1. What is BlockScanner?
BlockScanner is an online fraud, tended to deceive user, by convincing him that the computer system is in danger and needs immediate protection. BlockScanner is also known as a rogue program or fake anti-virus, belongs to WiniGuard Family and is spread by Trojan FakeSmoke.
At the time of installation, BlockScanner will create a number of files with .exe, .dll, .bin extensions, which later, after system scan has been completed, will be identified as various computer threats. In fact these files are created to show user the presence of uncertain objects and make him believe that the computer is infected. To clean the computer, user will be asked to pay a fee, in order to obtain the so-called licensed version, which will enable virus removal function. Do not make any payments related to BlockScanner, because it's not genuine anti-virus software and will neither remove any real threats, nor will protect computer system.
False BlockScanner Reports:
At the time of installation, BlockScanner will create a number of files with .exe, .dll, .bin extensions, which later, after system scan has been completed, will be identified as various computer threats. In fact these files are created to show user the presence of uncertain objects and make him believe that the computer is infected. To clean the computer, user will be asked to pay a fee, in order to obtain the so-called licensed version, which will enable virus removal function. Do not make any payments related to BlockScanner, because it's not genuine anti-virus software and will neither remove any real threats, nor will protect computer system.
False BlockScanner Reports:
- BlockScanner has detected 739 Critical SPYWARE Objects while scanning the system. Register BlockScanner to block or remove threatening objects. Click "Clean" to register the version to render revealed threats.
- Spyware Alert! Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of BlockScanner and remove spyware threats from your PC.
2. BlockScanner screen shot:

3. How to remove BlockScanner:
- Internet connection might be disabled or Internet browser might be blocked by BlockScanner, so it won't be possible to download any files to infected computer. In this case please download all files required for BlockScanner removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
- To remove BlockScanner download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
-
After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:
-
After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove BlockScanner.
- Restart the computer to complete BlockScanner removal procedure.
4. BlockScanner files:
C:/Windows/100695orm38bz.binC:/Windows/system32/100stez51399.exe
C:/Windows/102589iruz395.cpl
C:/Windows/10365sp5m9oz340.cpl
C:/Windows/system32/105195rzj7e29.ocx
C:/Windows/system32/10fb9ownloaze51477.cpl
C:/Windows/11161no5za-virus509.exe
C:/Windows/11164vi5u91zb.cpl
C:/Windows/1117virzs59b.bin
C:/Windows/system32/112445acktzol3eb9.ocx
C:/Windows/112649roj58z.cpl
C:/Windows/11274nzt5a-9irus34e.dll
C:/Windows/system32/1140zvirus4359.dll
C:/Windows/11509tr5z1e9.ocx
C:/Windows/system32/1152zw9rm39e5.ocx
C:/Windows/system32/115z49irus195.ocx
C:/Windows/system32/1175hiez2967.cpl
C:/Windows/system32/1189zspy5d.cpl
C:/Windows/system32/119download5rz18.cpl
C:/Windows/system32/11a8szyw95e1064.bin
C:/Windows/11d95zarse9607.dll
C:/Windows/system32/120not-a-5i9us4zb.cpl
C:/Windows/122ztro95685.ocx
C:/Windows/12354not9a-viru548z.bin
C:/Windows/125espyw9ze1165.bin
C:/Windows/system32/1264wozm559.ocx
C:/Windows/system32/12c5th9eat113z0.ocx
C:/Windows/system32/12z58tro5927.ocx
C:/Windows/13072n5z-a-virus692.dll
C:/Windows/system32/13300not-a-viru9z5b.exe
C:/Windows/1355stz9l2309.bin
C:/Windows/1356zworm639.cpl
C:/Windows/system32/13742hzcktool195.dll
C:/Windows/system32/13766s9ambo56z1.ocx
C:/Windows/138065roj98dz.exe
C:/Windows/13909z9oj5af5.dll
C:/Windows/13935w5rmz02.dll
C:/Windows/13e9threat522z.bin
C:/Windows/14467hacktozl3359.exe
C:/Windows/system32/147905pyza9.ocx
C:/Windows/14949ha5ktzol229.bin
C:/Windows/14z9backdoor2559.ocx
C:/Windows/system32/150265py759z.ocx
C:/Windows/15493ha5ktooz7859.ocx
C:/Windows/system32/155059zoj359.cpl
C:/Windows/15543szy2d19.bin
C:/Windows/system32/15557virus59z.dll
C:/Windows/1559z9pambot25c5.dll
C:/Windows/15639virus5z4.exe
C:/Windows/156ezteal1097.ocx
C:/Windows/15709virzs7d.ocx
C:/Windows/system32/15805hackt9oz574.dll
C:/Windows/system32/15909troz93f.bin
C:/Windows/1593zspambot9f6.cpl
C:/Windows/15962hacktzol5c5.ocx
C:/Windows/system32/15980not-z-5irus25a.exe
C:/Windows/1599tro5z2c.dll
C:/Windows/15f9vzr5823.cpl
C:/Windows/15z9t9oj5f0.ocx
C:/Windows/system32/1603add5arz20599.bin
C:/Windows/system32/160z0tro95bf.ocx
C:/Windows/160z5not5a-viru919c.bin
C:/Windows/system32/16414not9a-viruszcf5.exe
C:/Windows/system32/16542z5oj23f9.ocx
C:/Windows/system32/16582spam9oz3bd.bin
C:/Windows/1669ztr9j275.bin
C:/Windows/166z5spy689.dll
C:/Windows/system32/16782no9-a5vzrus324.dll
C:/Windows/168z2not9a-vi5us7bf.dll
C:/Windows/system32/16984n5t-a-viru9462z.ocx
C:/Windows/system32/16d49ownloa5er2360z.cpl
C:/Windows/system32/16z8spy559.bin
C:/Windows/17140viru51fz9.bin
C:/Windows/17313t9oj715z.cpl
C:/Windows/1738ziru5928.dll
C:/Windows/17415sp9m5ot8z.ocx
C:/Windows/17715hackzo9l4a1.dll
C:/Windows/system32/17734v5ru9149z.cpl
C:/Windows/system32/179515pz519.ocx
C:/Windows/17995no5-9-virusz4.cpl
C:/Windows/system32/17ccdow5loadzr9558.exe
C:/Windows/system32/17de5parze9026.ocx
C:/Windows/system32/17z08worm3995.exe
C:/Windows/system32/18064z95j7d0.cpl
C:/Windows/18066wormz95.dll
C:/Windows/18371s9y4z5.ocx
C:/Windows/system32/18441not-9-v5rusz2e.bin
C:/Windows/system32/18525spz179.ocx
C:/Windows/18531hzckt9ol6eb.exe
C:/Windows/18545viru9z4d.bin
C:/Windows/system32/18703wor5z9e.cpl
C:/Windows/system32/18755zot-a-vi5us5749.dll
C:/Windows/system32/18759hackz9ol63c.exe
C:/Windows/system32/18913no9-a-vi5us6zd.dll
C:/Windows/system32/18915irzs6b39.exe
C:/Windows/18989h5cztool582.cpl
C:/Windows/system32/18b0st9zl1252.bin
C:/Windows/system32/190355p9mbzt4b3.bin
C:/Windows/1911spz752.cpl
C:/Windows/1925159y5zf.exe
C:/Windows/1938znot-a-5irus688.ocx
C:/Windows/system32/19441troj60z5.exe
C:/Windows/system32/194z1viru543.exe
C:/Windows/19559hacktoo51a3z.dll
C:/Windows/19592wormzd9.cpl
C:/Windows/system32/195bszyw9re3264.bin
C:/Windows/1960not-a-v9ru5zc.ocx
C:/Windows/19772nz95a-virus25e.cpl
C:/Windows/system32/1989wo5m3z5.ocx
C:/Windows/198z05roj95.cpl
C:/Windows/19905troz7d4.dll
C:/Windows/system32/199495r31z9.exe
C:/Windows/system32/1b895zreat6274.dll
C:/Windows/system32/1c81backd5zr2978.exe
C:/Windows/system32/1cadt59eat3717z.cpl
C:/Windows/system32/1cz7addw59e892.bin
C:/Windows/system32/1d54b9ckdoor233z.ocx
C:/Windows/1dez9hreat54235.cpl
C:/Windows/system32/1e5zsparse2509.exe
C:/Windows/system32/1e7spzrse50389.exe
C:/Windows/system32/1e96zh5ef2950.exe
C:/Windows/system32/1efz95ief2938.bin
C:/Windows/1f5zspyw9re654.cpl
C:/Windows/system32/1f5zthreat4290.cpl
C:/Windows/system32/1fz39teal2859.cpl
C:/Windows/1z059parse5993.exe
C:/Windows/system32/1z05spy594.dll
C:/Windows/system32/1z255v5rus59.dll
C:/Windows/system32/1z452not-a-vi9u522.dll
C:/Windows/1z564spambot295.bin
C:/Windows/system32/1z5espy5ar92308.cpl
C:/Windows/system32/1z740hackt9ol751.ocx
C:/Windows/1z742spambot3595.dll
C:/Windows/1z795sp9359.dll
C:/Windows/1z856h9ckt5ol659.exe
C:/Windows/system32/1z85a9dware11905.exe
C:/Windows/1z99downloader255.ocx
C:/Windows/system32/20051virz9450.exe
C:/Windows/system32/2009hackz5ol39c.cpl
C:/Windows/20244s5am9ot642z.dll
C:/Windows/205959p5mbot389z.bin
C:/Windows/system32/2063zh59at23231.exe
C:/Windows/system32/20668worz53b9.ocx
C:/Windows/20891zacktool2895.ocx
C:/Windows/209z1troj159.dll
C:/Windows/2123zs95127.dll
C:/Windows/21449hackzo9l53d.cpl
C:/Windows/2150zhackt9ol7ea.exe
C:/Windows/2158szar9e1150.ocx
C:/Windows/2166995oz25a.bin
C:/Windows/217845zcktool1869.dll
C:/Windows/2183nzt-a-vir9s558.bin
C:/Windows/219529pz295.exe
C:/Windows/21z0not-a-viru91c75.ocx
C:/Windows/system32/22057spz9bot2e5.cpl
C:/Windows/22540wo9m4z.dll
C:/Windows/2258zwo9m269.bin
C:/Windows/22594not-a-virzs7a.bin
C:/Windows/227695zef1155.ocx
C:/Windows/22795vir5s9bz.cpl
C:/Windows/system32/229255py98z.ocx
C:/Windows/system32/22z9895t-a-virus6c0.exe
C:/Windows/system32/22zeth9e5t22635.cpl
C:/Windows/23699spambot5b5z.ocx
C:/Windows/236b5z93264.exe
C:/Windows/system32/23712h9ckt5olz5d.ocx
C:/Windows/23925not-a-vir9s703z.dll
C:/Windows/23929not-5-vizus4d2.cpl
C:/Windows/system32/2395hacktool583z.exe
C:/Windows/system32/239815ozm5b8.dll
C:/Windows/system32/239zhacktool9e55.dll
C:/Windows/system32/23bsz5al597.bin
C:/Windows/system32/24055zpa9bot6605.cpl
C:/Windows/system32/24413not-a-zir9s53a.ocx
C:/Windows/24513spam95t5z4.dll
C:/Windows/2459ckzool760.exe
C:/Windows/24698trojz2c5.ocx
C:/Windows/system32/247049ot-a-vir5sbz.ocx
C:/Windows/24753tzoj49c.cpl
C:/Windows/system32/2484no9-a-vi5us62z.dll
C:/Windows/248z4not5a-vir9s692.bin
C:/Windows/25012notza-vi5us9c1.bin
C:/Windows/system32/25119w5rmz8.dll
C:/Windows/25153w9rm45z.cpl
C:/Windows/2518zhacktoo94db.dll
C:/Windows/system32/25229s9azbot5a.bin
C:/Windows/system32/25279tzo93545.exe
C:/Windows/25399not-a-viz9s301.dll
C:/Windows/25405zpy5c9.dll
C:/Windows/system32/25415spambo935bz.cpl
C:/Windows/25558spambot7z9.bin
C:/Windows/system32/256z5t9oj486.bin
C:/Windows/2596v9r583z.cpl
C:/Windows/system32/25988wormz495.cpl
C:/Windows/system32/25992viruz3da.cpl
C:/Windows/25a1vir596z.cpl
C:/Windows/system32/25a5add9ar58z2.exe
C:/Windows/25azdw9re5971.dll
C:/Windows/system32/25c9downlozder2687.ocx
C:/Windows/system32/26238not-a-9irus205z.cpl
C:/Windows/26329not-9-5izusb.cpl
C:/Windows/system32/26379vi5u925z.dll
C:/Windows/system32/2639znot-a-viru5277.dll
C:/Windows/system32/2639zsp59c6.ocx
C:/Windows/2646z9ot-a5virus68f.ocx
C:/Windows/system32/265z5sp95ed.exe
C:/Windows/26659hacktooz316.exe
C:/Windows/26845h9cktozl2a.cpl
C:/Windows/2690ba5kd9or188z.bin
C:/Windows/system32/26z23not-a9v5rus751.cpl
C:/Windows/26z99hacktoo9865.bin
C:/Windows/system32/27340notza9viru52c9.exe
C:/Windows/27543s9y3z6.exe
C:/Windows/system32/276aaz95are2997.dll
C:/Windows/277275ormz2d9.dll
C:/Windows/system32/27892s5a9bzt771.cpl
C:/Windows/27955wo5m3fz.bin
C:/Windows/system32/2822zorm59.dll
C:/Windows/28259hackzool465.exe
C:/Windows/28348zor9775.exe
C:/Windows/2899szars5568.ocx
C:/Windows/28a3backdoo95z00.ocx
C:/Windows/28b7vi99z5.bin
C:/Windows/28d65aczdoor192.bin
C:/Windows/29189szambot14e5.cpl
C:/Windows/system32/29221spambo5zae.cpl
C:/Windows/29396troj15fz.ocx
C:/Windows/29561troj41dz.dll
C:/Windows/2960zacktool578.exe
C:/Windows/29731spambot45z.bin
C:/Windows/29769hac5zool4989.bin
C:/Windows/system32/297z5hreat289809.exe
C:/Windows/system32/29869szam5ot8c.cpl
C:/Windows/29895wozm522.bin
C:/Windows/system32/29919z5y134.ocx
C:/Windows/system32/29944hackzool585.cpl
C:/Windows/29bzsparse3527.bin
C:/Windows/29e9vzr29045.exe
C:/Windows/system32/29ea5teal39z.ocx
C:/Windows/2a6zaddw5re295.ocx
C:/Windows/system32/2a95vir720z.bin
C:/Windows/2aa9baz9doo5392.cpl
C:/Windows/2b63spzware9105.cpl
C:/Windows/system32/2b8dba5zd9or2461.dll
C:/Windows/2bz2ad5w9re539.dll
C:/Windows/2c01zir2955.dll
C:/Windows/system32/2c55t9reat22211z.ocx
C:/Windows/2c6zst9al2155.cpl
C:/Windows/system32/2c72stea9125z.cpl
C:/Windows/2d1bs9e5l9z2.cpl
C:/Windows/2d1ethrea5220z09.bin
C:/Windows/2e18thrz9t58374.exe
C:/Windows/2e9zth5ef709.bin
C:/Windows/2f6bd9wnloaderz9835.dll
C:/Windows/2z560spambot92d5.exe
C:/Windows/system32/2z599acktool484.dll
C:/Windows/system32/2z939hacktool7075.ocx
C:/Windows/system32/2za5spyware629.exe
C:/Windows/2zc2s9eal595.exe
C:/Windows/system32/30139zpy509.dll
C:/Windows/system32/301db5zkdoor109.bin
C:/Windows/30484z9cktoole5.dll
C:/Windows/30669dzw5re2289.exe
C:/Windows/30816zir591f.dll
C:/Windows/30827vir5941z.cpl
C:/Windows/system32/30965ir9s64z.ocx
C:/Windows/30997s5ambot201z.exe
C:/Windows/30c85parsz3119.cpl
C:/Windows/system32/30eet5ief9z58.exe
C:/Windows/system32/31109h9ckzool345.ocx
C:/Windows/313369o5-a-viruz5d1.bin
C:/Windows/system32/315569orz5d6.cpl
C:/Windows/31690ha5ktoo93fz.bin
C:/Windows/316zsteal9915.bin
C:/Windows/31871v5rzs7129.ocx
C:/Windows/31969wor5zb3.exe
C:/Windows/system32/31e9addw5rez018.exe
C:/Windows/31z48s9y59b.exe
C:/Windows/32109not5z-vi9us4db.bin
C:/Windows/32281not-a-vi5us1z69.dll
C:/Windows/system32/32539virus2zb.exe
C:/Windows/3258z5ir9s323.dll
C:/Windows/system32/325z7ha9ktool669.ocx
C:/Windows/system32/3291zspa5bot38c.exe
C:/Windows/system32/32974wo5m1z8.dll
C:/Windows/32ezste9l2851.bin
C:/Windows/system32/32f1ad59zre772.ocx
C:/Windows/32z9v5r1269.ocx
C:/Windows/system32/330cthrzat98215.ocx
C:/Windows/330ez9dware28795.exe
C:/Windows/33b9ir59z8.cpl
C:/Windows/33cathzef5965.cpl
C:/Windows/system32/349c5ir47z.cpl
C:/Windows/34badowzloade95180.dll
C:/Windows/system32/34de9pyware15z8.dll
C:/Windows/system32/35019a5kzoor1895.bin
C:/Windows/350zspars95566.ocx
C:/Windows/3519thzef87.cpl
C:/Windows/352ethrea96202z.dll
C:/Windows/system32/35571t9zj3dc.dll
C:/Windows/system32/35866wzr961c.bin
C:/Windows/35e5v9z950.bin
C:/Windows/system32/378baz5door1269.ocx
C:/Windows/382bdownloader3z509.bin
C:/Windows/system32/390ethiez1955.ocx
C:/Windows/3925vi91z79.exe
C:/Windows/393bstzal21505.dll
C:/Windows/39405spy4z4.ocx
C:/Windows/system32/39438sp5z31.dll
C:/Windows/system32/395ethr5at30z04.exe
C:/Windows/system32/39678not-a-v5rus1z4.ocx
C:/Windows/3975backdoor35z.ocx
C:/Windows/system32/39881haczto5l3d4.exe
C:/Windows/39d2thief45z.ocx
C:/Windows/39d7th5ezt32510.bin
C:/Windows/system32/39z05spambot19a.dll
C:/Windows/3a5bspar952z96.bin
C:/Windows/system32/3aa6d9wnlo5der166z.ocx
C:/Windows/system32/3abdthrezt253259.exe
C:/Windows/3acaspywaz5719.dll
C:/Windows/3b8ctzie52906.bin
C:/Windows/system32/3bzcthr5at152629.ocx
C:/Windows/3c9bt5iefz00.cpl
C:/Windows/system32/3d46zt5al1159.ocx
C:/Windows/3dccdozn5oader9621.exe
C:/Windows/3e58spy9are16z8.bin
C:/Windows/3ea5spyza9e2139.exe
C:/Windows/system32/3f09downzoade5618.bin
C:/Windows/system32/3z3fvir95.ocx
C:/Windows/system32/3z5345irus49f.exe
C:/Windows/system32/3z729pywar5775.dll
C:/Windows/system32/4095pazs9759.cpl
C:/Windows/409cdo5nzoader2554.exe
C:/Windows/system32/410eza9kdo5r324.exe
C:/Windows/415459izf1052.bin
C:/Windows/system32/41zcsp9r5e674.exe
C:/Windows/system32/4219s5eaz1994.dll
C:/Windows/4238ha9k5ool65az.exe
C:/Windows/system32/429295reaz2809.dll
C:/Windows/4302s5ywarez889.dll
C:/Windows/system32/432d9hi5f26z0.dll
C:/Windows/system32/43a2spyw59z959.dll
C:/Windows/system32/449zbackdoo51013.cpl
C:/Windows/4525zroj139.bin
C:/Windows/454bthiez9835.dll
C:/Windows/system32/455es5eal954z.dll
C:/Windows/system32/45679irzs5b5.ocx
C:/Windows/457e59arsez899.bin
C:/Windows/system32/45d1spywa5e9z82.exe
C:/Windows/4615spyz95e16.bin
C:/Windows/46c65hizf951.bin
C:/Windows/system32/46dzba5kdoo92144.bin
C:/Windows/system32/4736hacktzol695.exe
C:/Windows/system32/4736not5a-vz9us72f.cpl
C:/Windows/system32/4795spywzre3095.bin
C:/Windows/485ab5ckd9oz2620.dll
C:/Windows/485zspy92b.bin
C:/Windows/4928ha5ktzo9272.ocx
C:/Windows/4939vir543z.dll
C:/Windows/498vi5usz9f.cpl
C:/Windows/system32/4990hacktz595c0.ocx
C:/Windows/4995worm451z.dll
C:/Windows/system32/49despa5se27z39.bin
C:/Windows/system32/49fadownzo9d5r1781.bin
C:/Windows/system32/4a3c9hief3z56.bin
C:/Windows/system32/4a9b5py9are124z.ocx
C:/Windows/4ae4sp9rse15z5.cpl
C:/Windows/4b3bzckd9or22425.ocx
C:/Windows/system32/4bb95a9kdoor390z.ocx
C:/Windows/4bb9szyw9re13985.ocx
C:/Windows/4c42add9aze1950.exe
C:/Windows/4c52add9ar51509z.cpl
C:/Windows/4d88sp9ware5z7.exe
C:/Windows/system32/4e8fsp9wzr5747.ocx
C:/Windows/system32/4e91b5czdoor27799.dll
C:/Windows/4z0195r825.ocx
C:/Windows/system32/4z09vi9us159.dll
C:/Windows/4z10thi5f999.dll
C:/Windows/4z59hief5689.cpl
C:/Windows/system32/4z96steal3795.bin
C:/Windows/4zd2steal8995.exe
C:/Windows/503z6wo9m659.ocx
C:/Windows/system32/503z9pambo54ac.bin
C:/Windows/system32/50510tzoj3d09.cpl
C:/Windows/5062down9ozder2669.cpl
C:/Windows/5069vz9952.bin
C:/Windows/system32/5077hacktool592z.bin
C:/Windows/system32/507fba59zoor76.exe
C:/Windows/50931not-a-viruz471.dll
C:/Windows/5095thiefz952.dll
C:/Windows/50b5spa5se99z.dll
C:/Windows/system32/5115s5ywarez947.exe
C:/Windows/513zaddwar96735.exe
C:/Windows/5160sparse9058z.dll
C:/Windows/5165noz-a-9irus701.cpl
C:/Windows/5199zvirus308.dll
C:/Windows/system32/51z79py4d3.cpl
C:/Windows/52448troj9ez.ocx
C:/Windows/system32/5262dowzlo5der981.exe
C:/Windows/5277zp9r5e2421.bin
C:/Windows/52859ot-a-viruszb8.cpl
C:/Windows/5309vzr17409.dll
C:/Windows/system32/53206wzrm4789.exe
C:/Windows/system32/53256vizus599.bin
C:/Windows/system32/53533virus49z.bin
C:/Windows/5435ba9kdoorz699.cpl
C:/Windows/5452vi9u514fz.exe
C:/Windows/system32/545zpy6595.ocx
C:/Windows/system32/5474addw9rz1550.bin
C:/Windows/547c9p5waze928.ocx
C:/Windows/system32/54938spzmbot55a.bin
C:/Windows/system32/54abs9eal4z4.dll
C:/Windows/54dcsp9rs530z5.ocx
C:/Windows/54zdb5ckdoor11629.cpl
C:/Windows/system32/5505bazkdoor298.cpl
C:/Windows/550abackd9or5012z.exe
C:/Windows/system32/55102tro9234z.ocx
C:/Windows/55193vi9uszdc.cpl
C:/Windows/551fthi9z5527.bin
C:/Windows/55289pyware16z2.ocx
C:/Windows/system32/552zteal699.exe
C:/Windows/system32/5549vzr552.cpl
C:/Windows/system32/5553h9cztool6ed.bin
C:/Windows/55c7addware1z039.exe
C:/Windows/system32/55fathiefz4559.ocx
C:/Windows/55fcaddwzre1927.dll
C:/Windows/system32/55z09parse799.cpl
C:/Windows/system32/55z6spa9botd2.cpl
C:/Windows/55z995y52a.ocx
C:/Windows/56029wormzd1.exe
C:/Windows/system32/56099pyz0f.exe
C:/Windows/system32/56109spy5ez.bin
C:/Windows/system32/5619virus57z.exe
C:/Windows/system32/5658spa9bot6z2.cpl
C:/Windows/system32/565zs9arse412.dll
C:/Windows/5679threzt55.dll
C:/Windows/system32/56e19irz67.dll
C:/Windows/system32/5710wzrm5965.cpl
C:/Windows/5721z9ambot525.ocx
C:/Windows/system32/5746hac95ozl636.exe
C:/Windows/system32/575259z630.ocx
C:/Windows/5770spz9botec.bin
C:/Windows/5798zteal23595.ocx
C:/Windows/system32/579z0troj37b.ocx
C:/Windows/5803z9y734.ocx
C:/Windows/581dthr95t18679z.ocx
C:/Windows/system32/5821addware9z0.dll
C:/Windows/5839thiefz989.cpl
C:/Windows/5849bazk5oo9258.bin
C:/Windows/system32/584f9ddwarz1565.exe
C:/Windows/system32/5858spzware494.dll
C:/Windows/system32/585eazdware9273.cpl
C:/Windows/system32/58601zor9e3.ocx
C:/Windows/5869dzwnloader1278.bin
C:/Windows/system32/586sp9wa5ez701.bin
C:/Windows/5872zot-a-vi5us339.cpl
C:/Windows/5874dow5lzade92885.bin
C:/Windows/588zth9eat54616.bin
C:/Windows/58dthi9z561.bin
C:/Windows/59055hzef2669.exe
C:/Windows/system32/595669py354z.exe
C:/Windows/5957downloa9er353z.ocx
C:/Windows/system32/595backdooz2652.dll
C:/Windows/system32/5969thzeat29087.ocx
C:/Windows/system32/5980st5a9957z.bin
C:/Windows/system32/5982zpar9e3155.cpl
C:/Windows/system32/59872not-a-virus37z9.ocx
C:/Windows/system32/59917wor97z8.exe
C:/Windows/system32/59d5addza5e3044.exe
C:/Windows/system32/59downloadzr35039.exe
C:/Windows/system32/59f0addwarz2502.cpl
C:/Windows/59f9zhreat4945.exe
C:/Windows/system32/59z19py7f1.dll
C:/Windows/system32/59z1v5r1881.dll
C:/Windows/system32/59ze9ownload5r2475.cpl
C:/Windows/5a03t9i5z150.cpl
C:/Windows/system32/5a3backzoo92535.ocx
C:/Windows/5a3zbackd9or2309.dll
C:/Windows/system32/5a8eaddware539z.exe
C:/Windows/system32/5aazstea53999.bin
C:/Windows/5ac4backdzo52927.bin
C:/Windows/5b29vi51z88.ocx
C:/Windows/5b64v5r15z69.ocx
C:/Windows/system32/5b67b9ckdoo529z4.dll
C:/Windows/system32/5b68zteal24439.dll
C:/Windows/5b95do9nlzader187.exe
C:/Windows/5bzbth9ef5533.ocx
C:/Windows/system32/5c15zir2598.exe
C:/Windows/system32/5c3spyzare697.exe
C:/Windows/system32/5c89tzie91621.dll
C:/Windows/system32/5c91zteal31149.cpl
C:/Windows/5cbdbackd5o93z37.ocx
C:/Windows/system32/5ce0st9al3z00.cpl
C:/Windows/system32/5czbba5k9oor1945.dll
C:/Windows/5d35thiefz859.bin
C:/Windows/system32/5d55backdo9r118z.exe
C:/Windows/5d57spa9sz586.cpl
C:/Windows/5df8bzck9oor2597.cpl
C:/Windows/5e19vir5z39.dll
C:/Windows/5e59thzeat39731.cpl
C:/Windows/system32/5e6cd9wnloadzr808.dll
C:/Windows/system32/5e9dst5al25z4.bin
C:/Windows/system32/5eb6ba5kdo9rz67.bin
C:/Windows/system32/5f09aczdoor955.bin
C:/Windows/5f4bvir3993z.ocx
C:/Windows/5fd3d5wnloadz92989.cpl
C:/Windows/system32/5z2sparse91475.bin
C:/Windows/system32/5z32v5r199.dll
C:/Windows/system32/5z60worm1559.cpl
C:/Windows/system32/5z6th9eat751.cpl
C:/Windows/system32/5z9fthi5f2817.ocx
C:/Windows/system32/5za2ste592457.cpl
C:/Windows/5za9stea91245.cpl
C:/Windows/5zd6addware1390.exe
C:/Windows/system32/605zdownload9r954.exe
C:/Windows/system32/60e7dow5zoader20219.dll
C:/Windows/6152no5-azvirus59c.dll
C:/Windows/6159zp5rse1839.exe
C:/Windows/615ezpars920605.bin
C:/Windows/system32/6193doz5loader699.bin
C:/Windows/61b6s9ywar524z5.dll
C:/Windows/61e5bzckdoor2927.dll
C:/Windows/61f9thzef1511.bin
C:/Windows/626z9p5mbot3a6.bin
C:/Windows/634edow5l9adez78.cpl
C:/Windows/system32/6352spa5b9z49a.bin
C:/Windows/system32/6394th5zat27349.dll
C:/Windows/system32/6455threat15796z.bin
C:/Windows/system32/64aszy5a9e2585.dll
C:/Windows/6559spyzare579.cpl
C:/Windows/system32/6567thizf1949.cpl
C:/Windows/6595bac5door805z.bin
C:/Windows/659etzief1925.exe
C:/Windows/65a09dzware31625.bin
C:/Windows/66459hreat215z9.cpl
C:/Windows/system32/6658sparze27179.bin
C:/Windows/685spa9se795z.exe
C:/Windows/system32/68a5th9ez1546.ocx
C:/Windows/system32/6949zhief1965.ocx
C:/Windows/system32/6950ad9w5re29z9.exe
C:/Windows/6953nzt-a-virus493.exe
C:/Windows/6964hack9ooz4a5.bin
C:/Windows/697zvir5s559.bin
C:/Windows/699bthzea510019.cpl
C:/Windows/system32/69a7spzwa5e2037.cpl
C:/Windows/system32/69fcdzwnl5ader1980.exe
C:/Windows/system32/69z35pyware35.bin
C:/Windows/69zedownl5ade91122.bin
C:/Windows/system32/6a5bdowzloader2943.dll
C:/Windows/6aazthief90945.bin
C:/Windows/system32/6b09adzware22455.exe
C:/Windows/6bb0do5z9oader659.dll
C:/Windows/system32/6c5b5pywar92744z.exe
C:/Windows/6cz7download951389.dll
C:/Windows/6e35z9dware1362.bin
C:/Windows/6e3cdow95oader314z.bin
C:/Windows/system32/6ef9s5arsz1574.ocx
C:/Windows/6fc6bzc5doo91656.exe
C:/Windows/system32/6z7fthief15159.exe
C:/Windows/system32/701zthr9a510480.exe
C:/Windows/system32/7175do5nloader228z9.cpl
C:/Windows/72295hrezt7589.bin
C:/Windows/system32/725fadzw9re66.dll
C:/Windows/728z5ackdo9r1659.dll
C:/Windows/72azs5yw9re2709.ocx
C:/Windows/system32/7325zpy9a5e1539.ocx
C:/Windows/753fdz5nloader970.exe
C:/Windows/7549backdo5r3004z.ocx
C:/Windows/754fs9azse773.exe
C:/Windows/75635zrm7e9.ocx
C:/Windows/756459zef1456.bin
C:/Windows/75785zr9at30549.cpl
C:/Windows/7581backd9oz1414.cpl
C:/Windows/system32/7595hre9t1512z.exe
C:/Windows/7595worm5cz.dll
C:/Windows/system32/7599ozm7ac.exe
C:/Windows/75f5backdoor24z09.bin
C:/Windows/7633downlo5derz9269.dll
C:/Windows/7661b59kdzor914.cpl
C:/Windows/768zthre9t23505.dll
C:/Windows/7709ro5z53.bin
C:/Windows/system32/7819t5reaz22749.dll
C:/Windows/system32/7879hacktozl51.ocx
C:/Windows/7951sparse593z.ocx
C:/Windows/797zt5reat3783.bin
C:/Windows/system32/7996s5arsz2239.exe
C:/Windows/system32/79a0viz5432.exe
C:/Windows/79b6backdoorz45.cpl
C:/Windows/79c5zeal1925.exe
C:/Windows/7a6fzownloader5919.ocx
C:/Windows/7b04dzwnloader5995.dll
C:/Windows/7b2ct9re5t19z85.dll
C:/Windows/system32/7bab5pywarz28179.dll
C:/Windows/7bf5steal1569z.dll
C:/Windows/7c5st9al32z7.ocx
C:/Windows/7ca9vir54z4.exe
C:/Windows/system32/7cf5sparse2z699.bin
C:/Windows/7e5t5ie929z4.dll
C:/Windows/7ea9sp5ware1z899.exe
C:/Windows/7f15sp9ware1z13.exe
C:/Windows/7f1ethi9z2596.exe
C:/Windows/7f57baczdo9r431.cpl
C:/Windows/system32/7fd6tz9ef30655.dll
C:/Windows/system32/7z00s5y79f9.cpl
C:/Windows/system32/7z0ddownloader54359.ocx
C:/Windows/system32/7z6fste59576.exe
C:/Windows/system32/7z72threa529268.ocx
C:/Windows/7z779p5rse1087.dll
C:/Windows/7z83w9r53cb.ocx
C:/Windows/7z9et95ef1120.bin
C:/Windows/8062nz9-a-vi5us1be.cpl
C:/Windows/8173wz5m6c9.exe
C:/Windows/819ha9kt5zl754.exe
C:/Windows/8447ha5k9ool2zd.cpl
C:/Windows/85529pycz.cpl
C:/Windows/system32/8565sp95bot7zd.ocx
C:/Windows/system32/8565spambzt965.exe
C:/Windows/system32/85z8spy46a9.exe
C:/Windows/8785zwnloader1599.bin
C:/Windows/system32/8864vzr9s156.ocx
C:/Windows/system32/8914spy465z.exe
C:/Windows/system32/8z02tr5949a.cpl
C:/Windows/system32/8z2995t-a-virus2f9.cpl
C:/Windows/8z5th95f1942.dll
C:/Windows/system32/8z81s5y695.dll
C:/Windows/9002tzo5498.exe
C:/Windows/900z5r9j59b.exe
C:/Windows/system32/9045roj6z29.bin
C:/Windows/system32/90773ha5ktooz4e7.exe
C:/Windows/90908spy254z.ocx
C:/Windows/915z6hacktoo566.dll
C:/Windows/system32/9189z5py1cc.cpl
C:/Windows/system32/923775irzs2ff.exe
C:/Windows/system32/92456troj3z7.exe
C:/Windows/92497wzrm655.dll
C:/Windows/92587szam5ot170.dll
C:/Windows/92589vizus6ba.dll
C:/Windows/system32/92738not-a-vizusf5.dll
C:/Windows/system32/9339vzrus5b49.dll
C:/Windows/9395hackt9ol6abz.ocx
C:/Windows/system32/9405ha9ktooz535.ocx
C:/Windows/94534w5rm65z.dll
C:/Windows/system32/94660spy51z.cpl
C:/Windows/system32/9475d5wnloaderz711.cpl
C:/Windows/system32/94967virzs5fc5.dll
C:/Windows/94a5tezl5969.dll
C:/Windows/95051zroj2b05.ocx
C:/Windows/951095y7ze.cpl
C:/Windows/9525spazse1580.bin
C:/Windows/954zsp968d.ocx
C:/Windows/95767spambot43cz.bin
C:/Windows/system32/957zp9434.ocx
C:/Windows/system32/95948szy6d8.bin
C:/Windows/9595nzt-a-vi9u5471.ocx
C:/Windows/9596viru91fz5.bin
C:/Windows/system32/95b5vir244z.cpl
C:/Windows/95d5sparse5175z.exe
C:/Windows/95ebszarse855.exe
C:/Windows/system32/9607spa5sez76.dll
C:/Windows/9608azdware2575.dll
C:/Windows/system32/9688zh5cktool283.bin
C:/Windows/9714virusz59.bin
C:/Windows/system32/971zspy589.dll
C:/Windows/system32/9728zs5yac.dll
C:/Windows/9739sp5zbot56d.ocx
C:/Windows/9758baczdoor3193.dll
C:/Windows/system32/97bba5kdooz3078.bin
C:/Windows/97bd5wnloa9er1401z.dll
C:/Windows/98430hac5zool523.dll
C:/Windows/system32/9845hacktool1z39.bin
C:/Windows/98545spyza.ocx
C:/Windows/system32/9913zspamb5t1a7.ocx
C:/Windows/99383nzt-a-virus150.cpl
C:/Windows/system32/994z9orm54a.exe
C:/Windows/9b5aazdware3054.bin
C:/Windows/system32/9b5avzr1057.cpl
C:/Windows/system32/9b7adzware39065.cpl
C:/Windows/9b98threat1z576.bin
C:/Windows/9dz5hreat136859.dll
C:/Windows/9f5zbackdoor3015.exe
C:/Windows/9fbaddzare10945.ocx
C:/Windows/9z0asparse2950.dll
C:/Windows/system32/9z11t5ief994.bin
C:/Windows/9z59spy53.dll
C:/Windows/system32/9zspyw9re5564.bin
C:/Windows/system32/a91bac9door57z3.bin
C:/Windows/ab0dzwnloader4539.dll
C:/Windows/system32/b5espywaz52798.bin
C:/Windows/b7fbac9z5or2539.dll
C:/Windows/bfsp5waze2936.cpl
C:/Windows/system32/cczaddwa5e2892.dll
C:/Windows/system32/d20sparsez5839.dll
C:/Windows/system32/d21szea5988.dll
C:/Windows/d9vz5709.ocx
C:/Windows/system32/e58addwz9e1138.exe
C:/Windows/system32/e80zpywa9e2959.dll
C:/Windows/system32/ee79ackdoo5292z.ocx
C:/Windows/system32/ez9backdoor5570.cpl
C:/Windows/system32/z0390spy5de.cpl
C:/Windows/z0458spamb9t592.dll
C:/Windows/z05959py155.bin
C:/Windows/system32/z073v5ru91ef.cpl
C:/Windows/z0899worm5f4.bin
C:/Windows/z1973virus652.dll
C:/Windows/system32/z19worm259.cpl
C:/Windows/z22bt9reat225945.cpl
C:/Windows/system32/z2454troj4a89.ocx
C:/Windows/z24fstea93975.bin
C:/Windows/system32/z3099s5y30b.bin
C:/Windows/z3489virus530.dll
C:/Windows/system32/z35879py19a.dll
C:/Windows/z3591spy59b.exe
C:/Windows/system32/z3765sp5983.ocx
C:/Windows/z395thief3044.bin
C:/Windows/z431t9oj559.dll
C:/Windows/system32/z4511troj4609.ocx
C:/Windows/system32/z470vir9256.bin
C:/Windows/system32/z496t5oj5d.dll
C:/Windows/z4f5ad9w5re2043.dll
C:/Windows/z5183hacktoo9156.ocx
C:/Windows/z58tr9j35b.dll
C:/Windows/system32/z5b9backdoor529.bin
C:/Windows/z5d9bac59oor1450.cpl
C:/Windows/system32/z5e6sp9rse19575.cpl
C:/Windows/z5ethreat25976.cpl
C:/Windows/z73569ot-a5virus158.ocx
C:/Windows/system32/z7475ir2799.exe
C:/Windows/z8210tr5j597.bin
C:/Windows/system32/z8520worm193.exe
C:/Windows/system32/z899s5y55e.exe
C:/Windows/z929spyware19345.cpl
C:/Windows/z9450not9a-vir5s440.cpl
C:/Windows/z9522s9ambot569.dll
C:/Windows/system32/zad7thre5t19036.exe
C:/Windows/zd99addware2915.exe
C:/Windows/system32/zdb4thief28955.exe
C:/Windows/zf05addwar9349.cpl
C:/Windows/system32/zf719ir5576.ocx
C:/Windows/zf96spars5698.cpl
5. Hijackthis entries:
O4 - HKLM\..\Run: [0044bbc8.exe] C:\WINDOWS\system32\0044bbc8.exe |
O4 - HKCU\..\Run: [BlockScanner] C:\Program Files\BlockScanner Software\BlockScanner\BlockScanner.exe -min |
O4 - HKCU\..\Run: [jpr5.tmp.exe] C:\WINDOWS\system32\jpr5.tmp.exe |