Spyware Removal

Remove Agentdoc.d


What is Agentdoc.d and removal instructions

Agentdoc.d is a trojan that drops malicious files on the infected computer. Once executed, the parasite installs itself to the system along with the keylogger that logs all user keystrokes and transfers gathered data to a predetermined web site. Agentdoc.d also opens a back door providing the attacker with unauthorized access to the compromised computer. The intruder can control the infected system and access user confidential inforamation. The trojan uses an integrated rootkit to hide its files and registry entries, and therefore avoid detection. It also injects malicious code into the Internet Explorer process. Agentdoc.d runs on every Windows startup.

Agentdoc.d manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sens\Parameters\ServiceDll=%System%\kygnoggr.dll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Sens\Parameters\ServiceDll=%System%\kygnoggr.dll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Sens\Parameters\ServiceDll=%System%\kygnoggr.dll
Delete files:
kygnoggr.dll, kygnoggr.sys, kygnoggr.drv, kygnoggr.tmp
Misc:
Exact file location:
kygnoggr.sys - C:\Windows\System32\Drivers or C:\Winnt\System32\Drivers
kygnoggr.dll, kygnoggr.drv, kygnoggr.tmp - C:\Windows\System32 or C:\Winnt\System32

     
Related Spyware Removal

 

 

Previous: Agent Trojan   Next: Agentdoc.c
| 1-9 | O | P | Q | R | S | T | U | V | W | X | Y | N | M | L | A | B | C | D | E | F | G | H | I | J | K | Z
Copyright © SpywareDot 2004-2009| Spyware Removal.  All rights reserved.