Remove Shangxing. Description and removal instructions

 
Title: Shangxing

Type: Backdoors
Severity scale:Shangxing severity is 58  (58 / 100)
 
Shangxing is a backdoor that provides the attacker with unauthorized remote access to the compromised computer. The intruder can access user sensitive information and control the infected system. The parasite is able to bypass any firewall installed on the computer. It runs as a service on every Windows startup.


Related files: rejoice42.exe, svkp.sys

Shangxing properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Shangxing removal:

remover for Shangxing

Shangxing manual removal:

Kill processes:
rejoice42.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\windows_rejoice
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SVKP
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SVKP
Delete files:
rejoice42.exe, svkp.sys
Misc:
Shangxing uses TCP port 8181.

Exact file location:
svkp.sys - C:\WINDOWS\System32 or C:\WINNT\System32
rejoice42.exe - C:\Program Files\Common Files\Microsoft Shared\MSInfo

Other programs to remove Shangxing:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 06/03/07
Information updated: 06/03/07

Additional resources related to Shangxing:

Attention: If you know or you have a website or page about Shangxing removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Shangxing parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: