Entry created by this Malware:
Windows startup:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Ttool = “%Windows%\9129837.exe”
Windows NT, 2000, XP, and Server 2003
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\hide_evr2
ImagePath = “%Windows%\HIDE_EVR2.SYS”
DisplayName = “!!!!”
It will connect to this website
http://81.95.{BLOCKED}.107/cgi-bin/options.cgi
NOTE:Scan your computer every week
Tag:BKDR_AGENT.FBB
Loading ...
SmallNews(9hts)
2daydeals 2daydeals UK Store 3G Mobile Ad Share Blog Amazon Books Shop (UK) Amazon France DVD SERIES Amazon(USA) Widget Amazon.co.UK Widget Amazon.co.UK Widget Bigbrother NP Books @ 2daydeals Buy Zune UK Camera Cheap DVD 50% OFF Cheap Ipod Store Cheap Mp3 Player Cheap Video Comedy DVD Store USA Comedy DVD UK Coupon Codes Create Short URL FREE DVD Store UK Forex Free 2GB Email Free Blog Free Blog Hosting Free Stuff Free Stuff AUS Free Stuff UK Freebies Blog Home to Success Mac Store USA Mauriplay Net Mauriplay UK MP3 Store UK My Kitchen & Housewares Store NettingNews Nettingnews (old) Nettingnews Aggregator Newsvine Nowzon compare Nowzon forum Nowzon Shop Nowzon store UK Old Small News Site PageFlakes Short URL Small News Widget SmallNews (Wp) Text Link Ads Web Proxy Windows Vista Wireless @ 2daydeals
52 queries. 6.182 seconds.We Bring You all the News in Short Words.
