Emsisoft Malware-Info
Name: Adware.Win32.Tlbb
Risklevel: Low Risk
Description:
This application will showing popup ads, and install trojan.
Removal instructions for Adware Tlbb:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Tlbb.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Installation: Installed through EXE
Process: ckvvmrj.dll
Screenshots:
Used folders:
- C:\Documents and Settings\[USER]\Local Settings\Temp\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\
- C:\WINDOWS\
- C:\WINDOWS\system32\
- C:\Documents and Settings\[USER]\Cookies\
- C:\Documents and Settings\[USER]\Desktop\plugin\
- C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\
- C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\
- C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009100820091009\
Used files:
- C:\WINDOWS\ckvvmrj.dll
[40960 Bytes] DLL File - C:\WINDOWS\system32\shutdown.bat
[129 Bytes] BAT File - C:\WINDOWS\system32\wg.bat
[777 Bytes] BAT File - C:\WINDOWS\system32\zl.bat
[409 Bytes] BAT File - C:\WINDOWS\system32\????.wav
[500044 Bytes] WAV File - C:\WINDOWS\system32\?????.wav
[850044 Bytes] WAV File - C:\Documents and Settings\[USER]\Cookies\index.dat
[32768 Bytes] DAT File - C:\Documents and Settings\[USER]\Cookies\virus demo@tlbb.110mb[2].txt
[333 Bytes] TXT File - C:\Documents and Settings\[USER]\Desktop\plugin\2.bmp
[61976 Bytes] BMP File - C:\Documents and Settings\[USER]\Desktop\plugin\BGKM5.dll
[16896 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Bkgnd.dll
[32768 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\BkgndColor.dll
[32768 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Color.dll
[32768 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Console.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Encrypt.dll
[36864 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\File.dll
[40960 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\FindPicture2.dll
[14336 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\GetSysInfo.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\kuang.bmp
[128 Bytes] BMP File - C:\Documents and Settings\[USER]\Desktop\plugin\Media.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Memory.dll
[32768 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Msg.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Net.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Office.dll
[32768 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Pic.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Sys.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Web.dll
[28672 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\Window.dll
[36864 Bytes] DLL File - C:\Documents and Settings\[USER]\Desktop\plugin\yao.bmp
[176 Bytes] BMP File - C:\Documents and Settings\[USER]\Desktop\plugin\??.bmp
[632 Bytes] BMP File - C:\Documents and Settings\[USER]\Desktop\plugin\?.bmp
[272 Bytes] BMP File - C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
[16384 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\index.dat
[32768 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009100820091009\index.dat
[32768 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\Temp\11.tmp
[1243 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\ad-mymacro.xml
[4000 Bytes] XML File - C:\Documents and Settings\[USER]\Local Settings\Temp\kvvmrjb.dll
[49152 Bytes] DLL File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\index.dat
[81920 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\60x60[1].gif
[2118 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\7[1].gif
[1340 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\cf[1].htm
[3372 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\go[1].htm
[846 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\img01[1].jpg
[813 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\img04[1].jpg
[168439 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\mystat[1].htm
[986 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\8[1].gif
[1413 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\ad468x60[1].htm
[1816 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\default[1].css
[5224 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\img02[1].jpg
[769 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\img06[1].jpg
[8771 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\text_cpro_bright[1].png
[748 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\9[1].gif
[1305 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\ad-mymacro7[1].htm
[628 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\ad-mymacro[1].xml
[4000 Bytes] XML File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\CAXPXZD0.htm
[5096 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\logo2[1].gif
[275 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\stat[1].htm
[0 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\0[1].gif
[1398 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\5[1].gif
[1315 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\CF[1].htm
[1759 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\cp[2].js
[4941 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\img03[1].jpg
[768 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\tlbb.110mb[1].htm
[4266 Bytes] HTM File
Additional information might be found here:
Search
at Google for
Adware Tlbb
Search at Bing for
Adware Tlbb
Search
at Yahoo for
Adware Tlbb
How can I protect myself from Adware Tlbb?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here























