August 5, 2008

How to remove Trojan.Proscks.C

Trojan.Proscks.C may download malicious files on to the compromised computer from remote sites. When executed the trojan drops some files into 'Temp' and "%System%" directories then it copies system file "%System%\svchost.exe" to another location and modifies "%System%\svchost.exe". The Trojan also display pop-up advertisements. The infected files is detected as Trojan.Proscks.C!inf.


How to remove Trojan.Proscks.C ?
1. Perform Standard procedure for Virus removal.

2. Try to remove these files in safe-mode.(If it is there!)

%Temp%\RarSFX0\IPHOST.DLL
%Temp%\RarSFX0\iphy.dll
%Temp%\RarSFX0\xExe.dll
%Temp%\RarSFX0\loaderSvc.exe
%System%\IPHOST.DLL
%System%\_proxy.dll
%System%\iphy.dll
%System%\fhpatch.dll
%System%\fiplock.dll
%System%\IpSvchostF.dll
%System%\IPHOST.DLL
%System%\[RANDOM EIGHT CHARACTERS]\svchost.exe
%System%\IPHACTION.dll

No comments: