Thursday, November 21, 2013

Remove Trojan.FakeAV.rfz – How to Delete Trojan.FakeAV.rfz Completely?

What is Trojan.FakeAV.rfz?

Trojan.FakeAV.rfz is categorized as a malicious and tricky Trojan virus that can attack the targeted machines terribly. It is well designed by cyber criminals to steal the innocent users’ personal information for illegal benefits. Once infected, it can utilize backdoor strategy to help the remote attackers to take full control of your PC. It will execute many dangerous tasks to achieve its goals. Not only can it arbitrarily modify your system and Internet settings, but also it can change or delete your essential files against your will. Horribly, this virus is capable to add a startup entry so as to enable its automatic execution each time your Windows starts. You will be annoyed by a bunch of unwanted pop-up ads and bogus notifications when you are online. However, for the sake of your computer and valuable information, it is necessary to take immediate action to remove Trojan.FakeAV.rfz completely as soon as possible.

Tips to prevent your PC from Trojan.FakeAV.rfz:

Remember to check and enable your firewall on your PC.
Update your PC and clean up the unwanted programs frequently.
Limit user privileges on your PC.
Be cautious to use peer to peer programs.
Don’t click on suspicious links, ads and pop-ups, etc.
Download application/software from the official and reliable websites.
Never visit unknown or dangerous websites.
Use strong and complicate passwords.

How to delete Trojan.FakeAV.rfz from your compromised PC?

Solution one: Get rid of TROJ_MDROP.ATP manually.

Step one: Get your computer into Safe Mode with Networking.
1)      Turn off your infected computer and then you can select Restart to reboot it.
2)      Keep holding down F8 key until Windows Advanced Options Menu starts.
3)      And then you can use the arrow keys to navigate the “Safe Mode with Networking” option.
4)      At the end, you can press Enter key to proceed.

Step two: Terminate all the related processes of this virus from Windows Task Manager.
1)      You can open Windows Task Manager by pressing CTRL+SHIFT+ESC or CTRL+ALT+DEL keys. If that didn’t work, you can try another way. Click Start menu and click the Run option. This will start the Run tool. And then type taskmgr into the box and click OK. This should start the Windows Task Manager.

2)      Scroll the list from Processes tab to find out all the related running processes of this pesky virus. And then you can terminate the selected processes promptly by clicking “End Process” button.

Step three: Search for and delete all the files associated with this virus from your PC.
1)      Click Start menu and then you should select Search.
2)      Search for and delete all the following files manually and totally from your compromised PC.

%Windows%\system32\[rnd].
%AllUsersProfile%\Application Data\[tmp]
C:\windows\system32\services.exe\””
C:\Windows\winsxs\amd64_microsoft-windows-none_2b54b20ee6fa07b1\””

Step four: Clean up all the registry entries relevant to the Trojan from Registry Editor.
1)      Open Registry Editor by selecting Run from the Start menu, type regedit into the box and click OK to proceed.
2)      When Registry Editor opens, search for and clean up all the registry entries of this virus.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ‘0’
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunRegedit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit”
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\{rnd}=

Step five: Please restart your computer normally after all the above steps are done.

Solution two: Delete TROJ_MDROP.ATP automatically.

If you have trouble with manual removal, it is not advised to anyone, particularly for a PC novice. It may lead to irreparable system damage. In this case, it is highly recommended you to use a professional and powerful removal tool to delete Trojan.FakeAV.rfz. Not only can it free scan your whole PC, but also can delete the threat with a few clicks.


No comments:

Post a Comment