Dr.Web Anti-virus - Innovative IT-Security Solutions
Global Sites
Russia (Headquarter)
Estonia Finland France Germany Greece Hungary Italy Iran Israel Japan Kazakhstan Lithuania Poland Portugal Slovakia Spain Taiwan Ukraine


Latest Released Update : (HKT) 2014-04-17 14:31
Virus Database Total Records : 5120025
Home About Dr.Web Products Downloads Purchase FAQ Contact Us  
Dr.Web Anti-virus Video Channel  

‹ How To Remove Virus "Trojan.AVKill.28849" ›

Technical Information
Virus Name : Trojan.AVKill.28849
Named By : Dr.Web

Malicious functions:
Executes the following:
  • <SYSTEM32>\regsvr32.exe /s "%PROGRAM_FILES%\Social Privacy\sp.dll"
Terminates or attempts to terminate
the following user processes:
  • firefox.exe
  • chrome.exe
Modifies file system :
Creates the following files:
  • %PROGRAM_FILES%\Social Privacy\Uninstall.exe
  • %PROGRAM_FILES%\Social Privacy\FF\chrome\content\overlay.xul
  • %PROGRAM_FILES%\Social Privacy\FF\chrome\content\main.js
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\user.js
  • %PROGRAM_FILES%\Social Privacy\r.log
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\postinstall[1].php
  • %TEMP%\nsm2.tmp\inetc.dll
  • %PROGRAM_FILES%\Social Privacy\code.zip
  • %TEMP%\nsm2.tmp\Processes.dll
  • %TEMP%\nsm2.tmp\System.dll
  • %PROGRAM_FILES%\Social Privacy\sp.dll
  • %PROGRAM_FILES%\Social Privacy\FF\chrome\content\icon.png
  • %PROGRAM_FILES%\Social Privacy\FF\install.rdf
  • %PROGRAM_FILES%\Social Privacy\FF\chrome.manifest
Deletes the following files:
  • %TEMP%\nsm2.tmp\System.dll
  • %TEMP%\nsm2.tmp\Processes.dll
  • %TEMP%\nsm2.tmp\inetc.dll
Network activity:
Connects to:
  • 'up#####.socialprivacy.org':80
TCP:
HTTP GET requests:
  • up#####.socialprivacy.org/native/postinstall.php?sr###################################
UDP:
  • DNS ASK up#####.socialprivacy.org
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''
  • ClassName: '' WindowName: 'Shell_TrayWnd'
  • ClassName: 'Chrome_WidgetWin_0' WindowName: ''
Please note : some of the characters are replaced with symbols in order to prevent improper access to malwares.


Steps to remove "Trojan.AVKill.28849" automatically
  • Download Dr.Web CureIt! and save it in desktop.
  • Download Security Space Pro 7.0 (32/64-bit), save it in desktop.
  • Reboot computer to Safe Mode (press F8 before any Microsoft logo appears).
  • Double click "cureit.exe" on desktop, follow on screen instructions to scan hard disk.
    (Wait patiently, it may take 20-60 minutes to perform an express scan.)
  • After scanning is done, select all viruses found and choose "Cure".
    (If some files are not suitable to be cured, choose "Quarantine" or "Delete".)
  • When all viruses found are cured, quarantined, or deleted, reboot to Normal Mode.
  • Uninstall existing anti-virus software which cannot kill the viruses, and then reboot again.
  • Locate the setup file of Security Space Pro on desktop, double click to run it.
    (For step-by-step procedures, please refer to installation video guide.)
  • During setup, choose to obtain a demo key.
  • After first time update, the scanner will be launched again, quit the scanner at this point.
  • Complete the setup by rebooting computer.
  • When time is allowed (may need several hours), perform a full scan in Dr.Web Scanner.

Note :
  • If it is unable to start Windows due to virus infection, try Dr.Web LiveCD or Dr.Web LiveUSB instead of Dr.Web CureIt!
  • Time needed for express scan or full scan relies on many factors, such as system performance, available memory, running processes, number of drives and files, etc.

‹ Dr.Web CureIt! › Select Download Source

Dr.Web Global Servers Google Drive SkyDrive
Released :
2013-11-10 14:43
Released :
2013-08-16 03:25
Released :
2013-11-10 14:43
Download Dr.Web CureIt! from Dr.Web Global Servers Download Dr.Web CureIt! from Google Drive Download Dr.Web CureIt! from SkyDrive

‹ Dr.Web Security Space Pro › Select Download Source

Dropbox Google Drive SkyDrive
Released :
2013-02-07 16:02
Released :
2013-02-07 16:02
Released :
2013-02-07 16:02
Download Dr.Web Security Space Pro from Dropbox Download Dr.Web Security Space Pro from Google Drive Download Dr.Web Security Space Pro from SkyDrive

WINDOWS 7, VISTA, XP
MAC OS X 10.4 OR ABOVE

TOP 5 EMAIL VIRUSES (24HR)
14:31
 
Win32.HLLM.MyDoom.33808
Win32.HLLM.MyDoom.33808
 
Trojan.Fogels.2
Trojan.Fogels.2
 
Win32.HLLM.MyDoom.54464
Win32.HLLM.MyDoom.54464
 
Trojan.Siggen6.14312
Trojan.Siggen6.14312
 
Win32.HLLM.Beagle
Win32.HLLM.Beagle

TOP 5 FILE VIRUSES (24HR)
14:31
 
SCRIPT.Virus
SCRIPT.Virus
 
Trojan.InstallMonster.51
Trojan.InstallMonster.51
 
Trojan.Packed.24524
Trojan.Packed.24524
 
Adware.Spigot.9
Adware.Spigot.9
 
Adware.Downware.2095
Adware.Downware.2095

FREE ANTI-VIRUS TOOLS
  » Dr.Web CureIt!
  » Dr.Web LiveCD
  » Dr.Web LiveUSB
  » Dr.Web Light for Mac OS X
  » LinkChecker for Google Chrome
  » LinkChecker for Internet Explorer
  » LinkChecker for Mozilla Firefox
  » LinkChecker for Opera
  » LinkChecker for Safari

Member of CHKCI

|

Click to Verify Domain Originator
:: Privacy Policy Statement ::