Home / Spyware Encyclopedia / Clicker.Cibula << Back

Recommendation to Automatically remove Clicker.Cibula


Our products can remove Clicker.Cibula and thousands of other Virus and Spyware automatically and instantly.

Clicker.Cibula Details


  • Category Clicker
  • Discovered 3/13/2008 5:42:00 PM
  • Modified 7/12/2020 1:30:27 PM
  • Threat Level Medium
  • Category Description
    This family of Trojans redirects victim machines to specified websites or other Internet resources. Clickers either send the necessary commands to the browser or replace system files where standard Internet urls are stored. Clickers are used: 1. To raise the hit-count of a specific site for advertising purposes. 2. To organize a DoS attack on a specified server or site. 3. To lead the victim to an infected resource where the machine will be attacked by other malware (viruses or Trojans).

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
Trojan-Spy.Win32.Banker.bye.exe 716417  aacdd3502342eec540ec828d03b5c115 
bpkwab.exe 36864  83d4a1be83b716c22f343a074981b07d 
Trojan-Spy.Win32.Banker.ce.exe 709120  46b6ec223b2a835fccbf6b6401638da4 
bpkwab.exe 36864  1c781e8ec9319bf6443d6e46ef99763f 
Trojan-Spy.Win32.Banker.ct.dll 3072  153a0f7efcae6cf452ed30f437e2d2e9 
Trojan-Spy.Win32.Banker.cc.exe 11752  0b4d9a2aca13bd8fd4689b9656767d55 
Trojan-Spy.Win32.Banker.bw.exe 287744  01037b0ba3337bf9c1ca69cd4be3189f 
Trojan-Spy.Win32.Banker.co.exe 269824    
inst.dat 1376    
inst.dat 964    

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\ \"EXPLORER"\"%WIN.SYS32%\EXPLORER.EXE"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"TROJAN-SPY.WIN32.BANKER.CD"\"%DAS.AU.LS%\Temp\trojan-spy.win32.banker.cd.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"amsn"\"%WIN%\Config\amsn.exe"
..\Software\Classes\pk.ie.1\(Default)
..\Software\Classes\pk.ie\(Default)
..\Software\Classes\Typelib\{1e1b286c-88ff-11d3-8d96-d7acac95951a}\(Default)
..\Software\Classes\Interface\{1e1b2878-88ff-11d3-8d96-d7acac95951a}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.