Thursday, June 5, 2008

Securearticle.com hijacker removal information

Securearticle.com is a new browser hijacker from Zlob.Trojan family. It will show fake error messages and security warnings saying that your computer is infected with spyware. Securearticle.com may be installed through system exploits. Moreover, it may come bundled with other malware (usually Zlob trojan and different adware installers). This misleading web-site was designed to trick users into buying fake spyware removers from Russia or Ukraine. Securearticle.com may damage your computer and cause system errors and data loss. We recomend to use Spyware Doctor with antivirus to remove Securearticle.com from your computer.

Securearticle.com screenshots:




Securearticle.com automatical remover:


Securearticle.com manual removal instructions:
Delete Securearticle.com files:

tjby.dll
ncompat.tlb
btrklfr.dll
uimcu.dll
%UserProfile%\Application Data\Microsoft\Crypto\RSA
%UserProfile%\Application Data\Microsoft\Protect
dumpserv.com nvctrl.exe
msmsgs.exe
hp[X].tmp
msvol.tlb
RSA
Protect
vnp7s.net
zxserv0.com
dumpserv.com
antzozc.dll
ictmdl.dll
isfmdl.dll
nczupfw.dll
icthis.exe
ictun.exe
isfmntr.exe
isfun.exe
Trojan.Zlob|eulbn.dll
werbetpwg.dll
sysdivx.dll
vipextnog.dll
werbetlrw.dll
vipextgpk.dll
werbettxf.dll
vipextpxm.dll
voipwet.dll
hdtip.dll
G2-tmp.exe
G5-tmp.exe
fsehfcu.dll
qhcvdw.dll
findsiteonline.dll
1201639705.dll
1201639702.dll
ofcpi.dll
1202030455.dll
iinqyl.dll
1198448796.dll
sbmdl.dll
sbmntr.exe
sbsm.exe
sbun.exe
scit.exe
scm.exe
scu.exe
uninst.exe
wamdl.dll
waun.exe
1198448799.dll
laf1.exe
1202567261.dll
1202650266.dll
1203140349.dll
1204372749.dll
1203634438.dll
1203846321.dll
1204460162.dll
1204885300.dll
antiviirus.exe
dkxrstqqgr.dll
apdqnxp.dll
enlfxgw.dll
1205289674.dll
altvxvm.dll
bokpkov.dll
drnpfdxxrs.dll
drnpfdxrqv.dll
etlrlws.dll
drnpfdxsfn.dll
1205847823.dll
drnpfdxlwn.dll
admggxp.dll
drnpfdxlsk.dll
drnpfdxxsn.dll
drnpfdxopx.dll
drnpfdxsxp.dll
kdftlboekae.dll
jdxah.dll
dwnrpofk.dll
vbgtorfd.dll
qvdntlmw.dll
dcggain.dll
drnpfdxwgv.dll
svpekgonlop.dll
svpekgonnof.dll
svpekgongrk.dll
ekvgsnw.dll
vualf.dll
mgsvflkw.dll
qdnkewfa.dll
rkvdr.dll
temlxopqftg.dll
403445.dll
892267.dll
qtvglped.dll
omlbpkaw.dll
dntpkwodpx.dll
bubbj.dll
rkaxfza.dll
814810.dll
uyhjw.dll
Wxdbpfvo.dll
pmsoarbf.dll
qnmargolbve.dll
312191.dll
561756.dll
wdpoefan.dll
vadokmxt.dll
qdsba.dll
527631.dll
wxdbpfvo.dll
rtmipr.dll
xbaqktfv.exe
gndarmblvpg.dll
834668.dll
qvlbodmnlks.dll
gndarmblaor.dll
tdomgafw.dll
wetkadmr.dll
qvlbodmnbof.dll
158117.dll
fvowketqksn.dll
fvowketqsle.dll
443059.dll
qvlbodmnmle.dll
824223.dll
boqnrwdmstg.dll
nldfmtapndk.dll
pxgdslro.dll
566828.dll

Delete Securearticle.com registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Messenger Service
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}

No comments: