|
 |
|
Remove Trojan PSW Win32.Hooker, Message " Warning! Trojan Found " popup alert
“Warning!Trojan Found!” Popup is a false security alert from fake antispyware Ultra Antivir2009. This “Warning!Trojan Found!” Popup reads:
“Warning!Trojan Found!
Threat detected: Trojan
File name: kernel32.exe
Threat name: Trojan-PSW.Win32.Hooker
File at risk of infection: C:\Documents and Settings\…
Total Vulnerabilities: 2
Description: This is a password-stealing Trojan. When activated, it installs itself to the system, copies itself to the Windows or Windows system directory and registers itself in the system registry auto-run section.“
If you follow “Warning!Trojan Found!” Popup’s prompts to “Remove All,” you’ll end up downloading scareware Ultra Antivir2009.
Try to close this “Warning!Trojan Found!” Popup window until your mouse breaks. But that won’t make this “Warning!Trojan Found!” Popup go away. Let me show you how to block this “Warning!Trojan Found!” Popup, for free.
Block “Warning!Trojan Found!” Popup sites:
UltraAntivirus2009.com
Stop “Warning!Trojan Found!” Popup processes:
c:\WINDOWS\Installer\$PatchCache$\Managed\D6461317C3DC4F04799BDCE9E42626FE\
2.0.50727\energy.exe
c:\WINDOWS\ServicePackFiles\i386\SICKBOY.exe
c:\WINDOWS\system32\tjd.exe
c:\Documents and Settings\All Users\Application Data\7c69f0c\UA2009.exe
c:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\
2.0.0.0__b03f5f7f11d50a3a\energy.exe
Remove “Warning!Trojan Found!” Popup files:
c:\Documents and Settings\All Users\Application Data\SystemStore\uavir.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Ultra Antivir2009.lnk
%UserProfile%\Application Data\Ultra Antivir2009\Instructions.ini
%UserProfile%\Desktop\Ultra Antivir2009.lnk
%UserProfile%\Start Menu\Ultra Antivir2009.lnk
%UserProfile%\Start Menu\Programs\Ultra Antivir2009.lnk
c:\WINDOWS\std.drv
c:\WINDOWS\$hf_mig$\KB947864-IE7\update\kernel32.tmp
c:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\delfile.sys
c:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\
2.0.0.0__b03f5f7f11d50a3a\ANTIGEN.sys
c:\WINDOWS\ime\snl2w.drv
c:\WINDOWS\Installer\$PatchCache$\Managed\D6461317C3DC4F04799BDCE9E42626FE\
2.0.50727\ANTIGEN.sys
c:\WINDOWS\ServicePackFiles\i386\ppal.tmp
c:\WINDOWS\ServicePackFiles\i386\snl2w.drv
c:\Documents and Settings\All Users\Application Data\7c69f0c
c:\Documents and Settings\All Users\Application Data\7c69f0c\SystemStore\vd952342.bd
Uninstall “Warning!Trojan Found!” Popup DLLs:
c:\WINDOWS\ime\exec.dll
c:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\CLSV.dll
c:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\CLSV.dll
c:\WINDOWS\ServicePackFiles\i386\ppal.dll
Get rid of “Warning!Trojan Found!” Popup folders:
%UserProfile%\Application Data\Ultra Antivir2009
c:\Documents and Settings\All Users\Application Data\7c69f0c\SystemStore
c:\Documents and Settings\All Users\Application Data\SystemStore
Delete “Warning!Trojan Found!” Popup registry keys:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\CLSID\{425882B0-B0BF-11CE-B59F-00AA006CB37D}
HKEY_CLASSES_ROOT\UA2009.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “4800156103?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Ultra Antivir2009?
|
| | |
 |
|
|
Anti Virus - Spyware Removal - Trojan Removal - Registry Repair