win32.bagle remover
Win32/Magistr Remover
A small utility for erasing the Win32/Magistr virus more>> A small utility for erasing the Win32/Magistr virus
Win32/Magistr Remover will enable you to get rid of the virus infection. All you need to do is download the executable and run it.
You can also specify the disks (or partitions) to heal as a command parameters, e.g.: "rmmag C: D: ". If the command is used without parameters, it heals all disks (partitions) on computer.
Note:
Remover Successful running of the remover requires administrator rights. After the healing process please run the AVG Complete Test to make sure your computer is virus-free.
Win32.Bagle.AD@mm Removal Tool 1.0
Free Win32.Bagle.AD@mm Removal Tool more>>
- When run, the virus displays a fake message, stating: "Cant find a viewer associated with the file"
- Presence of the next files in %SYSTEM% folder:
loader_name.exe
loader_name.exeopen
loader_name.exeopenopen
- Presence of the next registry key or entry:
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun] "reg_key"="%SYSTEM%loader_name.exe"
where %WINDOWS% points to Windows folder (or WinNT on Windows NT based systems) %SYSTEM% points to "System" folder on Windows 9x systems and "System32" folder on WinNT systems.
- Presence of files named:
Microsoft Office 2003 Crack, Working!.exe
Microsoft Windows XP, WinXP Crack, working Keygen.exe
Microsoft Office XP working Crack, Keygen.exe
Porno, sex, oral, anal cool, awesome!!.exe
Porno Screensaver.scr
Serials.txt.exe
KAV 5.0
Kaspersky Antivirus 5.0
Porno pics arhive, xxx.exe
Windows Sourcecode update.doc.exe
Ahead Nero 7.exe
Windown Longhorn Beta Leak.exe
Opera 8 New!.exe
XXX hardcore images.exe
WinAmp 6 New!.exe
WinAmp 5 Pro Keygen Crack Update.exe
Adobe Photoshop 9 full.exe
Matrix 3 Revolution English Subtitles.exe
ACDSee 9.exe
in folders whose names contain the string "shar"
Technical description: The virus arrives via e-mail
If the attachment is in a password protected zip file, following messages can also be found in the Body:
For security reasons attached file is password protected. The password is ...
For security purposes the attached file is password protected. Password -- ...
Note: Use password ... to open archive.
Attached file is protected with the password for security reasons. Password is ...
In order to read the attach you have to use the following password: ...
Archive password: ...
Password - ...
Password: ...
Win32.Bagle.AJ@mm Free Removal tool 1.0
Win32.Bagle.AJ@mm Free Removal tool more>>
Symptoms:
The presence of the following files in %SYSDIR% folder:
Winxp.exe
Winxp.exeopen
Winxp.exeopenopen
Winxp.exeopenopenopen
Winxp.exeopenopenopenopen
The presence of the following registry key:
HKCUSoftwareMicrosoftWindowsCurrentVersionRunkey with value %SYSDIR%winxp.exe
where %SYSDIR% is a variable representing the system folder (for example: C:WINDOWSSYSTEM)
Aliases: WORM_BAGLE.AH (TREND) W32/Bagle-AI (Sophos) W32/Bagle.AG@mm (SARC)
Win32.Bagle.AL@mm free removal tool 1.0
Free removal tool for Win32.Bagle.AL@mm more>>
- Presence of file %SYSTEM%WINdirect.exe.
- Presence of file %SYSTEM%windll.exe.
- Presence of registry key HKLMSOFTWAREMicrosoftWindowsCurrentVersionRunwin_upd.exe = %SYSTEM%WINdirect.exe or
HKCUSOFTWAREMicrosoftWindowsCurrentVersionRunwin_upd.exe = %SYSTEM%WINdirect.exe.
- Presence of registry key HKCUSOFTWAREMicrosoftWindowsCurrentVersionRu1n.
Technical description:
The worm comes in the form of a small file, that drops another file ( namely WINDirect.exe) in the %SYSTEM% directory.
This file then tries to raise its privilege level and then starts a thread in which it keeps looking at all the processes and when it finds one within a list ( in order to prevent updating an AV product or the use of a firewall ) it tries to terminate it. Then it starts another thread that tries to download the main part of the massmailer from a list of addresses, each 10 hours.

Nimda remover 1
A free application to completely remove the Nimda virus, together with infected files and any virus entries in the registry. The usage is pretty strait- run it and delete any found infected files. more>>
Garbage Remover Lite 1
Garbage Remover Lite brings an intuitive, easy-to-use and quick tool for cleaning hard disk, flash card and users folders. more>>
Garbage Remover Lite 1 brings an intuitive, easy-to-use and quick tool for cleaning hard disk, flash card and users folders. No limit user filters for scan. Three modes of moving files: to Recycle Bin, to folder, from disk. Easy for use (home and work), fast, and safe.
Malware Remover 3.0
Malware Remover Software will scan your memory, registry, hard drives, and external storage devices. more>>
Malware Remover 3.0 is your indispensable assistant, which helps to scan your memory, registry, hard drives, and external storage devices. Effectively remove spyware, adware, trojans, keyloggers, home page hijackers, and malware threats.
Major Features:
- Help ensure your protection is up-to-date.
- Clean your system the easy way.
Enhancements: Version 3.0 is a bug fixing release.
<<lessLicense:Freeware
Icon Remover 1.0
This is a program made by Sotiris Vrionis. With this program you can extract icons from files and then to use them. more>>
Exif Tag Remover 1.0
Allows you to easily delete the Exif tag and other metadata tags. more>>
Space Remover 1.0
Space Remover is a small and easy-to-use application that will remove space from filenames. more>>
Space Remover will batch-remove spaces in filenames and replace them with underscores.
Space Remover could be very useful when it comes to big file lists like photo galleries or media collections.
MSN Winks Remover 1.0
Easily remove installed Winks from MSN Messenger 7. more>> The MSN Winks Remover is a tool to quickly delete all Winks installed to an MSN Messenger users account as MSN Messenger 7 does not provide an easy way to quickly remove Winks. You just enter your sign-in name to instantly delete all the Winks you installed.<<less
MSN Winks Remover - Easily remove installed Winks from MSN Messenger 7. MSN Winks Remover 1.0 - ...The MSN Winks Remover is a tool to quickly delete all Winks installed to an MSNNetBus Remover 1.0
Find and remove NetBus. more>>
I-Worm/Navidad Remover
This utility helps you to remove the Navidad worm from your PC more>> This utility helps you to remove the Navidad worm from your PC
I-Worm/Navidad Remover will enable you to easily get rid of the virus infection from your computer. All you need to do is download and run the application.
<<less
Redlof Remover 1
Redlof Remover is a program with the ability to eliminate the HTML.Redlof, a virus from your computer. more>>
Redlof Remover 1 is a program with the ability to eliminate the HTML.Redlof, a virus from your computer. The virus creates innumerable folder.htt and desktop.ini files in your computer. The virus slows down your computer terribly. Most antivirus program can only detect the virus but CANNOT remove it. Use this tool to remove the virus from your computer.
Adware Remover 3.0.0
Adware Remover is easy to use and fast, and it detects and removes an impressive variety of malware. more>>
Adware Remover 3.0.0 offers you a powerful removal and detection tool for your PC. This application can be used to detect and remove an impressive variety of malware.
Major features
- Adware Remover is easy to use and fast
- Adware Remover gives you complete coverage improving the system stability, security and performance by integrating the power from Adware Remover and Spyware Remover software into one powerful solution.