Registry Cleaner Geeks

If your PC is also running slowly, you may be interested to look at our Regcure Review. Regcure is proven to improve the performance of your computer.

When the Trojan is executed, it creates the following file:
%System%\kernel.exe

Next, the Trojan creates the following registry entry so that it executes
whenever Windows starts:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run\"default" = "%System%\kernel.exe"

The Trojan then steals information from the compromised computer, including passwords related to the following applications:

* DynDNS
* Firefox
* FlashFXP
* Google
* IMVU
* Internet Explorer 7
* Internet Explorer 8
* MSN
* NO-IP
* Paypal
* Pidgin
* Steam
* Trillian
* Yahoo

The Trojan saves the stolen information in the following locations:

* %Temp%\keylog.dat
* %Temp%\Pass.dat

Next, it sends the stolen information to a remote location either using FTP or
in the form of an email.

The Trojan may display the following message:
Title:
Error
Message:
Run-time error ’429′

It may download a configurable file from a remote server.

The Trojan may also cause the compromised computer to crash, displaying
a Blue Screen of Death.

FREE SCAN:

Please click here for manual removal instructions.