Dabber Removal Tool Crack + Serial Key Updated
Dabber Removal Tool is a small but effective utility that targets the Win32.Worm.Dabber.A malware.
Presence of package.exe in "c:Documents and SettingsAll UsersStart MenuProgramsStartup", "%windir%All UsersMain menuProgramsStartUp" and "%system32%" folders and in processes list.
Download Dabber Removal Tool Crack
| Software developer |
Bitdefender LLC
|
| Grade |
4.6
867
4.6
|
| Downloads count | 6806 |
| File size | < 1 MB |
| Systems | Windows All |
Presence in start-up registry key "HKLMSoftwareMicrosoftWindowsCurrentVersionRun" of the string "sassfix" pointing to "%system32%packer.exe".
When run the worm tries to copy itself in the three folders shown above, then creates a mutex called "sas4dab" in order to avoid reinfection.
After that it tries to remove the following keys from registry:
HKCRCLSID{E6FB5E20-DE35-11CF-9C87-00AA005127ED}InProcServer32(Default)
HKLMSoftwareMicrosoftWindowsCurrentVersionRunGremlin
HKCUSoftwareMicrosoftWindowsCurrentVersionRunGremlin
HKLMSoftwareMicrosoftWindowsCurrentVersionRunTaskMon
HKCUSoftwareMicrosoftWindowsCurrentVersionRunTaskMon
HKLMSoftwareMicrosoftWindowsCurrentVersionRunVideo
HKCUSoftwareMicrosoftWindowsCurrentVersionRunavserve
HKLMSoftwareMicrosoftWindowsCurrentVersionRunavserve
HKCUSoftwareMicrosoftWindowsCurrentVersionRunavvserrve32
HKLMSoftwareMicrosoftWindowsCurrentVersionRunavvserrve32
HKCUSoftwareMicrosoftWindowsCurrentVersionRunavserve2.exe
HKLMSoftwareMicrosoftWindowsCurrentVersionRunavserve2.exe
HKCUSoftwareMicrosoftWindowsCurrentVersionRunlsasss.exe
HKLMSoftwareMicrosoftWindowsCurrentVersionRunlsasss.exe
HKCUSoftwareMicrosoftWindowsCurrentVersionRunlsasss
HKLMSoftwareMicrosoftWindowsCurrentVersionRunlsasss
HKCUSoftwareMicrosoftWindowsCurrentVersionRunssgrate.exe
HKLMSoftwareMicrosoftWindowsCurrentVersionRunssgrate.exe
HKCUSoftwareMicrosoftWindowsCurrentVersionRunssgrate
HKLMSoftwareMicrosoftWindowsCurrentVersionRunssgrate
HKCUSoftwareMicrosoftWindowsCurrentVersionRundrvsys.exe
HKLMSoftwareMicrosoftWindowsCurrentVersionRundrvsys.exe
HKCUSoftwareMicrosoftWindowsCurrentVersionRundrvsys
HKLMSoftwareMicrosoftWindowsCurrentVersionRundrvsys
HKCUSoftwareMicrosoftWindowsCurrentVersionRunDrvddll_exe
HKLMSoftwareMicrosoftWindowsCurrentVersionRunDrvddll_exe
HKCUSoftwareMicrosoftWindowsCurrentVersionRunDrvddll.exe
HKLMSoftwareMicrosoftWindowsCurrentVersionRunDrvddll.exe
and all the following strings:
Microsoft Update
windows
Windows Drive Compatibility
Generic Host Service
skynetave.exe
navapsrc.exe
lsasss.exe
drvddll.exe
ssgrate.exe
WinMsrv32
soundcontrl
System Updater Service
BagleAV
MapiDrv
SkynetRevenge
TempCom
Video Process
Window
from the following keys:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
HKCU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionRun
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRunServices