Remove Vustog. Description and removal instructions
Vustog carries a payload. It terminates processes of some security-related applications and overwrites the main executable of Internet Explorer with a copy of itself. It also modifies services of Symantec LiveUpdate in order to run every time security updates start. The worm is able to receive and execute commands from a remote attacker. It can bypass the Windows Firewall. Vustog secretly runs on every Windows startup. Related files: aupdate.exe, IEXPLORE.EXE, lsass.exe, luall.exe, mcupdate.exe, svchost.exe:svchost.exe, msfsr.sys, [X].sys Vustog properties: • Allows remote user connection • Connects itself to the internet • Hides from the user • Stays resident in background Automatic Vustog removal:remover for Vustog
Vustog manual removal:Kill processes:aupdate.exe, iexplore.exe, lsass.exe, luall.exe, mcupdate.exe, svchost.exe:svchost.exe Delete registry values: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\\Standar Profile\AuthorizedApplications\List\[filename] Delete files: aupdate.exe, iexplore.exe, lsass.exe, luall.exe, mcupdate.exe, svchost.exe:svchost.exe, msfsr.sys, [X].sys Misc: [X] is a combination of 6 random letters. Exact file location: lsass.exe - C:\WINDOWS or C:\WINNT mcupdate.exe - C:\Program Files\McAfee.com\Agent iexplore.exe - C:\Program Files\Internet Explorer msfsr.sys - C:\WINDOWS\System or C:\WINNT\System32 aupdate.exe, luall.exe - C:\Program Files\Symantec\LiveUpdate [X].sys - C:\WINDOWS\System32\drivers or C:\WINNT\System32\drivers svchost.exe:svchost.exe - C:\WINDOWS\System32 or C:\WINNT\System32; C:\WINDOWS\Sytem32\dllcache or C:\WINNT\System32\dllcache Other programs to remove Vustog:• Malwarebytes Anti Malware - Review - Download• Malwarebytes Anti Malware - Review - Download • Windows Defender - Review - Download Information added: 03/02/07 Information updated: 03/02/07 Additional resources related to Vustog:Attention: If you know or you have a website or page about Vustog removal, feel free to add a link to this list: add url
more resources Post Comment:Attention: Use this form only if you have additional information about Vustog parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
|
Latest spyware news:
 Rogue security applications impersonate leading anti-virus manufacturers Attack of Waledac Worm is schedulled on July 4 Another Parasite Attack Spreads Via Twitter Free security product vets Twitter links Mac trojan targets game sites to infect users Security Threat at Fanny Mae Some web sites to avoid for today British Government will track all e-mail's YOUR SISTER NAKED LOLZ com “intervalhehehe” popupSubscribe to news 
Similar parasites:
|
FORUM:
HELP:
