Title: Invitation Card.zip
Type: Worms

Remove Invitation Card.zip. Removal instructions


 
Also known as: W32.Ackantta.B@mm
Severity scale:Invitation Card.zip severity is 32  (32 / 100)
 
Invitation Card.zip is a malicious file attached to a scam email with invitation to Twitter.com. More precisely speaking, this file is a computer worm W32.Ackantta.B@mm. The scam email reads:

"From: invitations@twitter.com
Subject: Your friend invited you to twitter!"

Once active, W32.Ackantta.B@mm may download and install more malware onto your computer. This worm is self-replicating, so it may easily spread on removable drives and shared folders. What is more W32.Ackantta.B@mm can download Trojan Vundo, which then may seriously infect your computer with spyware and other parasites.

If you'll receive this or similar email, please do not download Invitation Card.zip. If your computer is already infected, then use the removal guide to remove Invitation Card.zip and W32.Ackantta.B@mm for free.

Related files: javawx.exe, [RANDOM FILE NAME].dll, javame1.1.exe, javale.exe, Invitation Card.zip

Invitation Card.zip properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Invitation Card.zip snapshot:
Invitation Card.zip removal

Automatic Invitation Card.zip removal:

SpyHunter is recommended remover to uninstall Invitation Card.zip. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Invitation Card.zip using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
STOPzilla
We are testing STOPzilla's efficiency at removing Invitation Card.zip (2011-06-23 04:44:09)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing Invitation Card.zip (2011-06-23 04:44:09)
Spyware Doctor
We are testing Spyware Doctor's efficiency at removing Invitation Card.zip (2011-06-23 04:44:09)
XoftSpySE Anti Spyware

Invitation Card.zip manual removal:

Kill processes:
javale.exe javame1.1.exe javawx.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\?€?javastatio n2.3?€ณ = ?€?[RANDOM MONTH]?€?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\?€?ultrasparc 2.3?€ณ = ?€?[RANDOM DAY]?€?
HKEY_CLASSES_ROOT\CLSID\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}\InprocServer32\?€?(Default)?€? = ?€?%System%\[RANDOM FILE NAME].dll
HKEY_CLASSES_ROOT\CLSID\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}\InprocServer32 \?€?ThreadingModel?€? = ?€?Both?€?
HKEY_CURRENT_USER\Software\Microsoft\Installer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey
HKEY_CURRENT_USER\SOFTWARE\Microsoft\cavok
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download\?€?CheckExeSignatures?€? = ?€?0?—1?€ณ
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download\?€?RunInvalidSignatures?€? = ?€?no?€?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations\?€?LowRiskFileTypes?€? = ?€?.zip;.rar;.cab;.txt;.exe;.reg;.msi;.htm;.html;.bat;.cmd;.pif;.scr;.mov;.mp3;.wav?€?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\?€?1A10?€ณ = ?€?1?€ณ
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\?€?javastation1.1?€ณ = ?€?02?€ณ
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\?€?ultrasparc1.1?€ณ = ?€?25?€ณ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Settings\?€?Time?€?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%System%\?€?javale.exe?€? = ?€?%System%\javale.exe:*:Enabled:Explorer?€?
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\?€?%System%\javawx.exe?€? = ?€?%System%\javawx.exe:*:Enabled:Explorer?€?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\?€?SunJava Updater v7?€ณ = ?€?%System%\javale.exe?€?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\?€?Sun Java Updater v7.4?€ณ = ?€?%System%\javawx.exe?€?
Unregister DLLs:
[RANDOM FILE NAME].dll

Delete files:
Invitation Card.zip %System%\\javale.exe %System%\\javame1.1.exe %System%\\[RANDOM FILE NAME].dll %System%\\javawx.exe
Information added: 2009-06-29 04:51:53
Information updated: 2011-06-23 02:06:54

Additional resources related to Invitation Card.zip:

Attention: If you know or you have a website or page about Invitation Card.zip removal, feel free to add a link to this list: add url

more resources
0
0
<Guest>
Also comes with subject line "Cindy would like to be your friend on hi5!"
0
0
<Guest>
Also comes with "Laura would like to be your friend on hi5!" and another one about some Amazon shipping order. Got five of these just today... and I thought corporate email was immune to spoofing.
0
0
guest
I got an invitaion_ card_ 29945.zip from mcdonalds about a free breakfast. Good thing my daughter works there so i asked her first and she laughed and said not from us......luckily i didnt open it.

Post Comment:

Attention: Use this form only if you have additional information about Invitation Card.zip parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Latest spyware news:
Subscribe to news

Similar parasites:
Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

I failed to remove Invitation Card.zip using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other