Backdoor:W32/Knockex.A

[cosik_ktosik]

Backdoor:W32/Knockex.A to backdoor rozpoznawany jako:
Spyware.14597
Dropped:Spyware.14597
Trojan-Dropper:W32/Knockex.A
Trojan-Downloader:W32/Knockex.A
Gen:Variant.Kazy.17250
Backdoor:W32/Knockex.A
Trojan.Generic.KDV.171682
Rootkit:W32/Knockex.A
Trojan.Downloader.Agent.ZBU
Spyware:W32/Inet.B
Adware:W32/MyWebSearch.AG
Adware:W32/MyWebSearch.AF
Adware:W32/MyWebSearch.AH
Spyware:W32/Inet.A
Adware:W32/Zwangi.O

W celu usunięcia należy odinstalować:
* "Homepage Protection Service" - uninstaller of MYCLEARSEARCH-SETUP.EXE
* "Inet Support Services" - uninstaller of INET.EXE
* " BrowserSeek 1.0 build 171 powered by FIRST SEARCHBAR" - uninstaller of BRAND.EXE (as of this writing)

Uwaga na pliki:
OfferApp-2529.exe
%systemdir%\cssrss.exe
%systemdir%\nso12k.sys
OfferApp-2526.exe
myclearsearch-setup.exe
inet.exe
brand.exe

* %programdir%\MyClearSearch\MyClearSearchSvc.exe - Adware:W32/MyWebSearch.AF
* %programdir%\MyClearSearch\ShowMsg.exe - Adware:W32/MyWebSearch.AH
* %programdir%\MyClearSearch\uninstall.exe - uninstaller component.

* %programdir%\BrowserSeek\browserseek.dll
* %programdir%\BrowserSeek\browserseek.exe
* %programdir%\BrowserSeek\uninstall.exe

W celu pomocy w usunięciu zapraszamy do działu bezpieczeństwo tego forum.

Źródło: F-secure