Home / Spyware Encyclopedia / Clicker.agent.buk << Back

Recommendation to Automatically remove Clicker.agent.buk


Our products can remove Clicker.agent.buk and thousands of other Virus and Spyware automatically and instantly.

Clicker.agent.buk Details


  • Category Clicker
  • Discovered 4/14/2010 1:18:08 PM
  • Modified 2/22/2019 12:31:33 PM
  • Threat Level High
  • Category Description
    This family of Trojans redirects victim machines to specified websites or other Internet resources. Clickers either send the necessary commands to the browser or replace system files where standard Internet urls are stored. Clickers are used: 1. To raise the hit-count of a specific site for advertising purposes. 2. To organize a DoS attack on a specified server or site. 3. To lead the victim to an infected resource where the machine will be attacked by other malware (viruses or Trojans).

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
qbkeeljuvbarrzo.dll 160768 2.0.2.0e25fa3e36ab873e32da59fdb1f7f7f72 
19103700931d4a63efcb832b784b30f6984e20ce3cd4fe21e499d75dbac98531d0878ede20411227dfb57a37b265c.exe 153531  80ce0e496ee5ca55cf98acbe3ca91096 
3bf6c05216e002ab3297480f5cead7a38e1d7d8ebe0bb621c92bedeeb0b00bad.exe 153503  b9c5a99da8d6148d37b1200229faf3ca 
4e2a0d98.exe 153484  09adfa3abccf90b0558e2154fecb6484 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"{84facafe-37c0-ec06-c5d4-fdd112081580}"\"%win.sys32%\rundll32.exe "%win.sys32%\nweuwucnhlctps.dll" dllstart"
..\Software\{9f5f5058-2ed2-f6e0-f7c5-2979f4fcaefe}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5A0110D-2F09-876A-2A8B-B61CFCB20C2F}\(Default)
..\Software\Classes\Clsid\{E5A0110D-2F09-876A-2A8B-B61CFCB20C2F}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Uninstall\AGADOO\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware