Adware Satbo

Type: Adware (Spyware was a generalized term used in the past)

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Systems Not Affected: DOS, Linux, Macintosh, UNIX, Windows 3.x

This adware or spyware threat can be detected only by spyware scanning software that supports expanded threats.

The Aware's Behavior

The Adware 'Satbo' is an adware program that downloads and displays advertisements.

The spyware files will be able to be detected as Adware under the filename(s) "Satbo".

This adware component must be manually installed or installed as a component of another program that you install.

File names: Setupad.exe; Svrhost.exe

When Adware Satbo runs, it performs the following actions:

Copies the Svrhost.exe file to the %System% folder.

Adds the values:

svrhost = "System\Svrhost.exe"

SM_AccessoriesName = Accessories

SM_GamesData = random value

SM_GamesSetup = 0

to the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft
\Windows\CurrentVersion\run

The spyware will attempts to download an XML file from 1234.2bro.com. The XML file contains the names of various computer game Web sites. Satbo's Adware reads this file and displays advertisements according to various parameters within the XML file.

*Run a full system spyware scan and delete all the files detected as Adware under the filename 'Satbo'.

Deleting the Spyware from the registry

Click Start, and then click Run. (The Run dialog box appears.)

Type regedit

Then click OK. (The Registry Editor opens.)

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Run

In the right pane, delete these values:

svrhost = "System\Svrhost.exe"

SM_AccessoriesName = "Accessories"

SM_GamesData = "random value"

SM_GamesSetup = "0"

Exit the Registry Editor.

Scanning for and deleting the Spyware and Adware files

Run your free spyware scanner and make sure that it is configured to scan all files.

Run a full system scan.

If any monitoring files are detected as being infected with Adware under the filename Satbo, Delete them.

You will find much more on this topic at WorldsLargestNetwork.com

WorldsLargestNetwork.com

Is Free really Free?

Free Spyware Scanner

PC Speed Boost

Create Website Easily

Computer Monitoring Software

Stop Pop Ups

Best of the Web 1 | Best of the Web 2 | Best of the Web 3 | Best of the Web 4 | Get Listed

Worlds Largest Network