Manual Removal of W32/Agent.AANG Trojan

The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal

• %Temp%\emp_03.exe
• %Temp%\Setup+Patch.exe
• %System%\doskeys.exe [ 614,400 bytes ]
• %Temp%\TEMP01.RAR
• %System%\gh14rs.txt
• %System%\rar.exe [ 98,304 bytes ]
  [ The file “rar.exe” is known to be created under the following filenames: ]
  %AppData%\rar.exe
  %ProgramFiles%\hypermegabundler\rar.exe
  %ProgramFiles%\winrar\original_files_and_patch\rar.exe
  %ProgramFiles%\winrar\rar.exe
  %System%\extract to winrar directory\rar.exe
  %System%\winrar\rar.exe
  %Temp%\lupen-pen-drive\rar.exe
  %Temp%\rar.exe
  %Temp%\rarsfx0\bpki.dll
  %Temp%\rarsfx0\rar.exe
  %Temp%\rarsfx1\bpki.dll
  %Temp%\wrar362pl\rar.exe
  %UserProfile%\rar.exe

  If you have any of these files in running process from task manger, end the process before removal.
  Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg

Manual Removal From Registry 
Click Start, Run,Type regedit,Click OK.
Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Download and run this UnHookExec.inf, and then continue with the removal.

Search Registry For Virus File Names listed above to remove completely,
Edit Menu - Find, enter Keyword and remove all value that find in search.
Exit the Registry Editor,
Restart your Computer.
Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Killbox (Freeware)

Typically hotfixes are released on the second Tuesday of each month as you are all well aware.  Occasionally, I can personally only remember four including this one and the one this past October, there are out of band hotfixes released.  While we don’t normally post hotfix release notifications considering this is an out of band release I wanted to let you all know about it.

Microsoft Security Bulletin MS08-078 – Critical

Security Update for Internet Explorer (960714)

http://www.microsoft.com/technet/security/bulletin/MS08-078.mspx

Executive Summary

This security update resolves a publicly disclosed vulnerability. The vulnerability could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 5.01, Internet Explorer 6, Internet Explorer 6 Service Pack 1, and Internet Explorer 7. For information about Internet Explorer 8 Beta 2, please see the section, Frequently Asked Questions (FAQ) Related to This Security Update. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses the vulnerability by modifying the way Internet Explorer validates data binding parameters and handles the error resulting in the exploitable condition. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection under the next section, Vulnerability Information.

This security update also addresses the vulnerability first described in Microsoft Security Advisory 961051.

Recommendation:

Microsoft recommends that customers apply the update immediately.

Known Issues:

None.  If you experience any issues please call 1-866-PCSAFETY.  There is no charge for this call.

Update Availability

The update has been pushed to all Windows Update servers and will appear on your WSUS server(s) as soon as you synchronize them.  You can also download the patch for your operating system at the link posted above.

For more information please tune into the following webcast!

Title: Information About Microsoft December Out-of-Band Security Bulletin
Date: Wednesday, December 17, 2008 1:00 P.M. Pacific Time (U.S. & Canada)
URL: http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032399448&Culture=en-US 

Title: Information About Microsoft December Out-of-Band Security Bulletin #2
Date: Thursday, December 18, 2008 11:00 A.M. Pacific Time (U.S. & Canada)
URL: http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032399449&Culture=en-US

TechNet Magazine is showcasing Windows Vista Tips this month in a new tip-of-the-day feature. You can stay up on all the latest Windows Vista tips here – which will be updated Monday – Friday all this month with new Windows Vista tips. You can also find the latest tips at the top of the TechNet Magazine homepage. These tips are mainly focused toward the IT Pro.

Here is the list of Windows Vista tips so far:

Know the Tools You'll Need to Deploy Windows Vista
Do you know what tools you'll need to use to prepare and deploy Windows Vista to systems throughout your environment? This is an overview of the tools you'll need, and the ones you can forget about.

Use Msconfig to Disable and Enable UAC
To determine whether UAC is causing an application compatibility problem, you can temporarily disable UAC. This explains how to do it quickly.

Delete Files Permanently with SDelete
When you delete a file, Windows removes the index for the file, but the file’s contents are still on the disk until the data has been overwritten by another file. Learn how to delete files permanently so attackers can't recover this data.

New Command-Line Switches for Sc.exe
On Windows Vista, the sc.exe command has been enhanced with new command-line switches. This looks at those new command-line switches.

Create an Ad Hoc Wireless Network
If you want to share information stored on your computer with other nearby computers, you can set up an ad hoc wireless network.

Troubleshoot Slow Start Ups with Windows Boot Performance Diagnostics
Find out how you can use Windows Boot Performance Diagnostics to identify the source of startup performance problems and automatically fix issues.

High Availability Printing with the Print Management Console
When a server goes down, you can use the Windows Vista Print Management console to quickly move print queues and keep print jobs moving smoothly.

Best Practices for File Sharing in a Workgroup Environment
Want to implement file sharing for Windows Vista clients in a workgroup environment? Be sure to keep these best practices in mind.

Best Practices for File Sharing in a Domain Environment
If you plan on implementing file sharing for Windows Vista clients in a domain environment, keep these best practices in mind.

Track and Analyze System Stability and Reliability with RACAgent
Curious about system reliability? Windows Vista is already gathering this data by default. This explains how to view that data.

Troubleshoot Group Policy with GPLogView
Learn how you can use this command-line tool to perform Group Policy–related troubleshooting.

Manage Volume Shadow Copy Service from the Vssadmin Command-Line
Check out the commands you can use to manage Volume Shadow Copy service from a command-line tool.

Remove Unwanted Toolbars and Fix Settings in Internet Explorer
Problematic add-ons. Changed browser settings. A new homepage. Find out how you can troubleshoot and fix persistent, unwanted changes.

If you’ve got your own Windows Vista tips – please share them below!

3 new Plug-ins for Windows Live Writer were recently release that I think bloggers who live and breath in Windows Live Writer (such as myself) will appreciate. These plug-ins were created by the awesome Windows Live Writer Team here at Microsoft.

DiggThis – Add a “DiggThis” badge to your blog posts so your readers can quickly “digg” your blog posts. The plug-in offers several different “styles” of badges to choose from, as well as alignment options for where its placed on your blog. Download the plug-in here.

Twitter Notify: This plug-in will automatically “tweet” the title and link to your blog to your Twitter account when you publish a blog post. Download the plug-in here.

Flickr Upload: When you insert an inline image in a blog post in Windows Live Writer it also uploads that image to Flickr you when publish your post. Download the plug-in here.

You can download the latest version of Windows Live Writer in the new Windows Live Essentials suite today at download.live.com. Some of the new features include:

• Insert and upload Windows Live photo albums
• Insert and publish video to YouTube
• Server-side tagging (support coming soon to WordPress.com and BlogEngine.NET)
• Improved blog account setup

And there is more! You can read about what’s new in the latest Windows Live Writer release via the Windows Live Writer Team Blog.

Windows Live Writer is a must-have tool for bloggers.

Description of Trojan.generic and consequences of its residing on your PC

Trojans are illegitimate tools used by many applications to promote themselves. Trojan.generic (Generic Trojan) is a model of trojan popular in the year of 2008.  Its main predestination is facilitation of fake security programs sales. However, this function is attached to trojans, also to the Trojan.generic in particular, only after their trial life while hackers are examining whether their creation is small enough and can act freely at infected machines etc. During this trial period trojan is also performing functions of destabilizing infected system and establishing connection to remote computer to let hackers manage infected machine from there. These options remain when the trojan is commercialized, i.e. involved into promotion of malware. In any case, remove Trojan.generic at the earliest opportunity to guarantee your system and data safety and to stave off the danger of malware introduction. Click here  and start free scan now to detect this and other trojans and viruses at your PC for free and thus you will launch Trojan.generic removal.

Trojan.generic Technical Details

• Full name: Trojan.generic, Generic.Trojan, Generic trojan
• Version: 2009
• Type: Trojan horse, adware
• Origin: Russian Federation

Signs of being infected with Trojan.generic:

It may be complicated to establish whether infected with Trojan.generic or any other kind of trojan. Posting the list of rogue applications which Trojan.generic supports in their trialware installation would require a space that exceeds in times space of this post, for instance. In case of nearly every infection with malware trial  Trojan.generic may be accused in its facilitation. Therefore, if any malware has been installed ever at your PC, just spend some time to ensure whether it had been Trojan.generic that caused the infection or another program or it was a manual installation. Click here for starting free scan to make sure you are free of trojans or nevertheless infected and remove Trojan.generic.
Trojan.generic, in addition to downloading malicious and fake security programs, may gain access to your private data and establish a connection to remote computers, though such direct trickery is known to be extremely unpopular for this type of trojan.horse. If your Internet connection seems to be ill and you have observed any data replacement or deletion, there is the option of trojan’s interference.

Automatic Removal of Trojan.generic from your PC:

Even in case of slightest hint at trojan presence, it is expedient to start free scan with Trojan.generic removal tool. Follow the link below to start free scan and remove Trojan.generic.

Download Trojan.generic Removal Tool

Manual Removal of Trojan.generic:

The Trojan.generic removal guidelines are better to be printed out, since any program, especially web browser, but also text editors like MS Word is to be inactive while Trojan.generic removal in progress. It would be also wise to reboot Windows in safe mode before remove Trojan.generic manually.
Tip: follow the link above and install free copy of Trojan.generic removal tool to check that no other rogues threaten your computer safety and stability after Trojan.generic deletion.

Remove Trojan.generic files and dll’s

f83nc840.exe
hgGvtQgg.dll
qrqgdiekamettfd.dll
grfxbanoatl.dll
qmggmypvafsxsej.dll
mntutilapp.dll
xxx3981.exe
grfxbanomvt.dll
ddcAPhHa.dll
urqrsppq.dll
jkkJcDWm.dll
nnnkkLET.dll
hedejcpi.exe
GetPack23.exe
qqshel.exe
soni.exe
611[1].exe
ias.dll
S3Disply.exe
A9installer_880293[1].exe
A9installer_880799[1].exe
wiadss.exe
xcodec.205.exe
~tmpb.exe
~tmpa.exe
procgdjk32.exe
oleaccrc.exe
nsk8.dll
49[1].exe
Media_Codec_193_Install[1].exe
file.exe
tes1.exe
r5al1ibu.exe
qnflkotm.dll
xxx2234.exe
xxx1303.exe
ssqNFWQj.dll
ssqQkIXR.dll
mwb27070.dll
pubhva.dll
qoMdCsTJ.dll
byXOGyYR.dll
nukjfgwz.dll
156672
921
859
16759
17650
4096
izagpocfled.dll
awtrQhhF.dll
mlJYRlki.dll
wvUkHYqo.dll
yjcugubkjtapxux.dll
mspcexp.dll
AntiEng.dll
ccaefsfwldr.dll
td3g6U42.exe
Setup_v.2.242[1].exe
video8888.mpeg.exe
xxx619.exe
xxx3626.exe
wmcodec_update.exe
update.1.014[1].exe
algg.exe
rqricule.dll
dbcom.dll
smartweb.dll
grfxbanoxbw.dll
rQHaxuSm.dll
alrsvcb.dll
nnnOeFYr.dll
ufyhym.dll
nnnOfDuV.dll
avtapit.dll
batomune.dll
ddcDtSkH.dll
opnmKEvU.dll
mebokewe.dll
opNEUllK.dll
dqrwdqfo.exe
ifaladul.exe
tyhgjezc.exe
video234.cfg.exe
vTlIxyYo.dll
vortsgbqxvn.dll
jcdzyvgqayjrv.dll
hwafoktquzhiun.dll
RavNT.exe
lphcg05j0el87.exe
Facegame.exe
GetModule23.exe
lphcatlj0e78a.exe
.ttC.tmp.exe
temp.dll
BurstWriting.dll
834668.dll
_addon.exe
setup[1].exe
788877.dll
vezurejo.dll
ququ.dll
iryk.dll
l3r1t1j4s1×7.exe
obicej.exe
Spool.exe
scui.cpl
crypts.dll
ws23[1].exe
pajuwojo.dll
hapowoko.dll
VisualTool-2.dll
prpywohnovkt.dll
lntqjqmkkpi.dll
hgGvwxwV.dll
lphc9msj0ettb.exe
rpeccofjeyuj.dll
478tVoN0.exe
518963.dll
pqmy.exe
fans.exe
ThunderAdvise.dll
setup18[1].exe
swchost.exe
ntdll64.dll
1168719977.exe
inst_kz[1].exe
iefil.dll
ieflt.dll
woswelc.dll
Update.dll
63jlp160.exe
comsys.dll
oherwvcf.exe
scan[1].exe
1551735737.exe
install[1].exe
setup86.exe
ffx14[1].exe
~ninstall.exe
mopona.dll
ms_tcp.dll
setup1075.exe
setup_110084_3_[1].exe
tkfenudw.exe
d.exe
e.exe
b.exe
video110.cfg.exe
xrdwbfgn.dll
zs880000[1].exe
YUR48.exe
YUR47.exe
YUR46.exe
YUR45.exe
irpydf.dll
rqrhyayq.dll
vtUOeCss.dll
jhtagc.dll
opnopMgF.dll
qoMcbaWo.dll
moviecodec[1].exe
bhoiesf.dll
bhoiesurf.dll
1102917817.exe
ccnd[1].exe
CbE
cfgmntapi.dll
fg[1].exe
521632863.exe
winsystem[1].dll
ieupdates.exe
inst2.exe
miniDll.dll
iv.exe
nsgDC31.dll
geBstuUO.dll
geBtUnOH.dll
grfxbanomok.dll
grfxbanoens.dll
mwb34530.dll
py2tr1hu.exe
__c003d499.dat
hgcheck.exe
yayxUoMf.dll
aetlsrknrfk.dll
urqRKCVn.dll
xxx5366.exe
gcjnrv7k.exe
__c0053724.dat
vb45cp1w.exe
winhost.exe
nnngfg.exe
vtUllmli.dll
ddcAppOH.dll
jkkICuVn.dll
nokpzf.dll
kbuukadd.dll
rsdgbtkqxwb.dll
rsdgbtkqbsa.dll
rsdgbtkqoft.dll
statvolume.dll
bobnsvld.dll
pfigywsg.exe
jpwnw64p.exe
YURB155.exe
YURB329.exe
YURB6B2.exe
YURB912.exe
srsngpar.exe
awtsTKaY.dll
bxqvmgo.dll
byXPHwWn.dll
efcBrQHW.dll
geBtrsrS.dll
ssqPfcbY.dll
izypow.dll
apluiapi.dll
c0065AC3.mat
jkkJyVLc.dll
khfFYPIa.dll
hgGyyaxX.dll
js783hffgf.dll
efcARkLF.dll
xadlalnvkihg.dll
sgbezl.dll
ddcCSIxy.dll
tuvSmmjG.dll
vanabesa.dll
admact.dll
80_56.exe
1184449577.exe
psyj720311[1].exe
setupapi.dll
KB908941.exe
KB908873[1].exe
sv.exe
spdot[1].exe
loifsa.dll
load[2].exe
nnnnNGVp.dll
essedqfvoxagxp.dll
ljJCrOhi.dll
cbXOEtTn.dll
hgGayYsp.dll
xbojls.dll
__c002020E.dat
1gr31su7.exe
xya6ew8e.exe
winlogun.exe
winlogin.exe
wvUoPihI.dll
qxphtb.dll
khfFUOij.dll
jsne87fidgf.dll
xxyvsRLB.dll
wsc32x.exe
ezyrlfodop.dll
msupdate.exe
rtp7ys2r.exe
psyj980911[1].exe
1171144958.exe
asdfghjkl[1].exe
FreeApp[1].exe
CGMY.exe
ws28450.dll
mws28450.dll
x52.exe
jpwnw64k.exe
jkkJbxWN.dll
geBuSIbx.dll
awtsRkjG.dll
awtrRLcy.dll
bpbcffinvdsw.dll
ddcBqqOG.dll
nnnlmMfc.dll
ddcDvvuU.dll
twqjyuzdyqm.dll
ssqPhFUK.dll
12acnli4.exe
rijukavi.dll
mlJBQIyv.dll
ddcBUlLD.dll
urqQhGVN.dll
rqRHaXOf.dll
ahvgnd.dll
khfCrOii.dll
mujuluro.dll
cdosy.dll
jarugimo.dll
xxyyaAPG.dll
iifdcYsr.dll
nfavxwdbktx.dll
xxx3670.exe
~tmpd.exe
7jv5vjhh.exe
zasakika.dll
nawidiga.dll
juwinamu.dll
__c002AE10.dat
rtosemvc.dll
xvuig7um.exe
hwrrvpak.dll
ebcypnd.exe
gajukilu.dll
sdetcs.dll
reforola.dll
awtsQIca.dll
xytpla.dll
zewobihu.dll
tehayela.dll
kikavezo.dll
gukehere.dll
11311[1].exe
1194018419.exe
psyj871211[1].exe
setup_377_3777_[1].exe
winemberPM.exe
Sony_Section_Update.exe
Ati_Desktop_Update.exe
Google_Section_Update.exe
A9installer_77075303[1].exe
FreeCleaner.exe
c_hext.dll
nsz37.dll
47[1].exe
msansspc.dll
25[1].exe
load[1].exe
vwzpfmtbkkb.exe
48[1].exe
46[1].exe
37[1].exe
cont_mxlivemedia-remove.exe
yiklrfqsko.dll
S87ekhV.exe
jjwnw64o.exe
byXQKbxV.dll
khfDwvTk.dll
nnnoNdbx.dll
cbXpOGXr.dll
jkkKbBRJ.dll
wvUoMcyA.dll
yaywxxvw.dll
ncntkkdm.exe
nemudodi.dll
ljJYOhIC.dll
dijineho.dll
xxx4218.exe
hibopiro.dll
towoyila.dll
KB908646.exe
KB908602[1].exe
ybuqixofe.dll
puxerojeja.exe
xrg2.exe
xrg1.exe
captcha5.dll
itunesu.exe
itunes.exe
adsmchkc.dll
HighKey1.exe
hgGxxvwt.dll
ljJCrRjI.dll
qoMETmmL.dll
porigeda.dll
iifeDsts.dll
xxyaabcC.dll
yayXomjJ.dll
khfGvstS.dll
kahijaja.dll
rahdjx.dll
fccdbBrQ.dll
fomegozu.dll
tibipifa.dll
nogayeda.dll
letotiva.dll
jonutunu.dll
pumogepe.dll
byXQKeEV.dll
nisinupo.dll
opnmJCsT.dll
geBrssRL.dll
cbXOIXoM.dll
jokofumo.dll
memowuga.dll
wupuyera.dll
nihovoja.dll
jujutoji.dll
nifasaki.dll
bolivar27.exe
che6.exe
mws97720.dll
limeruyi.dll
zomibole.dll
kajorila.dll
bqxfsoufbmwjyxo.dll
epsmdvhhapouiarh.dll
kujonage.dll
dahihiwi.dll
ssqRJaAr.dll
byXOffGA.dll
efcASmKd.dll
ltfqzl.dll
cbXOIxwV.dll
buybxm.dll
jpwnw64j.exe
mcntqkdm.exe
zayapilo.dll
btknrm.dll
thkqcvqa.dll
disowowu.dll
hunitenu.dll
uesiuqcr.exe
gcomd32.dll
nsi9.dll
wuholove.dll
turazapu.dll
lujorosu.dll
gosagure.dll
efcBsRlJ.dll
sgakhyfgqbd.dll
omjbpehpintrmfxx.dll
byXRihIb.dll
prcxze.dll
bwcmqpknuthopkbf.dll
kedisuzo.dll
kelewaba.dll
svlpqy.dll
wbxdpgfelor.dll
ssqNDuVm.dll
toteduba.dll
gigazayu.dll
gewiluje.dll
yijokuwu.dll
zuzogomi.dll
tusihivi.dll
tifiganu.dll
bamonipo.dll
peyumupo.dll
wehebopa.dll
vehuyafa.dll
nufifini.dll
vejopine.dll
zurokawe.dll
huwuzavo.dll
jesonowe.dll
nivunaso.dll
pumotozi.dll
fuyayeka.dll
rujudagu.dll
leheziti.dll
zotemiso.dll
vavosiwo.dll
fivipute.dll
fayebuzu.dll
derinade.dll
vizalodu.dll
bimuvoku.dll
fotowuta.dll
rerurepo.dll
kidohili.dll
nisoboli.dll
befuluzi.dll
fatemoko.dll
sebiniha.dll
bizikono.dll
lewiyidi.dll
yohujoku.dll
riturifa.dll
lqwxfg.dll
byXQihed.dll
xxyxYsTn.dll
mws37678.dll
uhmmwiqeaf.dll
ruyopaku.dll
gadcom.exe
msvc32.exe
senozama.dll
hajutuki.dll
nozuzito.dll
labesina.dll
babetafu.dll
vjubszwusol.dll
rxuduehwrbw.dll
nukizani.dll
rswnw64p.exe
iesvcmon.exe
khfGyayv.dll
cbXQiHWQ.dll
rqRHywtu.dll
yayaArpM.dll
amfscjashf.dll
nnnlIXnl.dll
pmnkJyVO.dll
sbsHOHo.dll
scntssdl.exe
tempo-239.tmp
5689887B.exe
Holelog.exe
juduwuho.dll
winfg77.dll
hgGxXpoo.dll
efcDwuRj.dll
wvUmnmLb.dll
cbXQHbxV.dll
urqQhffE.dll
nse216C.dll
cmuti.dll
javinete.dll
1[2].exe
A9installertest_77025304[1].exe
1[1].exe
installer.exe
error.exe
digeste.dll
winNmHNNoZHatkjc.exe
LiteVideocodecVer[1].4.exe
many_files
shell31.dll
secsqqo.exe
yekadogo.dll
nisimose.dll
wumomara.dll
mlJyWMgg.dll
awttTJYs.dll
fidebipi.dll
jeebszhucaamuwiki.dll
khffcASj.dll
zuhuteri.dll
kunovepe.dll
jevasowa.dll
pozayeda.dll
verazemi.dll
judopuje.dll
butabefu.dll
hsef73uhef.dll
prxsmr.dll
ddr7xm.dll
ws.dll
kwpm.dll
GetModule30.exe
nsg9.dll
achzkfndlfwgp.dll
mudagisi.dll
flmd.dll
gedenihe.dll
qoMCSIbc.dll
teyadobo.dll
axvitu.dll
urqpMfEx.dll
zigulavo.dll
vhkmgqrcigowgsuq.dll
rqRHbYoO.dll
jinanujo.dll
fccDVPgF.dll
nukijafu.dll
sutefuhi.dll
penosika.dll
mabubula.dll
gajapuda.dll
keselawe.dll
sitekuzu.dll
misoselo.dll
ginuzefa.dll
vuseyiju.dll
bijotozu.dll
higesila.dll
wanisupa.dll
bisomasu.dll
qxpnimeznbrf.dll
nssC4.dll
ljvufrwphagzi.dll
vpuebismbmjrutl.dll
ddcCSMFy.dll
ssqPjJAP.dll
wobupobu.dll
modigege.dll
moriwami.dll
515.tmp
reveligi.dll
hgGyvwWQ.dll
vupeteho.dll
bimewefi.dll
ltaoourknmgbkdez.dll
tiyuguwo.dll
__c0011025.dat
__c0015AA5.dat
__c001FFC5.dat
sabafiru.dll
kemaniwu.dll
vohumelu.dll
dolivowa.dll
vunogenu.dll
zurorala.dll
umaxofip.dll
bhukafazeqe.dll
_A00F1D7FE9.exe
_A00F2B3958.exe
herugife.dll
mlJCVpOh.dll
yrfplyuanstskwzul.dll
rejemufa.dll
bimujofo.dll
holiditu.dll
mlJAqqPH.dll
ssqrsTJd.dll
samadehi.dll
byXQJCTJ.dll
urqrrSKe.dll
zevehahu.dll
spria.dll
nagomone.dll
feyisebo.dll
fiyobubi.dll
fccyaYOe.dll
nuegjbip.dll
setup_377_6777_.exe
GetPack26.exe
537046669.exe
svchosts.exe
sorudebu.dll
jefuboya.dll
fafeniwo.dll
jevegele.dll
wvUllkli.dll
opnnKbYP.dll
efccyvVP.dll
rqRLfeFX.dll
duzileru.dll
opnlIxYO.dll
mlJCULFw.dll
iifdaayW.dll
zoguziya.dll
khmxqypt.dll
ddcAtspN.dll
sajekeye.dll
winqcgww.exe
najj.exe
1014[1].exe
orbqjnym.dll
befukaba.dll
geyoyuze.dll
daholose.dll
vonomona.dll
siruboma.dll
hetuvigu.dll
lomitete.dll
zoweduda.dll
mibewoja.dll
buvoyaki.dll
ginapede.dll
fipuyuko.dll
zohewigu.dll
feresefa.dll
pananini.dll
guzapamu.dll
efcywwvS.dll
diborapa.dll
hetuyevo.dll
tagusoka.dll
sudinasu.dll
wazafevu.dll
efcAPjIY.dll
awtuttQk.dll
tetupaha.dll
mulirowo.dll
siwehade.dll
afpfrwqbovwh.dll
awtrOiJd.dll
lakofara.dll
hezariza.dll
gibijayu.dll
soyozisu.dll
juribipa.dll
winbf77.dll
license safe.exe
che07.exe

Unregister Trojan.generic registry values:

Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D3017FF-1F16-440F-B7D0-B974D059059A}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bef8a78e-0bda-44c6-8b4f-1573516b9bd2}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C5E3D19-609E-40B6-9CFE-60F0C1632E51}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D95A625D-A0FC-4729-A626-B68642946481}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{79D3CAA1-04FB-42C2-9D9B-32390A0684C3}
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\nnngfg
Microsoft\Windows\CurrentVersion\Run\WinHosts
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e491027d-3417-4fa7-859d-ae0884121b81}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cc4311c5-3430-4376-b9b5-a11c627c3f5a}
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\hgcheck
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7562638c-1b39-4055-87d8-a60cd6319401}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{98EB5117-E2DA-40DD-A824-F7448A5CAB0D}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9a995a4e-b47a-4114-8fea-e4e77b28d1f6}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5DB3D84E-A32F-4EEE-9018-37AEFB9A43C0}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3C3D6A39-B167-4506-A377-E262402A29F5}
Microsoft\Windows\CurrentVersion\Explo
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF404C91-9C97-4533-B1C7-C1B8D37C2A7E}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ff186880-f0a1-4ce3-b7fc-f68a8c25a8ca}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a12748ac-0772-41c9-8043-d7abe90100be}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA629010-AD80-8B55-0E57-D73325CBAAF0}

Trojan.generic Remover with free scan