Emsisoft Malware-Info
Name: Adware.Win32.EsetSpecialKeyFinder
Risklevel: Low Risk
Description:
EsetSpecialKeyFinder is an cracking tool, and it also show ads on victim machine.
Removal instructions for Adware EsetSpecialKeyFinder:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware EsetSpecialKeyFinder.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Installation: Installed through EXE
Process: autorun.exe
Screenshots:
Used folders:
- C:\Documents and Settings\[USER]\Cookies\
- C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\
- C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\
- C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009101420091015\
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Buttons\
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Icons\
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\
- C:\Documents and Settings\[USER]\Local Settings\Temp\_ir_tmpfnt_1\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\
Used files:
- C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\630B1240.jpg
[8447 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\630B2747.jpg
[17909 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\bg_Agreement.jpg
[18985 Bytes] JPG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\Bitmap_14354.bmp
[63188 Bytes] BMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\polaroid.png
[4128 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temp\_ir_tmpfnt_1\Earthquake MF.TFT
[80652 Bytes] TFT File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\index.dat
[98304 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\336x280[1].js
[326 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\CABD1ZIQ.cn
[77 Bytes] CN File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\CAENCLQZ.htm
[3575 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\goodmima[1].htm
[14187 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\graphics[2].js
[6821 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\show_sdo[2].js
[4070 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\ucweb_1[1].gif
[22985 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\CA2P6HE7.htm
[6076 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\CAI3ITMN.htm
[603 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\CAN938DV.htm
[603 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\color25[1].png
[3519 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\common[1].js
[43207 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\copy[1].js
[2949 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\css[1].css
[541 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\test_domain[2].js
[52 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\CA6B0XYZ.htm
[6295 Bytes] HTM File - C:\Documents and Settings\[USER]\Cookies\index.dat
[32768 Bytes] DAT File - C:\Documents and Settings\[USER]\Cookies\virus demo@doubleclick[1].txt
[209 Bytes] TXT File - C:\Documents and Settings\[USER]\Cookies\virus demo@doubleclick[2].txt
[115 Bytes] TXT File - C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
[16384 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\index.dat
[32768 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009101420091015\index.dat
[32768 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\autorun.exe
[2834432 Bytes] EXE File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\Icon Entry_30001.ico
[3262 Bytes] ICO File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\autorun.cdd
[440431 Bytes] CDD File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Back.ogg
[5891 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Boop.ogg
[4457 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Claps.ogg
[5273 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Clav.ogg
[4958 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Click1.ogg
[3872 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Click2.ogg
[5432 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Cling.ogg
[4436 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Cut.ogg
[5063 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Eighties.ogg
[4388 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Express.ogg
[6172 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Fake.ogg
[6375 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Glass.ogg
[4683 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Gnome.ogg
[6592 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Guero.ogg
[4639 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Hack.ogg
[4812 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Metallic.ogg
[4226 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Note.ogg
[5111 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Pop.ogg
[5269 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Popler.ogg
[4826 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Trancer.ogg
[5775 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Trend.ogg
[4859 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Triangle.ogg
[5505 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Audio\Zipa.ogg
[5674 Bytes] OGG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Buttons\10_1961.btn
[12845 Bytes] BTN File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Buttons\16.Btn
[7448 Bytes] BTN File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Buttons\7_1644.btn
[10418 Bytes] BTN File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Buttons\grey_pill.btn
[27485 Bytes] BTN File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Buttons\grey_rounded.btn
[21938 Bytes] BTN File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Buttons\Kapat-12.Btn
[5742 Bytes] BTN File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\Doors.swf
[540 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\Doors_samp.swf
[14826 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\Enter.swf
[31200 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\Enter_1.swf
[12996 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\globe.swf
[33736 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\indigo_clouds.swf
[21111 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\indigo_i.swf
[11497 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Flash\Untitled.swf
[30411 Bytes] SWF File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Icons\Icon Entry_30001.ico
[3262 Bytes] ICO File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\010FB10.png
[11833 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\022FC10.png
[9920 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Images\033GV00.png
[14355 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\CAGDI749.cn
[2500 Bytes] CN File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\CAINOXU3.htm
[2211 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\CAM70RDM.cn
[2668 Bytes] CN File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\eset.org[1].htm
[17371 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\expansion_embed[2].js
[44970 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\naoz[1].css
[11344 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\post-icon[1].gif
[1262 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\render_ads[2].js
[287 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\CA69AFC7.htm
[603 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\caozuoxitong_1[1].gif
[14272 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\CAQORFQV.htm
[64 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\feed[1].xml
[10393 Bytes] XML File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\mainbg[1].gif
[86 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\naoz[1].htm
[31411 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\rss[1].xml
[3848 Bytes] XML File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\show_ads[2].js
[35450 Bytes] JS File
Additional information might be found here:
Search
at Google for
Adware EsetSpecialKeyFinder
Search at Bing for
Adware EsetSpecialKeyFinder
Search
at Yahoo for
Adware EsetSpecialKeyFinder
How can I protect myself from Adware EsetSpecialKeyFinder?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here




















