|
Title: Piggi
Type: Worms
Remove Piggi. Removal instructions
Severity scale:
 (57 / 100)
Once the user opens such an attachment, the parasite secretly installs itself to the system and runs a spreading routine. It sends bogus e-mails to all the addresses it finds in the Windows Address Book and some local files. Piggi also creates hundreds of copies of itself in shared folders of popular peer-to-peer programs. This allows it to propagate through file sharing networks. Furthermore, it can infect remote computers by exploiting known security vulnerabilities. Piggi also carries a payload. It disables Windows and Symantec security software updates. The worm uses an integrated rootkit to hide its presence in the system. It is able to bypass the Windows Firewall. The parasite secretly runs on every Windows startup. Related files: lsass.exe, svchost.exe, msfsr.sys, [X].sys Piggi properties: • Connects itself to the internet • Hides from the user • Stays resident in background Automatic Piggi removal: 
We are testing STOPzilla's efficiency at removing Piggi
(2007-01-03 09:16:50)
We are testing Malwarebytes Anti Malware's efficiency at removing Piggi
(2007-01-03 09:16:50)
We are testing Spyware Doctor's efficiency at removing Piggi
(2007-01-03 09:16:50)
Piggi manual removal:Kill processes:lsass.exe, svchost.exe Delete registry values: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\[filename] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell=explorer.exe %Windir%\lsass.exe HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msfsr HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[X] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\[filename] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Start=3 Delete files: lsass.exe, svchost.exe, msfsr.sys, [X].sys Misc: [X] is a combination of 5 random characters. Exact file location: lsass.exe - C:\WINDOWS or C:\WINNT msfsr.sys - C:\WINDOWS\System32 or C:\WINNT\System32 [X].sys - C:\WINDOWS\System32\drivers or C:\WINNT\System32\drivers svchost.exe - C:\WINDOWS or C:\WINNT; C:\WINDOWS\System32\dllcache or C:\WINNT\System32\dllcache Some files might be hidden by the rootkit. 
Information added: 2007-01-03 06:39:35
Information updated: 2007-01-03 06:39:35 Additional resources related to Piggi:Attention: If you know or you have a website or page about Piggi removal, feel free to add a link to this list: add url |
Latest spyware news:
Subscribe to news
Similar parasites:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
Post Comment: