Home / Spyware Encyclopedia / Rootkit.Podnuha << Back

Recommendation to Automatically remove Rootkit.Podnuha


Our products can remove Rootkit.Podnuha and thousands of other Virus and Spyware automatically and instantly.

Rootkit.Podnuha Details


  • Category Rootkit
  • Discovered 2/20/2009 11:53:02 AM
  • Modified 9/25/2024 5:32:02 PM
  • Threat Level Critical
  • Category Description
    A Rootkit is a collection of tools (programs) that enable administrator-level (root) access to a computer or computer network. A Rootkit may consist of spyware and other programs that: monitor traffic and keystrokes; create a "backdoor" into the system for the hacker's use; alter log files; attack other machines on the network; and alter existing system tools to escape detection. They are usually hidden and difficult to clean as they ingranulate deeply within the Registry and system files.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
cdosy.dll 93184Microsoft Corporation5.1.2600.5512 (xpspcf87ee15207b19d4f698e29d100d2d5e 
BF9DFF12.EXE 125440 6.14.10.24959b0871849003f7094a79ad4b140afa34 
un42.exe 75278 2.8.0.3cc03ed1679cba10b9b3e3b2c1cbb8082 
un46.exe 75278 2.8.0.3cc03ed1679cba10b9b3e3b2c1cbb8082 
1a02669e.exe 223232 2.3.1.2fb4032655cd8fd83df83c6758f66e499 
F4D30EA8.DLL 242688 1.0.0.09391c350609adad22231d60f1c2ba882 
27a92e80.dll 91648 1.0.0.069955510d833aebf070a79511da20d0c 
B07B6E4A.DLL 91648 1.0.0.052c316f4cfe54377a383961b90590f98 
d889cdf5.dll 91648 1.0.0.03279eb6d6ae8c3d32f51ee1cc69b4ec9 
1ab6284d.exe 122368  ff44ca29aa7e0af90ebfdb3e98fb5aa5 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33899206-ce21-44c5-8361-64c334866a49}\(Default)
..\Software\Classes\Clsid\{33899206-ce21-44c5-8361-64c334866a49}\(Default)
..\System\CurrentControlSet\Services\niyzdlqq\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4812FE19-7B02-4DCA-9445-DF5DBABAF226}\(Default)
..\Software\Classes\Clsid\{4812FE19-7B02-4DCA-9445-DF5DBABAF226}\(Default)
..\System\CurrentControlSet\Services\pvzebbjw\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\{F00F0000-DCFF-9F00-F399-837C709A807C}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\{C8090000-DCFF-9F00-F399-837C709A807C}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\{680F0000-DCFF-9F00-F399-837C709A807C}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\{500B0000-DCFF-9F00-F399-837C709A807C}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware