AdobARAM.exe

Last Updated on Wednesday, 25 July 2012 16:19 Wednesday, 25 August 2010 12:16

Worm - Ackantta

A file by the name AdobARAM.exe is created by a computer virus program that affect the computers running on the Microsoft windows operating systems. It's analysis report is given below.

Files and folders found - view
C:\Windows\System32\AdobARAM.exe
%AppData%\SystemProc\lsass.exe

Folder
%AppData%\SystemProc

This virus stops following services -
"Error Reporting Service",
and "Security Center"

This virus is identified as Palevo/ Ackantta. It sends mass mail from the affected computer.

This virus creates a malicious look alike of Lsass.exe. Read more about Lsass.exe on this page

There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of AdobARAM.exe , and after that, search the hard disk for other files created on that date or onward. See image.

Necessary steps required to remove this virus program

• To start the services created by the virus program.
• To remove processes created by the virus program from the Task Manager.
• To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found.
• To remove obsolete registry keys using CCleaner.