Home / Spyware Encyclopedia / Clicker.Cibula << Back

Recommendation to Automatically remove Clicker.Cibula


Our products can remove Clicker.Cibula and thousands of other Virus and Spyware automatically and instantly.

Clicker.Cibula Details


  • Category Clicker
  • Discovered 3/13/2008 5:42:00 PM
  • Modified 7/12/2020 1:30:27 PM
  • Threat Level Medium
  • Category Description
    This family of Trojans redirects victim machines to specified websites or other Internet resources. Clickers either send the necessary commands to the browser or replace system files where standard Internet urls are stored. Clickers are used: 1. To raise the hit-count of a specific site for advertising purposes. 2. To organize a DoS attack on a specified server or site. 3. To lead the victim to an infected resource where the machine will be attacked by other malware (viruses or Trojans).

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
bpkcert.exe 20480 1.0.0.1f135d64fb1b21b00f9c35114c7872efe 
bpkwab.exe 36864  83d4a1be83b716c22f343a074981b07d 
Trojan-Spy.Win32.Banker.c.dll 139264  4a969ad807243b96a0c6b30122b05093 
Trojan-Spy.Win32.Banker.ce.exe 709120  46b6ec223b2a835fccbf6b6401638da4 
Trojan-Spy.Win32.Banker.ct.dll 3072  153a0f7efcae6cf452ed30f437e2d2e9 
Trojan-Spy.Win32.Banker.cc.exe 11752  0b4d9a2aca13bd8fd4689b9656767d55 
Trojan-Spy.Win32.Banker.bw.exe 287744  01037b0ba3337bf9c1ca69cd4be3189f 
inst.dat 1376    
inst.dat 964    
inst.dat 996    

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\ \"EXPLORER"\"%WIN.SYS32%\EXPLORER.EXE"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"TROJAN-SPY.WIN32.BANKER.CD"\"%DAS.AU.LS%\Temp\trojan-spy.win32.banker.cd.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"amsn"\"%WIN%\Config\amsn.exe"
..\Software\Classes\pk.ie.1\(Default)
..\Software\Classes\pk.ie\(Default)
..\Software\Classes\Typelib\{1e1b286c-88ff-11d3-8d96-d7acac95951a}\(Default)
..\Software\Classes\Interface\{1e1b2878-88ff-11d3-8d96-d7acac95951a}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.