|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 %WinDir%\antivirus32.exe - Dangerous
antivirus32.exe is used to hide files, processes and registry. antivirus32.exe is a kernel mode rootkit. Rootkit contacts remote hacker server using HTTP session. antivirus32.exe spreads via open network shares. antivirus32.exe opens a back door on IRC channels. antivirus32.exe created new system drivers: service name: "antivirus32" display name: "antivirus32" Adds the value: HKLM\SYSTEM\CurrentControlSet\Services\antivirus32\ to the Windows startup registry keys. rdriv.sys created new system drivers: service name: "rdriv" display name: "rdriv" Added to registry: HKLM\SYSTEM\CurrentControlSet\Services\rdriv\ Related files: %WinDir%\antivirus32.exe %SysDir%\rdriv.sys Adds the value: HKLM\SYSTEM\CurrentControlSet\Services\Messenger Start 4 HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry Start 4 HKLM\SYSTEM\CurrentControlSet\Services\TlntSvr Start 4 to the Windows startup registry keys. Added to registry: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotAllowXPSP2 1 HKLM\SOFTWARE\Microsoft\Ole EnableDCOM N HKLM\SYSTEM\CurrentControlSet\Control\Lsa restrictanonymous 1 HKLM\SOFTWARE\Microsoft\Security Center\ HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\ HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\ More info: http://www.sophos.com/virusinfo/analyses... Removal: %WinDir%\antivirus32.exe is removed by RegRun.
Click on the "Get it out!" button.  We suggest you to reboot your computer to be sure that your computer is clean now. Do not hesitate to contact us: Support center
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: June 30 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
Download RegRun Suite. 
Open an executable file to start program installation.
