TDSSConf.A
TDSSConf.A is a dangerous malware infection that may install harmful compressed files onto the affected PC system. Once TDSSConf.A installs on your computer system, it always traces your online activities and steals your confidential data, such as credit card information, bank details, login details, etc. TDSSConf.A can create additional files that add files that run on the hard disk. You need to remove TDSSConf.A immediately from your computer before it harms your PC system.
File System Details
TDSSConf.A may create the following file(s):
# | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|
1. | C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe | |
2. | C:\Program Files\Mozilla Firefox\firefox.exe | |
3. | C:\Program Files\SafeConnect\scManager.sys | |
4. | C:\WINDOWS\system32\hkcmd.exe | |
5. | C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe | |
6. | C:\WINDOWS\system32\ctfmon.exe | |
7. | C:\Program Files\iPod\bin\iPodService.exe | |
8. | C:\Program Files\Bonjour\mDNSResponder.exe | |
9. | C:\WINDOWS\Explorer.EXE | |
10. | C:\WINDOWS\AGRSMMSG.exe | |
11. | C:\Program Files\Winamp\winampa.exe | |
12. | C:\Program Files\SafeConnect\scClient.exe | |
13. | C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe | |
14. | C:\WINDOWS\system32\svchost.exe | |
15. | C:\WINDOWS\SOUNDMAN.EXE |
Registry Details
TDSSConf.A may create the following registry entry or registry entries:
HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
HKLM\..\Run: [ATSwpNav] "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run
HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page
HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page
HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.