|
Startupapps.com recommends you:
UnHackMe Warrior Removing rootkits is best done from the "clean" Windows!
Blog: New viruses/malware/rootkits. Everyday!
Blog: How to remove malware/Trojans/rootkits using UnHackMe or manually. We know how to remove malware.
Shortcut Antivirus protects against Microsoft LNK and PIF vulnerability, notify a user about found threats and give possibility to immediately remove threats.
StuxnetRemover - free of charge Stuxnet/Tmphider rootkit removal tool.
Blog: System Software Research. What is under the hood? Who is faster? Antiviral and system software under microscope...
|
|
chostsv.exe - Useless
chostsv.exe
PWSteal.Banpaes.C.
Is a Trojan horse that attempts to steal online banking information.
Also known as PWSteal.Banpaes, PWSteal.Banpaes.B
When PWSteal.Banpaes.C is executed, it performs the following actions:
Creates the following files:
%System%\Chostsv.exe
%System%\Mouse32.dll
%System%\Keybrd32.dll
%System%\Kuser.dll
%System%\Serv.dll
C:\Temp\Install.exe (This may not be created if the Temp folder does not exist in this location).
Adds the value:
"chostsv"="%System%\chostsv.exe"
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Logs keystrokes if the keystrokes are entered in windows that have any of the following strings in the window's title bar:
Caixa Economica Federal
Internet Banking CAIXA
BESC - Banco do Estando de Santa Catarina
Banco do Estado de Santa Catarina
Gerenciador Financeiro
Teclado Virtual
HSBC
Credicard
MasterCard
and some other.
Then, this Trojan sends the keystrokes to a predefined email address.
Manual removal:
Navigate to the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and delete the value:
"chostsv"="%System%\chostsv.exe"
Or use RegRun to automatically remove this registry item.
Virus Problem? Google Redirects? Ads? Slow?
- First download the latest version UnHackMe: Download UnHackMe.
- Open the archive and start the unhackme_setup.exe.
- When the installation is over you will see the main UnHackMe screen.
- Click on the Advanced button and choose “Send report to the support center” in the popup menu. Follow the instructions.
The report file (regrunlog.txt) will be saved on your Desktop.
- Go to the Support Center.
Attach it to your ticket and click on the Browse button and then to the regrunlog.txt file.
Don’t insert the report text directly into the message text! We won’t be able to analyse such a report.
Describe your problem in detail. Add the screenshot, your antivirus log or suspicious files.
Constantly updated. Last update:
February 5 2012
Fix Windows PC's Fast! Automated Software Repairs damaged & slow windows systems in 1 click.
|
|
- Quick Links
-
What's new?
RSS Feed
Add to AppDatabase
Ask Experts
Join forum
Links
- Articles
-
Virus or not? SPTD####.sys
What is mc21.tmp, mc22.tmp, mc23.tmp?
- Select
-
Necessary
Useless
At your option
Dangerous
|