 Remove Vustog. Description and removal instructions
Vustog carries a payload. It terminates processes of some security-related applications and overwrites the main executable of Internet Explorer with a copy of itself. It also modifies services of Symantec LiveUpdate in order to run every time security updates start. The worm is able to receive and execute commands from a remote attacker. It can bypass the Windows Firewall. Vustog secretly runs on every Windows startup. Related files: aupdate.exe, IEXPLORE.EXE, lsass.exe, luall.exe, mcupdate.exe, svchost.exe:svchost.exe, msfsr.sys, [X].sys Vustog properties: • Allows remote user connection • Connects itself to the internet • Hides from the user • Stays resident in background Automatic Vustog removal:remover for Vustog
Vustog manual removal:Kill processes:aupdate.exe, iexplore.exe, lsass.exe, luall.exe, mcupdate.exe, svchost.exe:svchost.exe Delete registry values: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\\Standar Profile\AuthorizedApplications\List\[filename] Delete files: aupdate.exe, iexplore.exe, lsass.exe, luall.exe, mcupdate.exe, svchost.exe:svchost.exe, msfsr.sys, [X].sys Misc: [X] is a combination of 6 random letters. Exact file location: lsass.exe - C:\WINDOWS or C:\WINNT mcupdate.exe - C:\Program Files\McAfee.com\Agent iexplore.exe - C:\Program Files\Internet Explorer msfsr.sys - C:\WINDOWS\System or C:\WINNT\System32 aupdate.exe, luall.exe - C:\Program Files\Symantec\LiveUpdate [X].sys - C:\WINDOWS\System32\drivers or C:\WINNT\System32\drivers svchost.exe:svchost.exe - C:\WINDOWS\System32 or C:\WINNT\System32; C:\WINDOWS\Sytem32\dllcache or C:\WINNT\System32\dllcache Other programs to remove Vustog:• SUPERAntiSpyware - Review - Download• CounterSpy - Review - Download • Windows Defender - Review - Download Information added: 03/02/07 Information updated: 03/02/07 Additional resources related to Vustog:Attention: If you know or you have a website or page about Vustog removal, feel free to add a link to this list: add url
more resources Post Comment:Attention: Use this form only if you have additional information about Vustog parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
|
Latest spyware news:
 Malware statistics of August 2008 by Kaspersky Security Network Computers at International Space Station got infected Memory vulnerability found on Windows Vista Two reporters banned from Black Hats conference for hacking Microblogging website exploited by Brazilian hackers Phishers biting their own baits Cyber criminals start working faster 75 percent of online banking websites are insecure Malware rates keep rising up Switzerland is the most spammed country in a worldSubscribe to news 
Similar parasites:
|
FORUM:
HELP:
