Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

Backdoor.Graybird belongs to the Backdoor Trojan family and allows the creator to access to your PC without your knowledge and permission. The remote attacker can take full control of your machine and all the data that is kept on it. The existence of the file, Svch0st.exe, is a sign of a probable infection. Graybird may spread itself in the form of an email attachment that it sends to all addresses that it finds in your PC. Backdoor.Graybird is a serious danger to the security of your personal and financial data, therefore it should be removed immediately.

Automated Detection for Backdoor.GrayBird

Backdoor.GrayBird Manual Removal Instructions

Stop Backdoor.GrayBird system processes:

Puesto.exe
%SYSTEMROOT%\\system32\\explore.exe
VPort1.1.exe
prsvr.exe
GrayPigeon.exe
Hacker.com.cn.exe
Server1.2.exe
WINDOWS111.exe
brc_Server.exe
  h_client.exe
  backdoor.graybird.w.exe
  backdoor.graybird.p.exe
  backdoor.graybird.m.exe
  backdoor.graybird.f.exe
  backdoor.graybird.e.exe
  backdoor.graybird.c.exe
  930905eb.exe
  50b825f5.exe
-396109520.exe,  50b825f5.exe,  930905eb.exe,  backdoor.graybird.c.exe,  backdoor.graybird.e.exe,  backdoor.graybird.f.exe,  backdoor.graybird.m.exe,  backdoor.graybird.p.exe,  backdoor.graybird.w.exe,  h_client.exe-396109520.exe

Unregister Backdoor.GrayBird DLLs:

brc_Server.dll
backdoor.graybird.s.dll
backdoor.graybird.m.dll
backdoor.graybird.l[2].dll
backdoor.graybird.l.dll

Remove Backdoor.GrayBird files:

Puesto.exe
cmdle.com
VPort1.1.exe
prsvr.exe
GrayPigeon.exe
Hacker.com.cn.exe
Server1.2.exe
WINDOWS111.exe
RAVMOND
brc_Server.exe
brc_Server.dll
sserver.dat
operate.ini
help.chm
heibai.net.txt
h_client.cht
h_client.chs
cserver_dll.dat
cserver.dat
backdoor.graybird.s.dll
backdoor.graybird.m.dll
backdoor.graybird.l[2].dll
backdoor.graybird.l.dll
  h_client.exe
  backdoor.graybird.w.exe
  backdoor.graybird.p.exe
  backdoor.graybird.m.exe
  backdoor.graybird.f.exe
  backdoor.graybird.e.exe
  backdoor.graybird.c.exe
  930905eb.exe
  50b825f5.exe
-396109520.exe,  50b825f5.exe,  930905eb.exe,  backdoor.graybird.c.exe,  backdoor.graybird.e.exe,  backdoor.graybird.f.exe,  backdoor.graybird.l.dll,  backdoor.graybird.l[2].dll,  backdoor.graybird.m.dll,  backdoor.graybird.m.exe,  backdoor.graybird.p.exe,  backdoor.graybird.s.dll,  backdoor.graybird.w.exe,  cserver.dat,  cserver_dll.dat,  h_client.chs,  h_client.cht,  h_client.exe,  heibai.net.txt,  help.chm,  operate.ini,  sserver.dat-396109520.exe

Remove Backdoor.GrayBird registry values:

SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices\\RAVMOND

Important Disclaimer

What is a Backdoor?

Backdoor.Graybird is a Backdoor.

Backdoor is an application that may enter your computer without your knowledge or consent and create a backdoor through which an attacker could control your system. Backdoor may get secrectly inside your computer with the help of viruses and worms or sometimes may come bundled with other adware programs. Though backdoor may be used in order to access particular program for troubleshooting or other intentions, it is still dangerous because attackers may detect and exploit them. There may be three types of Backdoors. The ones that make connections to one or more host, the ones that are on one or more ports for incoming connections and those that originate from poorly-written programs.

Backdoor.Graybird is related to:

  » No related posts

This entry was posted on Thursday, June 21st, 2007 at 5:41 am and is filed under Backdoors. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.