Sunday, January 4, 2009

FreeScratchCards Hijacker

Click here to remove FreeScratchCards malware
FreeScratchCards description:
FreeScratchCards Category:Hijacker
Hijackers take control of various parts of your web browser, including your home page,
search pages, and search bar. They may also redirect you to certain sites should you
mistype an address or prevent you from going to a website they would rather you not,
such as sites that combat malware. Some will even redirect you to their own search engine
when you attempt a search.

Detection FreeScratchCards :

FreeScratchCards Files:
[%SYSTEM%]\fsc.ini
[%SYSTEM%]\idbrilbs.exe
[%SYSTEM%]\igpgtxbp.exe
[%SYSTEM%]\iniauvpe.dll
[%SYSTEM%]\inrvvmil.exe
[%WINDOWS%]\downloaded program files\install.exe
[%WINDOWS%]\system\fsc.ini
[%WINDOWS%]\system\haocside.dll
[%WINDOWS%]\system\haocside.exe
[%WINDOWS%]\system\haywuywl.exe
[%WINDOWS%]\system\hicvblgb.exe
[%WINDOWS%]\system\tsdezest.exe
[%SYSTEM%]\fsc.ini
[%SYSTEM%]\idbrilbs.exe
[%SYSTEM%]\igpgtxbp.exe
[%SYSTEM%]\iniauvpe.dll
[%SYSTEM%]\inrvvmil.exe
[%WINDOWS%]\downloaded program files\install.exe
[%WINDOWS%]\system\fsc.ini
[%WINDOWS%]\system\haocside.dll
[%WINDOWS%]\system\haocside.exe
[%WINDOWS%]\system\haywuywl.exe
[%WINDOWS%]\system\hicvblgb.exe
[%WINDOWS%]\system\tsdezest.exe

FreeScratchCards Registry Keys:
HKEY_CLASSES_ROOT\clsid\{ed3adb6e-5aa9-41b0-9ddc-6f31a34552be}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{ed3adb6e-5aa9-41b0-9ddc-6f31a34552be}

Removing FreeScratchCards:

you can run trial version of ExterminateIt, or remove FreeScratchCards manually.


To completely manually remove FreeScratchCards malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FreeScratchCards.


Read also:
Pigeon.AVFY Trojan Removal

0 comments:

Post a Comment