Click on screenshot to zoom
Danger level 8
Type: Trojans
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Slow Computer

Trojan.Chebri.A

Trojan.Chebri.A is a malicious program that can perform various undesirable actions on your computer depending on its configuration. Trojans like this usually enters your system pretending to be something else. For example, Trojan.Chebri.A can come bundled together with a shareware program that performs a desirable function, or you can download it accidentally via a drive-by download, when you land on an infected webpage. Also, Trojans have been using social network engineering for their distribution lately, so you must be very careful when you click on links you receive via a personal message. If you are not sure about the authenticity of the message, it is better to contact the person who sent it, before clicking on the link.

Either way, when Trojan.Chebri.A is there, you can hardly do anything about it, because it is hard to tell that the infection has taken place already. The Trojan has no interface, and so you should check your Windows Task Manager for processes related to the parasite to determine its presence. For example, regsrv64.exe is the first indicator of the infection, and this process file is classified as a system backdoor, which means that if you get infected by Trojan.Chebri.A, this Trojan opens a backdoor in your computer, allowing other types of malware enter easily.

That is of no surprise, because privacy.exe is also included in the list of Trojan.Chebri.A processes. Privacy.exe is actually a cornerstone process of Privacy Protection rogue antispyware application, so it could be implied that Trojan.Chebri.A is directly related to Privacy Protection’s distribution system, and you can be sure to get infected with Privacy Protection, if you already have the Trojan. Thus, Trojan.Chebri.A infection puts at stake not only your computer, but also your financial funds, because rogues always target your money first.

When Trojan.Chebri.A settles down in your computer, it reports the infection to remote hosts through port 20001, connecting to servers 225.225.225.255 and prox.fatgirlsloveme.com. Then it receives configuration data from a hacker and downloads various arbitrary files (like Privacy Protection for example) that are executed immediately. Apart from downloading other malware, Trojan.Chebri.A can also steal your sensitive information and upload it to the above mentioned remote servers.

Due to such grave implications of the infection, you must terminate Trojan.Chebri.A as soon as you can, using a reliable security product. Of course, you can also remove the Trojan manually, but it might take a lot of time and efforts, so resort to the more efficient way, and safeguard your computer against similar attacks.

Download Spyware Removal Tool to Remove* Trojan.Chebri.A
  • Quick & tested solution for Trojan.Chebri.A removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Trojan.Chebri.A

Files associated with Trojan.Chebri.A infection:

regsrv64.exe
6.exe
C6.exe
F1.exe
2541.exe
2.exe
1E88.exe
DF25.exe
a4y34y3a4.exe
7D5A.exe
4FA7.exe
1498.exe
yl18jml8.exe
pdwa.exe
hbg.exe
dmy.exe
33105.exe
121B.exe
114.tmp
XAvkK0RISlH9eE.exe
Wzs.exe
ufn.exe
tMfQnhnjewmTtoH.exe
serial.sys
sav.exe
privacy.exe
jowpjdovz.exe
ipsec.sys
dfsc.sys
ch31m9DzgQksev.exe
bjGhnApZCwoyto.exe
AcroIEHelpe064.dll
xmlrpw32.dll
roLWU60eG8txeP.exe
pGONmFwqUnrH.exe
LHB7QIP0.exe
JFhHPRcFiCtyNEO.exe
hxpuugsr.exe
H8zoF6CriLrHs8.exe
3i8qB.exe
1216.exe

Trojan.Chebri.A DLL's to remove:

AcroIEHelpe064.dll
xmlrpw32.dll

Trojan.Chebri.A processes to kill:

regsrv64.exe
6.exe
C6.exe
F1.exe
2541.exe
2.exe
1E88.exe
DF25.exe
a4y34y3a4.exe
7D5A.exe
4FA7.exe
1498.exe
yl18jml8.exe
pdwa.exe
hbg.exe
dmy.exe
33105.exe
121B.exe
XAvkK0RISlH9eE.exe
Wzs.exe
ufn.exe
tMfQnhnjewmTtoH.exe
sav.exe
privacy.exe
jowpjdovz.exe
ch31m9DzgQksev.exe
bjGhnApZCwoyto.exe
roLWU60eG8txeP.exe
pGONmFwqUnrH.exe
LHB7QIP0.exe
JFhHPRcFiCtyNEO.exe
hxpuugsr.exe
H8zoF6CriLrHs8.exe
3i8qB.exe
1216.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.