32.dll
[%SYSTEM%]\winrkp32.dll
[%SYSTEM%]\winrzf32.dll
[%SYSTEM%]\winwil32.dll
[%SYSTEM%]\winwrb32.dll
[%SYSTEM%]\winxrn32.dll
[%SYSTEM%]\windrw32.dll
[%SYSTEM%]\winnbl32.dll
[%SYSTEM%]\winola32.dll
[%SYSTEM%]\winzdn32.dll
[%PROFILE_TEMP%]\temp.fr????
[%PROFILE_TEMP%]\win.exe
[%SYSTEM%]\winbjv32.dat
[%SYSTEM%]\winexz32.dll
[%SYSTEM%]\wingdm32.dll
[%SYSTEM%]\wingsa32.dll
[%SYSTEM%]\winhoq32.dll
[%SYSTEM%]\winjvd32.dll
[%SYSTEM%]\winkgv32.dll
[%SYSTEM%]\winkvs32.dll
[%SYSTEM%]\winkxe32.dll
[%SYSTEM%]\winlnu32.dll
[%SYSTEM%]\winmqx32.dll
[%SYSTEM%]\winmqx32.dll.mwt
[%SYSTEM%]\winqpb32.dll
[%SYSTEM%]\winrcq32.dll
[%SYSTEM%]\winrkp32.dll
[%SYSTEM%]\winrzf32.dll
[%SYSTEM%]\winwil32.dll
[%SYSTEM%]\winwrb32.dll
[%SYSTEM%]\winxrn32.dll
[%SYSTEM%]\windrw32.dll
[%SYSTEM%]\winnbl32.dll
[%SYSTEM%]\winola32.dll
[%SYSTEM%]\winzdn32.dll

Nebuler Registry Keys:
HKEY_CLASSES_ROOT\mezziacodec.chl\clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSMGR
HKEY_LOCAL_MACHINE\software\microsoft\mssmgr
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winhjr32
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winola32
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winzvd32
HKEY_LOCAL_MACHINE\software\microsoft\windowsnt\currentversion\notify\windrw32

Nebuler Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify

Removing Nebuler:

you can run trial version of ExterminateIt, or remove Nebuler manually.


To completely manually remove Nebuler malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Nebuler.


Also Be Aware of the Following Threats:
Remove Agonda.2XD Trojan
IESEARCHBAR Adware Removal
Remove SillyDl.BIT Trojan
Removing FreeScratchCards Hijacker
Insurrection Trojan Symptoms

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home