Troj/AdClick-BC

Veuillez suivre les instructions de suppression des chevaux de Troie.

Troj/AdClick-BC est un cheval de Troie pour la plate-forme Windows.

Troj/AdClick-BC inclut des fonctionnalités d'accès à Internet et de communication avec un serveur distant via HTTP.

Troj/AdClick-BC affiche les messages suivants afin de tromper l'utilisateur et de lui faire télécharger des fichiers depuis des emplacements prédéfinis :

'Critical System Error! Please read this message carefully. Your PC is infected by spyware. You must improve your PC security and system perfomance by deleting spyware from your operating system. Attention! Failure to delete spyware from your PC can reslut in damage of system resources and your personal files corruption. Use special software to remove spyware and adware from your computer. Click "OK" to get all available Anti Spyware software.'

'System Warning! 4 Errors found: -Your computer has slowed down -Your Internet connection speed has decreased -You get popups and annoying ads when you're online or sometimes even offline -Your default home page has been changed to the one you didn't ask for Click "OK" to download spyware scan and delete infected files.'

'System perfomance notice. Perfomance of your system is extremely low. The main reason is adware popups. To improve perfomance of your PC you have to remove or block popup's source from operating system. Please, use special software to remove adware materials from your computer. Click "OK" to get full list of available "PopUp Blocking" software.'

'Critical System Error! Please read this message carefully. System detected virus activities. They may cause critical system failure. Please,use antivirus software to clean and protect your system from viruses and parasite programs. Click "OK" to get all available software.'

'System Alert: Spyware Detected System has detected 4 active spyware applications that may cause frequent application crashes, instability or low computer perfomance. Click the icon to remove spyware.'

'System Alert: Popups Your PC is infected with popups adware (OHPE ver 4.12_23). Click the icon to get all available anti popup software.'

'Security Alert! 'System encountered spyware that gathers your private information without your consent. This information includes passwords, credit card details and other private data.

'Urgent System Message: Virus! Your computer was infected with last version of internet worm (iworm_attck_v122.02a). It is highly recommended that you install antivirus software. Click the icon for more information.'

'System Alert: Adware & Spyware Your computer has slowed down. Your Internet connection speed has decreased. You receive more spam emails than ever. Use Spyware scan to find out the reason.'

Troj/AdClick-BC se trouve généralement sous le nom de fichier msole32.exe.

Pour perturber la sécurité sur Internet, l'entrée de registre suivante est définie :

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 CurrentLevel 11

L'entrée de registre suivante est définie :

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run winlogon.exe msole32.exe