Click on screenshot to zoom
Livello di pericolo 10
Tipo: Rogue Anti-Spyware
Comuni sintomi di infezione:
  • Cambio di sfondi
  • Connessione ad internet senza autorizzazione
  • Esposizione di annunci pubblicitari
  • Strane barre delle applicazioni installate senza il tuo permesso
  • Rallentamento della connessione internet
  • Errori di sistema
  • Impossibile cambiare la mia homepage
  • Fastidiose finestre pop-up
  • Rallentamento del Computer
Altre variazioni note come:

SafeBrowseNow.com

Il sito SafeBrowseNow.com (SafeBrowseNow.com/xp, SafeBrowseNow.com/vista) è uno di molti altri siti (come DoBrowSesecure.com,SecureArticle.com, ProtectStartPage.com, InstantSafePage.com) utilizzati per imbrogliare gli utenti a comprare falsi antispyware. SafeBrowseNow.com può mostrare minacce non-esistenti sul computer degli utenti, mostra massaggi di raccomandazioni ingannevoli come l’infezione W32.Myzor.FK@yf, che non esiste. SafeBrowseNow.com promuove solamente false applicazioni anti-spyware come Ultimate Antivirus, Windows Antivirus 2008, AntiSpyware Shield.

"Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date."

Gli utenti che utilizzano IE potrebbero notare che la propria pagina iniziale è stata cambiata in SafeBrowseNow.com dopo l’infezione di Trojan Zlob. SafeBrowseNow.com si avvierà ogni volta che l'utente aprirà IE ed appariranno molti messaggi, fastidiosi, riguardo errori realmente immaginari. SafeBrowseNow.com è meritevole di fiducia, in nessun caso. Gli utenti dovrebbero stare alla larga da questo sito!

Scarica il programma di scansione per SafeBrowseNow.com
  • Soluzione rapida e sicura per la rimozione della minaccia SafeBrowseNow.com .
  • Salva sul tuo desktop e lancia subito!
disclaimer

Come rimuovere da soli SafeBrowseNow.com

File relativi all’infezione (SafeBrowseNow.com):

install_player_2xxx3912941[1].exe
ks94.dll
dop94.dll
851174.dll
214075.dll
nogxfvblqld.dll
ksendlbtqrs.dll
ksendlbtogt.dll
ibmsmyi.dll
788877.dll
sgntu.dll
Uninstall.exe
VideoAccessCodecInstall[1].exe
vpncore.exe
VideoAccessCodec.ocx
wmpenv.dll
wcu.exe
zfe2.exe
pebgkxwq.exe
exqa.exe
wcs.exe
wcm.exe
iebu.exe
iebtu.exe
iebtmm.exe
iebtm.exe
238044.dll
iebt.dll
iebr.dll
xkefqtgs.dll
rnopbfgt.dll
kvsdpfeafeo.dll
funfsnv.dll
wscmp.dll
psqnuvo.dll
162123.dll
tusdgan.dll
kfcpnd.dll
514852.dll
905757.dll
247880.dll
566828.dll
pxgdslro.dll
nldfmtapndk.dll
boqnrwdmstg.dll
824223.dll
qvlbodmnmle.dll
443059.dll
fvowketqsle.dll
fvowketqksn.dll
158117.dll
qvlbodmnbof.dll
wetkadmr.dll
tdomgafw.dll
gndarmblaor.dll
qvlbodmnlks.dll
834668.dll
gndarmblvpg.dll
xbaqktfv.exe
rtmipr.dll
527631.dll
qdsba.dll
vadokmxt.dll
wdpoefan.dll
561756.dll
312191.dll
qnmargolbve.dll
pmsoarbf.dll
Wxdbpfvo.dll
uyhjw.dll
814810.dll
rkaxfza.dll
bubbj.dll
dntpkwodpx.dll
omlbpkaw.dll
qtvglped.dll
892267.dll
403445.dll
temlxopqftg.dll
rkvdr.dll
qdnkewfa.dll
mgsvflkw.dll
vualf.dll
ekvgsnw.dll
svpekgongrk.dll
svpekgonnof.dll
svpekgonlop.dll
drnpfdxwgv.dll
dcggain.dll
qvdntlmw.dll
vbgtorfd.dll
dwnrpofk.dll
jdxah.dll
kdftlboekae.dll
drnpfdxsxp.dll
drnpfdxopx.dll
drnpfdxxsn.dll
drnpfdxlsk.dll
admggxp.dll
drnpfdxlwn.dll
1205847823.dll
drnpfdxsfn.dll
etlrlws.dll
drnpfdxrqv.dll
drnpfdxxrs.dll
bokpkov.dll
altvxvm.dll
1205289674.dll
enlfxgw.dll
apdqnxp.dll
dkxrstqqgr.dll
antiviirus.exe
1204885300.dll
1204460162.dll
1203846321.dll
1203634438.dll
1204372749.dll
1203140349.dll
1202650266.dll
1202567261.dll
laf1.exe
1198448799.dll
waun.exe
wamdl.dll
uninst.exe
scu.exe
scm.exe
scit.exe
sbun.exe
sbsm.exe
sbmntr.exe
sbmdl.dll
1198448796.dll
iinqyl.dll
1202030455.dll
ofcpi.dll
1201639702.dll
1201639705.dll
findsiteonline.dll
qhcvdw.dll
fsehfcu.dll
G5-tmp.exe
G2-tmp.exe
hdtip.dll
voipwet.dll
vipextpxm.dll
werbettxf.dll
vipextgpk.dll
werbetlrw.dll
vipextnog.dll
sysdivx.dll
werbetpwg.dll
Trojan.Zlob|eulbn.dll
isfun.exe
isfmntr.exe
ictun.exe
icthis.exe
nczupfw.dll
isfmdl.dll
ictmdl.dll
antzozc.dll
dumpserv.com
zxserv0.com
vnp7s.net
msvol.tlb
hp[X].tmp
msmsgs.exe
dumpserv.com nvctrl.exe
uimcu.dll
dtjby.dll
ncompat.tlb
btrklfr.dll

Le librerie Dynamic link utilizzano (SafeBrowseNow.com):

ks94.dll
dop94.dll
851174.dll
214075.dll
nogxfvblqld.dll
ksendlbtqrs.dll
ksendlbtogt.dll
788877.dll
ibmsmyi.dll
sgntu.dll
wmpenv.dll
238044.dll
iebt.dll
iebr.dll
xkefqtgs.dll
rnopbfgt.dll
kvsdpfeafeo.dll
funfsnv.dll
wscmp.dll
psqnuvo.dll
162123.dll
tusdgan.dll
kfcpnd.dll
514852.dll
905757.dll
247880.dll
566828.dll
pxgdslro.dll
nldfmtapndk.dll
boqnrwdmstg.dll
824223.dll
qvlbodmnmle.dll
443059.dll
fvowketqsle.dll
fvowketqksn.dll
158117.dll
qvlbodmnbof.dll
wetkadmr.dll
tdomgafw.dll
gndarmblaor.dll
qvlbodmnlks.dll
834668.dll
gndarmblvpg.dll
rtmipr.dll
wxdbpfvo.dll
527631.dll
qdsba.dll
vadokmxt.dll
wdpoefan.dll
561756.dll
312191.dll
qnmargolbve.dll
pmsoarbf.dll
Wxdbpfvo.dll
uyhjw.dll
814810.dll
rkaxfza.dll
bubbj.dll
dntpkwodpx.dll
omlbpkaw.dll
qtvglped.dll
892267.dll
403445.dll
temlxopqftg.dll
rkvdr.dll
mgsvflkw.dll
qdnkewfa.dll
vualf.dll
ekvgsnw.dll
drnpfdxwgv.dll
svpekgongrk.dll
svpekgonlop.dll
svpekgonnof.dll
dcggain.dll
qvdntlmw.dll
vbgtorfd.dll
dwnrpofk.dll
jdxah.dll
kdftlboekae.dll
drnpfdxsxp.dll
drnpfdxlsk.dll
drnpfdxopx.dll
drnpfdxxsn.dll
admggxp.dll
drnpfdxlwn.dll
drnpfdxsfn.dll
1205847823.dll
etlrlws.dll
drnpfdxrqv.dll|
drnpfdxxrs.dll|
altvxvm.dll
bokpkov.dll
1205289674.dll
btrklfr.dll
apdqnxp.dll
dkxrstqqgr.dll
enlfxgw.dll
1204885300.dll
1204460162.dll
1203846321.dll
1203634438.dll
1204372749.dll
1203140349.dll
1202650266.dll
1202567261.dll
sbmdl.dll
1198448796.dll
wamdl.dll
1198448799.dll
iinqyl.dll
1202030455.dll
ofcpi.dll
1201639705.dll
1201639702.dll
findsiteonline.dll
qhcvdw.dll
fsehfcu.dll
hdtip.dll
voipwet.dll
wowlze.dll
vipextpxm.dll
werbettxf.dll
vipextgpk.dll
werbetlrw.dll
vipextnog.dll
sysdivx.dll
werbetpwg.dll
Trojan.Zlob|eulbn.dll
dfrep.dll
nczupfw.dll
ictmdl.dll
isfmdl.dll
jrpkmgh.dll
antzozc.dll
uimcu.dll
dtjby.dll

Eseguibili da eliminare (SafeBrowseNow.com):

install_player_2xxx3912941[1].exe
Uninstall.exe
VideoAccessCodecInstall[1].exe
vpncore.exe
wcu.exe
zfe2.exe
pebgkxwq.exe
exqa.exe
wcs.exe
wcm.exe
iebu.exe
iebtu.exe
iebtmm.exe
iebtm.exe
xbaqktfv.exe
antiviirus.exe
laf1.exe
waun.exe
uninst.exe
scu.exe
scm.exe
scit.exe
sbun.exe
sbsm.exe
sbmntr.exe
G5-tmp.exe
G2-tmp.exe
icun.exe
isfmm.exe
isfmntr.exe
isfun.exe
icmntr.exe
icthis.exe
ictun.exe
msmsgs.exe
nvctrl.exe

Rimozione delle entrate del registro (SafeBrowseNow.com):

Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
{DB9FBA9D-AB1B-4CC6-9745-F3B549D64E40}
{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
{ab75cc7d-2751-4144-a278-5462d5a5884c}
Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\
Disclaimer

Inserisci commento — CI SERVE LA TUA OPINIONE!

Commento:
Nome:
Inserisci per favore il codice di sicurezza:
This is a captcha-picture. It is used to prevent mass-access by robots.