I was cleaning my computer with unnecessary files when I stumbled with these files a3kebook.ini / akebook.ini . Except for the slowdown, I am not experiencing other problem. But to make sure I searched over the Internet and found out that the file in question is a keylogger Probot. It is also associated in programs Netzip & Netscape Download Accelerator.
If your experiencing problems or when suddenly computer makes dials itself, you may want to remove it from your system. Here’s a fix from Bleeping Computer in removing the keylogger:
Go to Add\Remove Programs and search for anything that would relate to Netzip, Netscape Download Accelerator and Probot.
Remove any traces found. Make sure Windows is Showing Hidden Files.
Locate and Delete any of these found
C:\WINDOWS\adult_chat.exe<- File
C:\WINDOWS\a3kebook.ini<- File
C:\WINDOWS\akebook.ini<- File
C:\WINDOWS\SYSTEM32\vmplay.dll<- File
C:\WINDOWS\SYSTEM32\npnzdad.exe<- File
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Watch.lnk
C:\WINDOWS\twain_32\S6U12BX<- Folder
C:\program files\pinfo<- Folder
C:\program files\hbt<- Folder
C:\program files\nog<- Folder
C:\program files\nethunter group<- Folder
C:\program files\common files\netzip download demon<- FolderOpen HijackThis and put a check by these but DO NOT hit the Fix Checked button yet
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trafficswarm.com/cgi-bin/swarm....5bff8770fc4c48a
O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\S6U12BX\WATCH.exe
O16 - DPF: {084F552D-19EB-4668-9788-984CBC781A8F} (AsyncDownloader Class) - http://survey.otxresearch.com/Preloader.dllNow Make sure ALL WINDOWS and BROWSERS are CLOSED and hit the Fix Checked Button
Last lets get a hefty Reg Cleaner and move out all dead registry entries
RegSupreme Pro
http://majorgeeks.com/RegSupreme_Pro_d4256.html
Once downloaded and launched,Click Yes to Update the Cache-> Click “Registry Cleaner”-> Click “Aggresive” and “Start”-> Fix everything it finds-> Name the Backup it creates and Save it somewhere safe
After all this,have the PC scanned.
Related Tags
Very useful indeed. Never knew I had these files, luckily Combofix found them for me. Cheers.