Spyware Removal

Remove Fgbot


What is Fgbot and removal instructions

Fgbot is a trojan that contacts a predetermined web server in order to receive specific instructions that describe parasite's behavior. The threat can silently download from the Internet, install and run malicious software, block access to certain web sites or redirect the web browser to undesirable resources. Fgbot automatically runs on every Windows startup.

Fgbot manual removal:

Kill processes:
rufg.exe, upfg.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\[X]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\fgsrv
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\fgrunfrom
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\fgcomment
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\fgid
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\fgnoinstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\fgversion
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\sizeofformlogfile
HKEY_CLASSES_ROOT\CLSID\[random name]
Delete files:
rufg.exe, upfg.exe, dotcfg.dll, fsrv.dll, fgsrv2.dll, phffg.dll, ulffg.dll
Misc:
[X] is a space character.

All Fgbot files can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

     
Related Spyware Removal

 

 

Previous: Fichv.897   Next: Feuer
| 1-9 | O | P | Q | R | S | T | U | V | W | X | Y | N | M | L | A | B | C | D | E | F | G | H | I | J | K | Z
Copyright © SpywareDot 2004-2009| Spyware Removal.  All rights reserved.