How to remove 9b9w3.exe

9b9w3.exe , qbr2q.exe

Files size 115,127 bytes
MD5: A3AA1A141DAA37A2953199432E9596CF

SHA-1: ED65F5F7DE87C018813CEDBB38DC863E0D142D53

=================================================

Files created

C:\Documents and Settings\[UserName]\Local Settings\Temp\herss.exe

C:\Documents and Settings\[UserName]\Local Settings\Temp\cvasds0.dll (0-9)

X:\9b9w3.exe

X:\qbr2q.exe

X:\autorun.inf

Registry Modifications
Key Added
HKLM\SOFTWARE\Classes\CLSID\MADOWN\

Values Added
HKLM\Software\Classes\CLSID\MADOWN\urlinfo : dsa2xsa.z
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
cdoosoft = "%Temp%\herss.exe"

Values modified
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ Folder\Hidden\SHOWALL\CheckedValue: 0x00000000 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ShowSuperHidden: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ NoDriveTypeAutoRun: 0x00000091

Remote Host
218.59.144.136 port 80
218.59.144.140 port 80

URLs to be download / data identified
http://www.googlei9p.com/1mg/am1.rar > %temp%\am1.exe
http://www.sinaj29.com/1mg/am.rar > %temp%\am1.exe

-------------------------------------------------------------

วิธีกำจัด/แ้ก้ virus : 9b9w3.exe , qbr2q.exe

-------------------------------------------------------------

Download : PeeTechFix-Win32/PSW.OnlineGames 2.0.5