Trojan and Malware "Puper" Removal

This section provides tutorial notes on how to remove 'Puper' generated .EXE files.

My only experience with Trojan Puper was again on my friend's computer this summer. While looking at the c:\windows\system32, I noticed 3 strange suspicious files:

>dir C:\WINDOWS\system32
07/21/2006  09:43 PM            17,750 vqfupqnr.exe
07/24/2006  12:22 AM            17,750 opuryycl.exe
07/24/2006  09:51 PM            17,750 uceysmkw.exe

I zipped all 3 suspicious files into a zip file, exe_200607.zip, and delete them from the system directory.

When I tried to open this zip file, my McAfee VirusScan On-Access Scan showed and reported that those files are Puper trojans:

vqfupqnr.exe   Puper   Trojan  Deleted
opuryycl.exe   Puper   Trojan  Deleted
uceysmkw.exe   Puper   Trojan  Deleted

Okay. This was nice. VirusScan is doing the job to pretect my system. But that VirusScan report seemed wrong. None of the Puper descriptions on the Internet says that Puper Trojan will create an .exe file with a name of 8 random letters.

I need to find another virus detection tool to look those suspicious files.

Takeaways:

Table of Contents

 About This Book

 Introduction to Microsoft Windows

 Introduction to Windows Explorer

 Introduction to Internet Explorer

 "Paint" Program and Computer Graphics

 GIMP - GNU Image Manipulation Program

 JPEG Image File Format Quality and Size

 GIF Image File Format and Transparent Background

 "WinZip" - ZIP File Compression Tool

 "WinRAR" - RAR and ZIP File Compression Tool

 FTP Server, Client and Commands

 "FileZilla" - Free FTP Client and Server

 Web Server Log Files and Analysis Tool - "Analog"

 Spyware Adware Detection and Removal

 IE Addon Program Listing and Removal

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

Trojan and Malware "Puper" Description and Removal

 What Is Trojan Puper

Trojan and Malware "Puper" Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 Spybot - Spyware Blocker, Detection and Removal

 Setting Up and Using Crossover Cable Network

 Home Network Gateway - DSL Modem/Wireless Router

 Windows Task Manager - The System Performance Tool

 "tasklist" Command Line Tool to List Process Information

 "msconfig" - System Configuration Tool

 Configuring and Managing System Services

 Windows Registry Key and Value Management Tools

 Startup Programs Removal for Better System Performance

 Winsock - Windows Sockets API

 Java on Windows

 Glossary of Terms

 Outdated Tutorials

 References

 Full Version in PDF/ePUB