FrEn

E-mail Print

Free virus removal tool to remove Mal.Resdro-A

Written by Administrator  |  Wednesday, 24 February 2010 05:57
AddThis Social Bookmark Button

Resdro-A is a virus that may reprensent a security risk for your system. Mal/Resdro-A shows a Adobe Flash Player Update, ignore this, this is a fake warning.

Once on your system, this fake Adobe Flash Player Update will :

  • Creates fake Recycle Bin folder in the C: drive.
  • Creates a desktop.ini system file in the fake Recycle Bin folder in order to register it in the system as a valid Recycle Bin.
  • Creates an executable file "recyclebin.exe" in the fake Recycle Bin folder with the purpose of concealing its presence in the system.

Remove Mal.Resdro-A ASAP from your system using this removal tool for Mal.Resdro-A.

Resdro-A

To remove Resdro-A

  • Download this free removal tool for Mal.Resdro-A
  • Extract it
  • Launch
  • Click on the delete button

Resdro-A will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

  • recyclebin.exe
  • temp[random].exe

Files :

  • %Temp%\temp[random].exe
  • %Temp%\temp[random].exe
  • C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995\recyclebin.exe
  • C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995\Desktop.ini

Registry

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    • Taskman = "C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995\recyclebin.exe"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • CurrentVersion = "C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995\recyclebin.exe"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    • Shell = "explorer.exe,C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995\recyclebin.exe"

 

Download

 

 

Add comment


Security code
Refresh

Related articles
Latest posts
  • Free malware removal tool for Guard Online

    Written by %s admin 10/10/2011
    Guard Online is a another rogue Antispyware from the OpenCloud and AV Guard Online familly, it's a malware that pretends to be an Antivirus. Guard Online conducts a fake scan of your system; you are…
  • Free malware removal tool to remove AV Guard Online

    Written by %s admin 05/10/2011
    AV Guard Online is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. AV Guard Online conducts a fake scan of your system; you are warned by a…
  • Free removal tool to remove Security Guard 2012

    Written by %s admin 05/10/2011
    Security Guard 2012 is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. Security Guard 2012 conducts a fake scan of your system; you are warned…
  • Free removal tool for Advanced PC Shield 2012

    Written by %s admin 01/10/2011
    Advanced PC Shield 2012 is a another rogue Antispyware, it's a malware that pretends to be an Antivirus. Advanced PC Shield 2012 conducts a fake scan of your system; you are warned by a fake alarm…
  • Security Sphere 2012 Free Removal Tool

    Written by %s admin 01/10/2011
    Security Sphere 2012 is another spyware from the Security Tool family. Security Sphere 2012 is not a legit program; it's a fake, a counterfeit. Security Sphere 2012 claims to fix your system, but…
.
Information | Contact

© All Rights Reserved. net-studio.org 2009