Effectively Remove TrojanDropper:Win32/Lisfel.A

Posted on May 27, 2014 by admin

Are you suffering from the slow performance of the PC? Do you find a threat namedTrojanDropper:Win32/Lisfel.A on your computer when running your antivirus program to scan your whole system? Does this Trojan horse come back to your computer after you have deleted it with your antivirus program? So what should you do? Leave it alone? No. This is a threat that you must remove as soon as possible. Why not read through this post and learn how to effectively get rid of TrojanDropper:Win32/Lisfel.A from your infected PC?

TrojanDropper:Win32/Lisfel.A is detected as a malicious Trojan horse that penetrates into your system quietly and generates all sorts system issues by performing a series of malicious activities. This vicious Trojan horse is easy to get installed on your computer when you have following online activities: open unknown email attachments; click on suspicious links; browse unsafe websites; download free music files, videos, and programs from unknown sources, etc. Therefore, to protect your computer from Trojan horse infection, you’d better be very careful when surfing on the internet.

When the Trojan horse gets installed on your computer via the means mentioned above, it will quickly start all kinds of activities to complete its tasks. It will firstly shut down the firewall and disable the security tools to ensure its long presence on your computer. Then it will modify your registry entries so that it can automatically run whenever Windows logs on. Thus, it can perform its malicious actions unscrupulously on your computer. To further destroy your system, TrojanDropper:Win32/Lisfel.A will automatically download other malwares onto your computer. Besides, it imbeds malicious registry entries into the Windows registry and deletes some system files that are vital to the stability and security of your system. What’s more, it allows the hackers to visit your computer with ease and helps collect you precious data and confidential information, such as online bank account details, for the remote hackers. It is no doubt that having this Trojan horse on your computer is very dangerous, so it is strongly suggested to clean up this threat promptly.

How to Manually Remove the Trojan Horse

Step 1: Restart your infected computer and keep pressing F8 key repeatedly. When the Windows Advanced Options Menu shows, select “Safe Mode with Networking” with the arrow keys and then press Enter.

Step 2: Press keys Ctrl+ Alt+ Del together and go into the Windows Task Manager. Select the tab of Processes and stop TrojanDropper:Win32/Lisfel.A related processes immediately.

Step 3: Navigate to the local hard disk C and then delete the malicious files as follows:

%AppData%\NPSWF32.dll
%AppData%\Protector-.exe
%AppData%\Protector-.exe
%AppData%\result.db
%AppData%\1st$0l3th1s.cnf

Step 4: Click on the Start menu, type “regedit” into the command box and click on “regedit” from the result list. This will start the Registry Editor. Then you need to find and delete all TrojanDropper:Win32/Lisfel.A related registry entries listed below:


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-8-6_3″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “tvejcklnjs”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advxdwin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\clean.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\system.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ppvstop.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vsecomr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution O
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iamapp.exe

How to Automatically Get Rid of the Threat

To thoroughly detect and remove this nasty Trojan horse, it is highly recommended to run an advanced Trojan horse removal tool. A quality removal tool will help automatically detect out the malicious components of the Trojan horse and then forcibly remove all of them out of your PC. Take the steps below to remove TrojanDropper:Win32/Lisfel.A:

Step 1: Download an advanced removal tool from the Internet.
Step 2: Follow the installation wizard to install the removal tool on your computer.
Step 3: Remove the detected threats out of the computer and restart the computer to implement the changes.

Note: If you are a newbie, it would be difficult for you to remove the Trojan horse manually, since you need to search for and delete the files and registry entries all by yourself. Supposing that you mistakenly delete any important system files, it will lead to serious system problems. Actually, it is much easier and safer to automatically eliminate TrojanDropper:Win32/Lisfel.A by using a professional Trojan horse removal tool. The most important thing is that, it won’t run the risk of damaging your computer system by empowering a removal tool to perform the removal task.