SpyZooka Blog - Easy Spyware Removal

SpyZooka Gets New Spyware Directory

bluepenguin15 — Wed, 10 Mar 2010 03:26:26 +0000

SUMMARY: BluePenguin Software announces new spyware directory for SpyZooka. SpyZooka’s new spyware directory integrates knowledge, assessments and solutions providing superior spyware protection.

Sequim, WA – BluePenguin Software announces new spyware directory for SpyZooka. SpyZooka’s new spyware directory integrates knowledge, assessments and solutions providing superior spyware protection. “Spyware can infiltrate computers to garner personal information, track activities and rack up charges,” says Carl Haugen, president and founder of BluePenguin Software. “SpyZooka’s new spyware directory identifies types of spyware and offers a solution to rid a computer of that spyware.”

Spyware enters computers without a visual trace and can take information stored on the computer, track internet visits and even hijack dial-up systems causing them to rack up hundreds of dollars in calls to 900 numbers. Hackers can take control of computers through spyware.

SpyZooka’s spyware directory was created for ease of use. Set up alphabetically by spyware, each category then provides a list of manufacturers. Histories are given including dates the spyware were developed, if they are still active or if they are defunct. A rating on a scale of 1-100 advises of the severity of the virus.

Spyware can enter a computer through email, shared printers and computers and faulty URLs. SpyZooka’s spyware directory identifies existing problems through a free computer scan and has ready solutions on hand if a computer has been infected.

A few of the viruses discussed in the spyware directory are Adware, Backdoor, Trojan, Dialer, Keylogger, Rogue and more. The results of these viruses can be destructive and disastrous.

“SpyZooka’s spyware directory was developed in order to put control back with computer owners,” says Carl Haugen of BluePenguin. “We wanted to create something that was intuitive to use and that wasn’t filled with computer jargon. Our directory is easy to navigate and speaks in layman’s terms so anyone can understand it.”

Contact: Carl D. Haugen III, CdO, HsD
Company: BluePenguin Software, Inc
www.BluePenguinSoftware.com
Phone: 561-459-5393
Email: press@bluepenguinsoftware.com

Win32.ShadowPhyre RAT

Carl Haugen — Tue, 09 Mar 2010 09:00:26 +0000

RAT or Remote Administration Tool, Win32.ShadowPhyre, is brought to us by hacker, Dark-Mentor. This pest also falls under the category of a backdoor Trojan. Hackers will send these backdoor Trojans on a bit of a reconnaissance mission that will only make it easier for the hacker to enter when it sees fit. The hacker and the backdoor will communicate and instructions will be given. Eventually, the hacker will assume full control of your PC if not removed promptly.

AKA:
Troj/ShadowPhyre-A
Backdoor.ShadowPhyre.A
BKDR_SHADOWPHYRE.A
Win32/ShadowPhyre.A
ShadowPhyre.A Backdoor
Backdoor.Win32.ShadowPhyre.b
Backdoor.ShadowPhyre.b
BackDoor-GE
BackDoor.ShPhyre
Troj/ShadowP-B
Backdoor:Win32/ShadowPhyre.B
BKDR_SHADOW.A
TR/ShadowPhyreB.Cli
Win32:Trojan-gen.
BackDoor.ShadowPhyre
Backdoor.ShadowPhyre.B
Trojan.ShadowPhyre.B
Trj/ShadowPhyre2.Cl
Win32/Shadow

Related Files:
readme.doc
shadow.exe
trance.exe

Category:
RAT
Backdoor

Recommended Action:
Remove at once.

Win32.ShadowPhyre can be removed but not without difficulty. To do so, you must kill the following processes:
shadow.exe, trance.exe

Then, remove the following files
readme.doc, shadow.exe, trance.exe.

If this does not work, you may need a stronger solution. That can be found in none other than SpyZooka. SpyZooka is an automatic spyware remover that changes hours of tedious manual removal into minutes with the simple click of your mouse. You can save yourself countless hours by investing in SpyZooka’s proprietary system. To be certain, to be sure, use SpyZooka.

Win32.Shadow Trojan

Carl Haugen — Mon, 08 Mar 2010 14:00:14 +0000

This dangerous program, Win32.Shadow, has a variety of functions depending on the needs of the attacker. It can be an e-mail flooder, which means it will clog a network or your PC by sending out massive quantities of e-mails.

You can also find it spamming from your PC. It is able to do this by gaining secret access and then will use your account to send out spam e-mails to countless unsuspecting users. It is also a backdoor so if entry is gained, it will open up a port on your PC and leave you vulnerable to other malicious attacks.

AKA:
Spammer:Win32.Shadow
Email-Flooder.Win32.Shadow
Backdoor.Win32.Shadow.d
BDS/Shadow.D.1
Win32.Shadow.aa
Win32/Shadow.G
Troj/Shadow-D
Backdoor.Shadow.D
BKDR_SHADOW.D
Win32/Shadow.D
Shadow.D Backdoor

Threat type:
Backdoor Trojan

Related Files:
N/A

Category:
Trojan

Recommended Action:
Remove at once.

Manually remove this scourge of a program by terminating all processes, files, folders and registry entries. If this process is confusing to you, you are not alone. Manual removal is difficult. For a fast and automatic solution, you have SpyZooka. SpyZooka can easily rid you of Win32.Shadow and ALL spyware in one fell swoop. SpyZooka scans, detects and eliminates spyware in an all-in-one system. An easy-to-use application, you will be protected with SpyZooka.

Win32.ServU-based Trojan

Carl Haugen — Sun, 07 Mar 2010 11:00:55 +0000

Win32.ServU-based is known to be a backdoor Trojan program. It uses such mediums as e-mail, shareware and freeware sites, Internet Relay Chat and Peer-to-Peer programs to find its way onto your computer. If you have the misfortune of being infected with this malware, you will encounter such things as an extremely slow computer, possible disabling of security software and even a complete loss of control of your PC. Win32.ServU-based gains entry and will open a random port to communicate with its author. This pest came onto the scene in March of 2005.

AKA:
Backdoor.Win32.ServU-based
Backdoor:Win32/ServUbased.AH
Win32.ServU-based.ap
Win32.ServU-based.bj

Related Files:
svchost1.exe

Category:
Backdoor Trojan

Recommended Action:
Remove at once.
To remove Win32.ServU-based manually, you must kill this process:
svchost1.exe

Delete these registry entries:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl\security

Finally, delete this file:
svchost1.exe

If you are interested in protecting your PC from further damage, then you might want to invest in an anti-spyware system that is designed to eliminate spyware but also keep you immunized from further infection. You need not look further than SpyZooka. SpyZooka has been eradicating spyware for many years with great success. Garnering numerous awards and receiving rave reviews from customers, you can’t go wrong with SpyZooka.

Win32.SevenSphere Trojan

Carl Haugen — Sat, 06 Mar 2010 11:00:18 +0000

Author, Precursor, came up with the harmful and malicious program entitled Win32.SevenSphere. It will enter unannounced and will leave the following fingerprints behind: 7db6c667b9c7595a…, 96047fd93adee176…, 36072adc1489e7d7…, a7a671fe14c57064…, 7da8ce114a805d3d…, e984cb69bde4271d.

Thankfully, there are some traces but otherwise these backdoor Trojan programs are very difficult to detect. Win32.SevenSphere will hide its processes and will often give random names to files so you are not sure which ones are which.

AKA:
Backdoor.SevenSphere.10
Backdoor/SevenSphere.10
BackDoor-ALP.gen
SennaSpy2001,
Win32/SevenSphere.10
Troj/SevenSphere-10
Backdoor.SevenSphere.10
BKDR_SEVENSPHERE.10
Win32/SevenSphere.10
SevenSphere.10 Backdoor

Related Files:
backdoor.sevensphere.10.exe
lh.nfo, sphere 1.0 server.exe.

Category:
Trojan

Recommended Action:
Remove at once.

While manual removal is difficult, it can be done by following the proceeding directions:
Terminate the following processes:
backdoor.sevensphere.10.exe, sphere 1.0 server.exe

Secondly, remove the following files:
backdoor.sevensphere.10.exe, lh.nfo, sphere 1.0 server.exe.

For full and complete protection, however, you can try SpyZooka. SpyZooka is an anti-spyware application like no other. All the features are automated which eliminates hours of tedious manual removal. Not only will it remove Win32.SevenSphere, it will eradicate any other spyware programs you might have. Spyware removal was never so easy. You can try SpyZooka without any risk. With its unprecedented 100% spyware removal guarantee, you can feel totally secure in knowing you are getting the best product out there.

Win32.Servudoor Trojan

Carl Haugen — Fri, 05 Mar 2010 09:00:17 +0000

Unintentionally installing Win32.Servudoor is the typical mode of circulation for this backdoor pest. Win32.Servudoor is found bundled with that is downloaded via shareware or freeware sites. Once this nuisance has gained entry it will open a port (hence its name “backdoor”) and allow a third party to enter. It will also have the capability of sending and receiving e-mails, changing or deleting files, launching applications and so on. Having the run of your PC is precisely what this malware is looking for.

AKA:
Win32.Servudoor.C,
Backdoor:Win32/Servudoor.I
Backdoor:Win32/Servudoor.AR
Backdoor.Win32.Servudoor.ba
Backdoor:Win32/Servudoor.X
Backdoor:Win32/Servudoor.H
Win32/Servudoor.si

Related Files:
N/A

Category:
Trojan

Recommended Action:
Remove at once.

Removing Win32.Servudoor manually takes a certain amount of tech savvy. If you are comfortable and knowledgeable about how this program works then do the following:

Kill this process:
info.exe

Then remove this file:
info.exe, lol.bat.

Many people are unfamiliar with manual removal. It does have inherent risk. One false move can render your PC useless. To save your time and sanity, you can try SpyZooka. SpyZooka is not only an award-winning anti-spyware application; it is the only program in the business that offers a 100% guarantee on spyware removal. Now, THAT is something you can count on.

Win32.Sfive Trojan

Carl Haugen — Wed, 03 Mar 2010 14:00:41 +0000

Finding Win32.Sfive on your computer is not something that should bring you must pleasure. This is a backdoor Trojan pest that is design specifically to sneak into PCs for the purpose of either stealing information or to hijack the PC to use it for malicious endeavors. You will usually find these deceptive programs lurking around shareware and freeware sites or it is distributed by e-mail. Regardless of how you got it, you will want to get rid of it.

AKA:
Backdoor.Win32.Sfive.11.c
Backdoor.Sfive.11.c
BackDoor-AQH.dr
Backdoor.Hitcap
BackDoor.Etred
Troj/Bdoor-AQH
Backdoor:Win32/Sfive.1_1.C
BKDR_SFIVE.C
Win32:Trojan-gen.
BackDoor.Sfive.D
Backdoor.SFive.1.1.C
Bck/Sfive.C
Win32/Sfive.11.C

Related Files:
N/A

Category:
Trojan

Recommended Action:
Remove at once.

Removal of this type for Win32.Sfive is not recommended for the novice computer user. However, if you are familiar with programming then proceed with using Task Manager to eliminate all files, folders, registry values and processes related to the program. For the computer user that would prefer something a little less hands-on there is SpyZooka.

SpyZooka is a safe and effective anti-spyware application designed to make the process simple and easy. SpyZooka will run a scan to determine the level of infection and will then remove all spyware that has been detected. A member of the Better Business Bureau and recipient of numerous awards, you can trust SpyZooka.

Win32.Servidor

Carl Haugen — Wed, 03 Mar 2010 09:00:37 +0000

Win32.Servidor is a nasty backdoor Trojan program that was conceived in July of 2004. This pest will worm its way into unsuspecting user’s systems by a variety of deceptive methods.

One very common mode is through e-mail. An infected file will be attached to the e-mail and the message will contain a fake solicitation to open the attachment. Sometimes posing as a legitimate file and sometimes not, this program wastes no time wreaking havoc once it has gained access. It will quickly make contact with its author awaiting instructions as to how to proceed with furthering their malicious activities.

AKA:
Backdoor.Win32.Servidor.e
Backdoor.Servidor.e
BackDoor-GL
BackDoor.Servidor
Troj/Servid-B
Backdoor:Win32/Servidor.E
TROJ_SERVIDOR.E
BDS/VB.a
BackDoor-HBR-10
BackDoor.Servidor.B
Backdoor.Servidor.E
Bck/Servidor.E
Win32/Servidor.E

Related Files:
mightkak.exe
2EFD0668.EXE

Category:
Trojan

Recommended Action:
Remove at once.

To remove manually, terminate all processes for Win32.Servidor. This can be done through Task Manager. Then identify and delete all remaining files. If this doesn’t sound like a way you want to spend your afternoon then try a trusted anti-spyware system that will do the dirty work for you.

SpyZooka is a safe and effective tool for removing spyware. With years of experience, SpyZooka can clean your system thoroughly and keep you protected from developing threats.

Win32.Poison

Carl Haugen — Tue, 02 Mar 2010 14:00:23 +0000

Win32.Poison will do precisely what its name says. It will poison your PC. With an infection from Win32.Poison, you will have your computer open to just about anyone to enter. Once this pest has gained entry, it will wait for its hacker to issue commands and then send information back to the hacker. Infection of this sort usually happens through e-mail, peer-to-peer networks and freeware and shareware programs. Losing complete control of your PC is the ultimate goal of this malicious program.

AKA:
RemoteAdmin.Win32.Poison Ivy.20 Backdoor.Win32.Poison.a PoisonIvy,
Backdoor.Win32.Rbot.hsm
Heuristic.LooksLike.Win32.Suspicious.C!86
Artemis!D3094FBAF59E
Artemis!A3D9E9AF1F98
Win32/Spy.Banker.QEO
Trojan-Banker.Win32.Banbra.kft

Related Files:
N/A

Category:
Backdoor

Recommended Action:
Remove at once.

For manual removal, go to Task Manager and terminate these processes:
explorer.exe and iexplore.exe

Then delete the following file:
%System%\com.exe

Finally, delete the following registry key:
[HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\
{04F4BA85-A3C7-4235-0200-060204060705}]

If this doesn’t do the trick, then a stronger removal system is in order. SpyZooka is a trusted and safe anti-spyware application that can easily get rid of Win32.Poison including any other spyware you may have existing on your PC. SpyZooka will first scan your PC for detection of the spyware and will then immediately eradicate it. It is that simple. With a 100% guarantee on the product, there is absolutely no risk to try.

Win32.Pointex

Carl Haugen — Tue, 02 Mar 2010 11:00:09 +0000

Win32.Pointex is a backdoor Trojan program that many aliases to its hacker’s credit. Once Win32.Pointex has entered, it will drop infected files into your registries and then configure itself in such a way that makes it possible to run each time you start up your computer. This program doesn’t want to be seen so it has been designed to run undetected and in the program making it very difficult to find if you are not sure what you’re looking for. However, some telltale signs of infection include a slow computer, strange files popping up and your computer performing function on its own.

AKA:
Backdoor.Win32.Pointex.k
Backdoor.Pointex.k
BackDoor-ATP
Backdoor.Trojan
BackDoor.Pointex
Troj/Bdoor-ATP
Backdoor:Win32/Pointex.C
BKDR_POINTEX.K
BDS/Pointex.k
Win32:Trojan-gen.
BackDoor.Pointex.K
Backdoor.Pointex.K
Win32/Poitex.

Related Files:
internat.exe, mswinsck.ocx, kernel.exe, mstest.exe, outlook32.exe

Category:
Backdoor

Recommended Action:
Remove at once.

Manual removal of this program is labor intensive and takes a degree of skill that is not possessed by most average computer users. However, it can be achieved by eliminating all files, folders and processes that are currently running related to Win32.Pointex.

If you want the job done for you, look no further than SpyZooka. With years of expertise behind the product, SpyZooka promises to get rid of all your spyware problems or your money back. Its proprietary system is unique and automated and makes spyware removal easy.