Guide to Remove TrojanDownloader:Win32/Spycos.R

Is your antivirus program informing that your computer has been infected byTrojanDownloader:Win32/Spycos.R? This is a type of malicious Trojan horse which can severely corrupt the system and you have to remove it immediately. However, you may find that your antivirus program is not able to completely remove the Trojan horse. What should you do, then? You must don’t want to spend a lot of time and money having it removed in a local computer repair shop. Why not read through this article to learn how to get rid of TrojanDownloader:Win32/Spycos.R from your machine?

TrojanDownloader:Win32/Spycos.R is defined as a hazardous Trojan horse used by cyber hackers to infect a computer mainly via freeware, hacked websites and email attachments. It can infect a computer regardless of the version of Windows OS. Once it enters you’re your computer, it can finish its installation process in a very short time. Upon its installation, this Trojan horse begins to perform the harmful payloads according to the command sent by the remote hackers. First of all, it modifies the Windows registry entries so that it can be executed every time you start up the computer. It will also change Windows start-up items, desktop icons and even system file names and paths. Besides, it will automatically download lots of malwares from a remote server via HTTP so as to generate more damage to your computer. Gradually, the system performance will be greatly decreased. You will find that it takes a longer time to accomplish an operation, like open a Word file. Like most other types of Trojan horse, TrojanDownloader:Win32/Spycos.R will keep your computer under surveillance and try to record your confidential information such as online banking account details and then transmit it to the remote hackers without your knowledge. Since this Trojan horse can perform various harmful activities inside the infected computer, it has been regarded as one of the most headachy infection for users. So, please let this nasty Trojan horse stay on your computer anymore.

Dangers of the Trojan Horse

It will make modifications to your registry so as to allow itself to run automatically whenever the Windows launches.
It will block the firewalls and antivirus programs from working normally so that it can prevent itself being detected.
It will open a backdoor and download other malwares and malicious files onto your computer to further compromise it.
It will pop up numerous annoying ads and security alert messages on your screen.
It will delete vital system files and inject malicious registry entries into the Windows registry.
It will automatically connect to the internet and upload important data and confidential information to the remote hackers.

How to Remove the Trojan Horse

To avoid unnecessary damage and losses, it is very important for you to take immediate actions to remove TrojanDownloader:Win32/Spycos.R from your computer upon its detection. There will be two removal ways introduced below. You can choose one of them to remove the threat from your computer.

1. Manual removal way:

Step 1: Reboot your infected computer. Press “F8” key continuously until the Windows Advanced Options Menu comes up. Highlight the “Safe Mode with Networking” option with the arrow keys and then press Enter.

Step 2: Press Ctrl+ Alt+ Del together to open the Windows Task Manager. In the list of all running processes, find out and terminate the processes associated with TrojanDownloader:Win32/Spycos.R.

Step 3: Click Start menu, type “folder options” into the search bar and press Enter. Under the “View” tab, tick “Show hidden files, folders and drives”, non-tick “Hide protecting operating system files (Recommended)”, and finally click OK.


Step 4: Go into the local hard disk C. Search for and delete the malicious files listed below:

%Temp%\_thundbs2.db
%AllUsersProfile%\Application Data\.dll
C:\WINDOWS\system32\drivers\serial.sys “Trojan horse name”
C:\windows\system32\drivers\mrxsmb.sys(random)

Step 5: Click the Start menu, type “regedit” into search bar and press Enter. Find out and remove any registry entries related to TrojanDownloader:Win32/Spycos.R in the Registry Editor.


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “”
HKEY_LOCAL_MACHINE\Software\Micrososft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}
HKEY_LOCAL_MACHINE\Software\Micrososft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = “” = “%Temp%\”
HKEY_LOCAL_MACHINE\Software\Micrososft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

Note: You should use extra care when performing the manual removal task. Any mistakes would cause severe system damage.

2. Automatic removal way:

A better way to remove TrojanDownloader:Win32/Spycos.R from your computer is to use an automatic removal tool. Download a professional removal tool from the internet and use it to scan your entire system immediately. Designed with sophisticated algorithm and advanced functions, the removal tool will be able to thoroughly scan out all traces of the Trojan horse and completely remove them from your computer. By using an automatic removal tool, you can save much time and energy. Most important of all, you need not to worry that your system will be damaged.