Sabtu, 30 Juli 2011

Remover for I-Worm.Zafi.B,D 2.0

A apparatus which removes I-Worm.Zafi.B,D. This virus abatement apparatus was advised to advice users antisepticize their computers if adulterated with I-Worm.Zafi.B,D. The bastard sends letters in altered languages. For this purpose, it checks the area addendum of the email address. To actuate the bastard if Windows starts, it enters the created .exe book in the Registry. For this purpose, it creates a amount with the name „_Hazafibb“ in the afterward Registry key: HKLMSoftwareMicrosoftWindowsCurrentVersionRun. To prevent, that added than one instance of the bastard is running, it creates a mutex with the name „_Hazafibb“. Creates the Registry key: HKLMSoftwareMicrosoft_Hazafibb
Terminates processes absolute one of the afterward strings:
msconfig
regedit
task

Tries to overwrite .exe files of accepted aegis programs, with its own code. Performs a DoS advance adjoin the afterward domains:
www.2f.hu
www.parlament.hu
www.virusbuster.hu
www.virushirado.hu

Tries to deliver application book administration networks. For this purpose, the bastard copies itself to all folders, absolute the strings „share“ or „upload“ in their name. For this purpose, the bastard uses the afterward book names:
Total Commander 7.0 full_install.exe
winamp 7.0 full_install.exe

To deliver by email, the bastard gathers email addresses, from files with the afterward book extensions:
.adb
.asp
.dbx
.eml
.htm
.mbx
.php
.pmr
.sht
.tbb
.txt
.wab

Don’t gathers addresses, absolute one of the afterward strings:
admi
cafee
google
help
hotm
info
kasper
micro
msn
panda
sopho
suppor
syma
trend
use
vir
webm
win
yaho
Sends multilingual letters to the aggregate addresses.

Article Source
If u need a KeyGen, serial number and crack, please used Craagle 1.91
Screenshot :



Size: 284 kB
Publisher: Visit Website
OS: Windows All

Tidak ada komentar:

Posting Komentar