What is Enqvwkp Toolbar?
Type: Virus | Category: Trojans and viruses | Discovered: 19 January 2008
Enqvwkp Toolbar is installed by a trojan also known as Trojan.FakeSecurityAlert. Custom desktop background is changed into a red background with a sort of biohazard symbol in the middle, saying "Download Privacy Protector". Having Enqvwkp Toolbar installed, fictitious computer security related popups are appearing with the following content:
Spyware Alert Security Warning! Worm.Win32.Netsky detected on your machine. This virus is distributed via the internet through e-mail and Active-x objects. The worm has its own SMTP engine wich means it gathers e-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. This process should be removed from your system.
Besides the user is informed that Windows ME, 2000, NT, XP, Vista can be affected and prompted to click Yes button in order to clean the computer from assumed infection.
Related websites that we do not recommend to visit:
viruswebprotect.com
scanner.adwareremover2007.com
Fake anti-spyware software related to Enqvwkp Toolbar:
Error Cleaner
Privacy Protector
Spyware & Malware protection
Spyware Alert:
Spyware Alert Security Warning! Worm.Win32.Netsky detected on your machine. This virus is distributed via the internet through e-mail and Active-x objects. The worm has its own SMTP engine wich means it gathers e-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. This process should be removed from your system.
Besides the user is informed that Windows ME, 2000, NT, XP, Vista can be affected and prompted to click Yes button in order to clean the computer from assumed infection.
Related websites that we do not recommend to visit:
viruswebprotect.com
scanner.adwareremover2007.com
Fake anti-spyware software related to Enqvwkp Toolbar:
Error Cleaner
Privacy Protector
Spyware & Malware protection
Spyware Alert:
Enqvwkp Toolbar removal tool:
- Spyware Doctor (see here for the installation guide)
Enqvwkp Toolbar Entries:
The following dll files are created: agrlmvp.dll, bmlvqkn.dll, ddwlxtqdgx.dll, ddwlxtqdpn.dll, ddwlxtqfls.dll, ddwlxtqfvg.dll, ddwlxtqgmq.dll, ddwlxtqlmr.dll, ddwlxtqnow.dll, ddwlxtqowd.dll, ddwlxtqqwt.dll, ddwlxtqtno.dll, ddwlxtqxdm.dll, dnqdlpmmwv.dll, dnqdlpmoxw.dll, enqvwkp.dll
The following files are created:
C:\WINDOWS\fxtqdrl.exe
Hijackthis Entries:
O2 Entries:
O2 - BHO: XTN Monitor - {E587DEAB-947E-4BF0-8439-BDC82913A9AE} - C:\WINDOWS\ddwlxtqdpn.dll
O3 Entries:
O3 - Toolbar: The enqvwkp - {FFB13247-794A-4E4F-8B97-937F906013D1} - C:\WINDOWS\enqvwkp.dll
* can also be found under these CLSIDs:
{12A25CE9-0A93-4074-9516-A5B1A83141C9}
{31F68405-A7AE-4D05-917C-97C4CBFE05A0}
{79BAB47C-EA45-42FE-A91C-9325A6B4E3BF}
{92162A1C-A9E3-4C0C-BCDC-2996E8406887}
{A276B2DF-BC3A-4144-9902-58BA41D7203F}
{B1B10992-4C8F-4F54-85B2-CB3CA788E498}
{CC4B2067-D903-427A-854B-632735A570D9}
{EDE7317E-985F-4F9E-B8BB-A6B244BFD457}
{F1348462-25DE-4F17-869F-BAAFE04DD599}
{F87BF6BA-93BE-407D-9A5C-7721CA72CD37}
{FFB13247-794A-4E4F-8B97-937F906013D1}
O21 Entries:
O21 - SSODL: agrlmvp - {87B6A2D7-C7D1-4CBA-BB23-6B3478739F95} - C:\WINDOWS\agrlmvp.dll
O21 - SSODL: bmlvqkn - {FB9E1B56-0ED0-4D6E-9D6B-FB2C3C30C688} - C:\WINDOWS\bmlvqkn.dll
O2 - BHO: XTN Monitor - {E587DEAB-947E-4BF0-8439-BDC82913A9AE} - C:\WINDOWS\ddwlxtqdpn.dll
O3 Entries:
O3 - Toolbar: The enqvwkp - {FFB13247-794A-4E4F-8B97-937F906013D1} - C:\WINDOWS\enqvwkp.dll
* can also be found under these CLSIDs:
{12A25CE9-0A93-4074-9516-A5B1A83141C9}
{31F68405-A7AE-4D05-917C-97C4CBFE05A0}
{79BAB47C-EA45-42FE-A91C-9325A6B4E3BF}
{92162A1C-A9E3-4C0C-BCDC-2996E8406887}
{A276B2DF-BC3A-4144-9902-58BA41D7203F}
{B1B10992-4C8F-4F54-85B2-CB3CA788E498}
{CC4B2067-D903-427A-854B-632735A570D9}
{EDE7317E-985F-4F9E-B8BB-A6B244BFD457}
{F1348462-25DE-4F17-869F-BAAFE04DD599}
{F87BF6BA-93BE-407D-9A5C-7721CA72CD37}
{FFB13247-794A-4E4F-8B97-937F906013D1}
O21 Entries:
O21 - SSODL: agrlmvp - {87B6A2D7-C7D1-4CBA-BB23-6B3478739F95} - C:\WINDOWS\agrlmvp.dll
O21 - SSODL: bmlvqkn - {FB9E1B56-0ED0-4D6E-9D6B-FB2C3C30C688} - C:\WINDOWS\bmlvqkn.dll