FrEn

Envoyer Imprimer PDF

Free virus removal tool to remove WebSonic (WebSonic.exe, Iexplox.exe, Explox.exe...)

Écrit par Administrator  |  Lundi, 25 Janvier 2010 06:40
AddThis Social Bookmark Button
There are no translations available.

WebSonic is a trojan that may represent security risk for your system, this application uses the Messenger API Library to control MSN Messenger, this worm is capable to spread over MSN's IM network by using an infected user's contact list to propagate itself. Remove WebSonic immediately from your system.

To remove WebSonic and all its components and processes ( Iexplox.exe, Xkil.exe, Explox.exe, winred.exe , Exploms.exe, automsn.exe, killxx.exe, WebSonic.exe)

  • Download this free removal tool for WebSonic
  • Extract it
  • Launch
  • Click on the delete button

WebSonic will be removed from your system in 10s. Restart your computer when it’s finished.

Alias :

  • Suspicious.MH690 [Symantec]
  • PWS-Banker.gen.dh.dldr [McAfee]

Processes :

  • Iexplox.exe
  • Xkil.exe
  • Explox.exe
  • winred.exe
  • Exploms.exe
  • automsn.exe
  • killxx.exe
  • WebSonic.exe

Files :

  • %System%\Iexplox.exe
  • %System%\Xkil.exe
  • %System%\Explox.exe
  • %System%\winred.exe
  • %System%\Exploms.exe
  • %System%\automsn.exe
  • %System%\killxx.exe
  • %Windows%\WebSonic.exe

Registry

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
  • HKEY_CURRENT_USER\Software\Microsoft\JwkdgDtb
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
    • RunInvalidSignatures = "00000001"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
    • LowRiskFileTypes = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
    • SaveZoneInformation = "00000001"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • "downloaded file" = "downloaded file"
    • Microsoft Redirect = "downloaded file"
    • taskmgra = "%System%\export.exe"
    • WebSonic.exe = "%Windir%\WebSonic.exe"
    • Iexplox.exe = "%System%\iexplox.exe"
    • Xkil.exe = "%System%\Xkil.exe"
    • Explox.exe = "%System%\Explox.exe"
    • winred.exe = "%System%\winred.exe"
    • Exploms.exe = "%System%\Exploms.exe"
    • automsn.exe = "%System%\automsn.exe"
    • killxx.exe = "%System%\killxx.exe"

 

Download

 

 

Articles connexes
Derniers articles
.
Information | Contact

© All Rights Reserved. net-studio.org 2009