March 12, 2010

How to remove Trojan Backdoor.Sykipot?

Trojan Backdoor.Sykipot opens a port on the infected computer, It allows a remote attacker to acceess and control the computer. This Trojan can End processes, Upload and Download data.
How to remove Trojan Backdoor.Sykipot?


1. Perform standard procedure for Virus removal.
** Standard procedure for Virus removal

2. Remove the following entries from windows registry
** Use at your own risk

** How to edit windows registry ?


Remove these values from registry


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"notes" = "c:\documents and settings\administrator\local settings\temp\notes.exe -installkys"

Remove these files if exist

%Temp%\notes.exe
%Temp%\rsvm.exe
%Temp%\wshipnotes.dll
%Temp%\clipsvc.exe
%Temp%\wshipl.dll


No comments: