Remove LNK:FakeFolder-B [Trj] (FakeFolder Trojan)

LNK:FakeFolder-B [Trj] Outlines

LNK:FakeFolder-B [Trj] has been recently found to spread via portable devices. Once an affected device is connected to a machine, .lnk extension will be caught to be added to all folders. It had also been found that the files and data copied from a machine were gone when they were about to be pasted onto another machine; and the only stuff that showed up were loads of .tmp files. Though the FakeFolder Trojan can be detected and quarantined by installed anti-virus program, the files stay affected on hard drives. In other word, LNK:FakeFolder-B [Trj] has not been removed completely.

As its name suggests, LNK:FakeFolder-B [Trj] attackes shortcut vulnerability. And once the FakeFolder Trojan settles down on a machine, it would generate items and documents that appear to be normal, awaiting unwitting clicks to execute its vicious codes and payloads:

How to Remove: Trojan:DOS/Rovnix.D Invasion and Reappearance

Reappearing Trojan:DOS/Rovnix.D 

“Microsoft Security Essentials keeps picking up a Virus:DOS/Rovnix.D, telling me to restart the computer to complete clean, as soon as I reboot the computer the same virus appears as soon as I scan again. It either says the virus cannot be found or there is an error encountered while taking an action with it (e.g quarantine, remove, clean). Often now and again I also pick up a PWS:Win32/Zbot.gen!AP as well which seems to be removed, but after another scan it appears quite frequently.” – Quote

What Are The Dangers Behind Trojan:DOS/Rovnix.D Reappearance?

“For the past couple of weeks my computer has been completely crashing randomly, showing a blue screen. Not only does my computer crash, but my google chrome crashes constantly. Some times its so bad i can't even get on because it'll crash three seconds after opening a tab. I have microsoft security essentials on my computer. After running a quick scan (I'm unable to run a full scan because the computer always crashes before it has time to be completed), it told me that it detected " Trojan:DOS/Rovnix.D and that the alert level is severe. I don't know how to get rid of this virus, and though it says I should "quarantine" it, I don’t know what that means, and the option is unavailable. “ - Quote


Definition

Attacked by Sweet-Page.com Browser Hijacker! How to Remove?

Sweet-Page.com Problems

Quote1:
“I've read something about sweet-page.com being a result of having some sort of spyware in my PC.
Besides the fact that sweet-page.com is my homepage now, and I can't rid of it, some words in texts turn into popups with ads, and my chrome extension list features stuff named "IcoValiad 5.3", "ssavvianigitoyou 2.1", "RightSurf 1.0.0" and "New Tab Search 0.5" (at least those are the ones I'm suspicious about)
Microsoft Security Essentials found nothing with Fast Scan, and Complete Scan is running right now.”


Quote2:
“I somehow acquired the "Sweetpacks" toolbar/bundle mess today and spent 3 hours trying to remove it - no luck. It takes over your Toolbar, and even blocks legitimate search answers for serious attempts to remove it. Went into "Add/Remove Programs", I can see the various things added today – DomaIQ, IE Toolbar 4.7, VAF Player, etc. Tried to "uninstall" but either they won't OR I get the ‘An unidentified program wants access to your computer Allow or Cancel’.”

All in all, sweet-page.com manages to do the following things to plague victims:

Remove PUP.Optional.FreeCause that Trigger Freecause Toolbar and Ads

PUP.Optional.FreeCause Issues

Most of the scans come out clean but few flag PUP.Optional.FreeCause. Attempts to disable Chrome plug-ins will not stop the ads (including Multiple pop up ads advertising products to buy and pop up video commercials) that come into the computer along with PUP.Optional.FreeCause. Attempts to exit out of them would sometimes open up a new window directing to a website to buy anti virus software (as a matter of fact some of the program could be rogueware). Besides, additional applications are caught in sight to occupy internal resource without authorization, freecause toolbar and srp.freecause.comfor example.

What Is PUP.Optional.FreeCause

Some consider PUP.Optional.FreeCause mistakenly as Trojan, instead, it is PUP and categorized as adware. It works just like PUP.Optional.Iminent, PUP.Optional.bProtector and PUP.Optional.Conduit that support web applications accordingly. Such PUP is created to help preload corresponding applications into the system configuration and assist in manipulating settings without being flagged by installed security utilities.

[Know How] Remove Trojan.Win32.Bublik.cfgi from Computers

Brief Introduction of Trojan.Win32.Bublik.cfgi

Trojan.Win32.Bublik.cfgi is a new detected Trojan Horse that mainly attack emails. According to the analysis report by Global PC Support Center that the Trojan is generated by a kit named   Bublik and is designed to help spread vicious codes through social engineering tools including email. Commonly, Trojan.Win32.Bublik.cfgi may:

• Lower Internet browser security.
• Disable the computer's firewall.
• Steal user and computer information.
• Allow unauthorized access and control of an affected computer.

Trojan.Win32.Bublik.cfgi Payloads

Trojan.Win32.Bublik.cfgi copies itself into multiple pieces and injects them to some pivotal sections, such as startup configuration, Database, drivers concerning security service and browser settings. Besides, Trojan.Win32.Bublik.cfgi would generate Mutex to guarantee that only one piece of copy is executing at a time and add the execution into explorer.exe. In such case, build-in security applications would encounter difficulty in tracing down the Torjan horse and remove it automatically as explorer.exe is considered to be legit and normal.