Small.fl description
Categories:Trojan
The Small.fl adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%PROFILE%]\applic~1\wa_inst.exe
[%PROFILE%]\progra~1\wa_inst.exe
[%PROGRAM_FILES%]\antico~1\film.exe
[%PROGRAM_FILES%]\antico~1\waybait.exe
[%PROGRAM_FILES%]\log2do~1\audio dumb.exe
[%PROGRAM_FILES%]\log2do~1\binsect.exe
[%PROGRAM_FILES%]\log2do~1\bits.exe
[%PROGRAM_FILES%]\onesoa~1\play.exe Platforms / OS: Windows 2000, Windows XP, Windows 2003, Windows Vista
How to detecting Small.fl:
Search Files on the disk:
[%PROFILE%]\applic~1\wa_inst.exe
[%PROFILE%]\progra~1\thsfrlydcrst.lib
[%PROFILE%]\progra~1\wa_inst.exe
[%PROFILE%]\progra~1\yshthfblztr.dll
[%PROGRAM_FILES%]\antico~1\film.exe
[%PROGRAM_FILES%]\antico~1\waybait.exe
[%PROGRAM_FILES%]\fivefind\antedefault.dll
[%PROGRAM_FILES%]\log2do~1\audio dumb.exe
[%PROGRAM_FILES%]\log2do~1\binsect.exe
[%PROGRAM_FILES%]\log2do~1\bits.exe
[%PROGRAM_FILES%]\onesoa~1\play.exe
[%PROFILE%]\applic~1\wa_inst.exe
[%PROFILE%]\progra~1\thsfrlydcrst.lib
[%PROFILE%]\progra~1\wa_inst.exe
[%PROFILE%]\progra~1\yshthfblztr.dll
[%PROGRAM_FILES%]\antico~1\film.exe
[%PROGRAM_FILES%]\antico~1\waybait.exe
[%PROGRAM_FILES%]\fivefind\antedefault.dll
[%PROGRAM_FILES%]\log2do~1\audio dumb.exe
[%PROGRAM_FILES%]\log2do~1\binsect.exe
[%PROGRAM_FILES%]\log2do~1\bits.exe
[%PROGRAM_FILES%]\onesoa~1\play.exe
Search Folders on the disk:
[%PROGRAM_FILES%]\paintingroom
[%APPDATA%]\grey style help
[%APPDATA%]\softeggsbait2
[%PROFILE%]\applic~1\audioa~1
[%PROGRAM_FILES%]\grey style help
Search registry keys in system registry:
HKEY_CLASSES_ROOT\clsid\{fe8aca46-adf0-4785-b550-89762dc330e6}
HKEY_CLASSES_ROOT\interface\{e29be7f1-e2d8-4036-91ce-c3f8aac42495}
HKEY_CLASSES_ROOT\paintingroomclasses.animatedicon
HKEY_CLASSES_ROOT\paintingroomclasses.animatedicon.1
HKEY_CLASSES_ROOT\typelib\{979c2ead-48cb-454a-adfa-a123158dd508}
HKEY_CURRENT_USER\software\paintingroom
HKEY_CLASSES_ROOT\clsid\{7ed16894-5097-7a34-ca64-b62edc94c43f}
HKEY_CLASSES_ROOT\clsid\{dfcafadd-c370-d67c-41ad-bf0e262df349}
HKEY_CURRENT_USER\software\booblogacid
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\uninstall\burnsixthenc
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{dfcafadd-c370-d67c-41ad-bf0e262df349}
HKEY_LOCAL_MACHINE\software\paintingroom
Search registry values in system registry:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
How To Remove Small.fl:
You must download ExterminateIt. It can detect Small.fl and prevent infection.
You can run trial version of ExterminateIt to detect,and then remove Small.fl manually.
- Use Task Manager to terminate the Small.fl process.
- Delete the original Small.fl file and folders.
- Delete the system registry key parameters
Note that the easiest way is to buy antivirus software and be protected 24/7/365
This antivirus, ExterminateIt effectively and automatically removes viruses from you computer.
Download ExterminateIt! to instantly get rid of Small.fl!
Check now if your PC is infected with Small.fl
You can buy full version of ExterminateIt at RegNow.com.
Also Be Aware of the Following Threats:
Win32.SQLexp Trojan Removal
Bancos.IAH Trojan Symptoms