|
Startupapps.com recommends you:
UnHackMe Warrior Removing rootkits is best done from the "clean" Windows!
Blog: New viruses/malware/rootkits. Everyday!
Blog: How to remove malware/Trojans/rootkits using UnHackMe or manually. We know how to remove malware.
Shortcut Antivirus protects against Microsoft LNK and PIF vulnerability, notify a user about found threats and give possibility to immediately remove threats.
StuxnetRemover - free of charge Stuxnet/Tmphider rootkit removal tool.
Blog: System Software Research. What is under the hood? Who is faster? Antiviral and system software under microscope...
|
|
eletronico.exe - Dangerous
Fix it immediately
eletronico.exe
We suggest you to remove DNT.SYS from your computer as soon as possible.
DNT.SYS is Trojan/Backdoor.
Kill the file DNT.SYS and remove DNT.SYS from Windows startup.
File: eletronico.exe
Classification:
Antivirus Version Last Update Result
Avast 4.8.1335.0 2009.08.02 -
AVG 8.5.0.406 2009.08.02 -
BitDefender 7.2 2009.08.03 Gen:Trojan.Heur.@hZ@rjKqUIpGh
Comodo 1847 2009.08.03 -
DrWeb 5.0.0.12182 2009.08.03 -
F-Secure 8.0.14470.0 2009.08.03 Trojan-Banker.Win32.Banker.etk
Kaspersky 7.0.0.125 2009.08.03 Trojan-Banker.Win32.Banker.etk
Microsoft 1.4903 2009.08.03 -
NOD32 4299 2009.08.02 a variant of Win32/Spy.Banker.QEP
Symantec 1.4.4.12 2009.08.03 -
File size: 4245776 bytes
MD5...: ac8f6fe8c008b2d948e6e2e67f7414a2
SHA1..: c05279bdf5b06b1f52fe1acde1d36ee1c8d04b0e
Installation
When the program is executed, it creates the following registry subkeys and values:
----------------------------------
Keys deleted:0
----------------------------------
----------------------------------
Keys added:3
----------------------------------
HKLM\SYSTEM\CurrentControlSet\Services\DNT
HKLM\SYSTEM\CurrentControlSet\Services\DNT\Security
HKCU\avg
----------------------------------
Values deleted:0
----------------------------------
----------------------------------
Values added:8
----------------------------------
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA: 0x00000000
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\: "C:\Windows\System32\avg.exe"
HKLM\SYSTEM\CurrentControlSet\Services\DNT\Security\Security: 01 00 14 80 90 00 00 00 9C 00 00 00 14 00 00 00 30 00 00 00 02 00 1C 00 01 00 00 00 02 80 14 00 FF 01 0F 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 60 00 04 00 00 00 00 00 14 00 FD 01 02 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00 18 00 FF 01 0F 00 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 00 00 14 00 8D 01 02 00 01 01 00 00 00 00 00 05 0B 00 00 00 00 00 18 00 FD 01 02 00 01 02 00 00 00 00 00 05 20 00 00 00 23 02 00 00 01 01 00 00 00 00 00 05 12 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00
HKLM\SYSTEM\CurrentControlSet\Services\DNT\Type: 0x00000001
HKLM\SYSTEM\CurrentControlSet\Services\DNT\Start: 0x00000001
HKLM\SYSTEM\CurrentControlSet\Services\DNT\ErrorControl: 0x00000001
HKLM\SYSTEM\CurrentControlSet\Services\DNT\ImagePath: "\??\c:\windows\system32\DNT.sys"
HKLM\SYSTEM\CurrentControlSet\Services\DNT\DisplayName: "Driver"
----------------------------------
Values modified:2
----------------------------------
HKCU\Software\Microsoft\Windows NT\CurrentVersion\TaskManager\Preferences: 9C 02 00 00 E8 03 00 00 02 00 00 00 01 00 00 00 01 00 00 00 0A 00 00 00 0A 00 00 00 9E 01 00 00 C9 01 00 00 00 00 00 00 00 00 00 00 02 00 00 00 03 00 00 00 04 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 47 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
HKCU\Software\Microsoft\Windows NT\CurrentVersion\TaskManager\Preferences: 9C 02 00 00 E8 03 00 00 02 00 00 00 01 00 00 00 01 00 00 00 0A 00 00 00 0A 00 00 00 9E 01 00 00 C9 01 00 00 01 00 00 00 00 00 00 00 02 00 00 00 03 00 00 00 04 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6B 00 00 00 6B 00 00 00 23 00 00 00 46 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 47 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
----------------------------------
Files added:2
----------------------------------
C:\WINDOWS\system32\avg.exe
C:\WINDOWS\system32\DNT.SYS
----------------------------------
Files [attributes?] modified:0
----------------------------------
----------------------------------
Folders added:0
----------------------------------
----------------------------------
Folders deleted:0
----------------------------------
----------------------------------
Total changes:15
----------------------------------
-------------------------------------------------------------------------------------
Detected by RegRun Reanimator:
Item Name:
Author: Unknown
Related File: C:\Windows\System32\avg.exe
Type: Registry Run
Removal Results: Success
Number of reboot: 1
-------------------------------------------------------------------------------------
Detected by RegRun Reanimator in Deep Level Scanning mode:
Item Name: DNT
Author:
Related File: \??\c:\windows\system32\DNT.sys
Type: Services detected by Partizan
Removal Results: Success
Number of reboot: 1
-------------------------------------------------------------------------------------
avg.exe
Antivirus Version Last Update Result
Avast 4.8.1335.0 2009.07.29 -
AVG 8.5.0.387 2009.07.29 -
BitDefender 7.2 2009.07.29 Trojan.PWS.OnlineGames.KCQU
Comodo 1790 2009.07.30 TrojWare.Win32.Rootkit.Banker.c
DrWeb 5.0.0.12182 2009.07.29 -
F-Secure 8.0.14470.0 2009.07.29 Rootkit.Win32.Banker.c
Kaspersky 7.0.0.125 2009.07.29 Rootkit.Win32.Banker.c
Microsoft 1.4903 2009.07.29 -
NOD32 4289 2009.07.29 -
Symantec 1.4.4.12 2009.07.29 -
Additional information
File size: 7936 bytes
MD5 : f5df99a99eb5d8a320210f4c1f29fc61
SHA1 : 229e8212abe70e53e49bac18d3e08d2f39382e39
-------------------------------------------------------------------------------------
DNT.sys
Antivirus Version Last Update Result
Avast 4.8.1335.0 2009.08.02 -
AVG 8.5.0.406 2009.08.02 -
BitDefender 7.2 2009.08.03 Gen:Trojan.Heur.5pW@rbDN@4aGh
Comodo 1847 2009.08.03 -
DrWeb 5.0.0.12182 2009.08.03 -
F-Secure 8.0.14470.0 2009.08.03 Trojan-Banker.Win32.Banker.etk
Kaspersky 7.0.0.125 2009.08.03 Trojan-Banker.Win32.Banker.etk
Microsoft 1.4903 2009.08.03 TrojanSpy:Win32/Bancos.gen!B
NOD32 4299 2009.08.02 a variant of Win32/Spy.Banker.QEP
Symantec 1.4.4.12 2009.08.03 -
Additional information
File size: 4084224 bytes
MD5...: 1e010b60f464b971ebfc8247c80e6c31
SHA1..: 36dcaca8bf3181e22e12dc01b5361a82ced6aca2
-------------------------------------------------------------------------------------
Recommended software:
UnHackMe anti-rootkit and anti-malware
http://www.unhackme.com
RegRun Security Suite (Good choice for removal and protection)
Remove ELETRONICO.EXE.HTM now!
Virus Problem? Google Redirects? Ads? Slow?
- First download the latest version UnHackMe: Download UnHackMe.
- Open the archive and start the unhackme_setup.exe.
- When the installation is over you will see the main UnHackMe screen.
- Click on the Advanced button and choose “Send report to the support center” in the popup menu. Follow the instructions.
The report file (regrunlog.txt) will be saved on your Desktop.
- Go to the Support Center.
Attach it to your ticket and click on the Browse button and then to the regrunlog.txt file.
Don’t insert the report text directly into the message text! We won’t be able to analyse such a report.
Describe your problem in detail. Add the screenshot, your antivirus log or suspicious files.
Constantly updated. Last update:
February 5 2012
Fix Windows PC's Fast! Automated Software Repairs damaged & slow windows systems in 1 click.
|
|
- Quick Links
-
What's new?
RSS Feed
Add to AppDatabase
Ask Experts
Join forum
Links
- Articles
-
Virus or not? SPTD####.sys
What is mc21.tmp, mc22.tmp, mc23.tmp?
- Select
-
Necessary
Useless
At your option
Dangerous
|