Home > Threats > Enqvwkp Toolbar

What is Enqvwkp Toolbar

Posted on 19 January 2008 under Trojans and viruses

1. What is Enqvwkp Toolbar?

Enqvwkp Toolbar is installed by a trojan also known as Trojan.FakeSecurityAlert. Custom desktop background is changed into a red background with a sort of biohazard symbol in the middle, saying "Download Privacy Protector". Having Enqvwkp Toolbar installed, fictitious computer security related popups are appearing with the following content:

Spyware Alert Security Warning! Worm.Win32.Netsky detected on your machine. This virus is distributed via the internet through e-mail and Active-x objects. The worm has its own SMTP engine wich means it gathers e-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. This process should be removed from your system.

Besides the user is informed that Windows ME, 2000, NT, XP, Vista can be affected and prompted to click Yes button in order to clean the computer from assumed infection.

Related websites that we do not recommend to visit:
viruswebprotect.com
scanner.adwareremover2007.com

Fake anti-spyware software related to Enqvwkp Toolbar:
Error Cleaner
Privacy Protector
Spyware & Malware protection

Spyware Alert:

Spyware Alert

2. How to remove Enqvwkp Toolbar:

  1. Internet connection might be disabled or Internet browser might be blocked by Enqvwkp Toolbar, so it won't be possible to download any files to infected computer. In this case please download all files required for Enqvwkp Toolbar removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove Enqvwkp Toolbar download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove Enqvwkp Toolbar.

  5. Restart the computer to complete Enqvwkp Toolbar removal procedure.

3. Enqvwkp Toolbar files:

agrlmvp.dll, bmlvqkn.dll, ddwlxtqdgx.dll, ddwlxtqdpn.dll, ddwlxtqfls.dll, ddwlxtqfvg.dll, ddwlxtqgmq.dll, ddwlxtqlmr.dll, ddwlxtqnow.dll, ddwlxtqowd.dll, ddwlxtqqwt.dll, ddwlxtqtno.dll, ddwlxtqxdm.dll, dnqdlpmmwv.dll, dnqdlpmoxw.dll, enqvwkp.dll
C:\WINDOWS\fxtqdrl.exe

4. Hijackthis entries:

O2 Entries:
O2 - BHO: XTN Monitor - {E587DEAB-947E-4BF0-8439-BDC82913A9AE} - C:\WINDOWS\ddwlxtqdpn.dll
O3 Entries:
O3 - Toolbar: The enqvwkp - {FFB13247-794A-4E4F-8B97-937F906013D1} - C:\WINDOWS\enqvwkp.dll
* can also be found under these CLSIDs:
{12A25CE9-0A93-4074-9516-A5B1A83141C9}
{31F68405-A7AE-4D05-917C-97C4CBFE05A0}
{79BAB47C-EA45-42FE-A91C-9325A6B4E3BF}
{92162A1C-A9E3-4C0C-BCDC-2996E8406887}
{A276B2DF-BC3A-4144-9902-58BA41D7203F}
{B1B10992-4C8F-4F54-85B2-CB3CA788E498}
{CC4B2067-D903-427A-854B-632735A570D9}
{EDE7317E-985F-4F9E-B8BB-A6B244BFD457}
{F1348462-25DE-4F17-869F-BAAFE04DD599}
{F87BF6BA-93BE-407D-9A5C-7721CA72CD37}
{FFB13247-794A-4E4F-8B97-937F906013D1}
O21 Entries:
O21 - SSODL: agrlmvp - {87B6A2D7-C7D1-4CBA-BB23-6B3478739F95} - C:\WINDOWS\agrlmvp.dll
O21 - SSODL: bmlvqkn - {FB9E1B56-0ED0-4D6E-9D6B-FB2C3C30C688} - C:\WINDOWS\bmlvqkn.dll