How to Remove Trojan:Win32/Wysotot.gen!A

Posted on May 21, 2014 by sguides

Your antivrius program sends you a warning telling you that Trojan Horse PSW.Generic11.CIZG is on your ocmputer? How did the virus attack the computer? You thought that the virus was not a big threat, believing that your antivirus program would be able to remove it, but the antivirus software disappoint you? Want to know why the virus warning keeps popping up after you removed the virus and restart your computer?

Trojan Horse PSW.Generic11.CIZGeneric11.CIZG is Trojan virus that has infected a lot of computers. It usually distributes through the Internet by email, Internet chat, and network sharing files as well as other approaches. Trojan Horse PSW.Generic11.CIZGeneric11.CIZG does not infect or modify existing files on a computer as most viruses do. It sneaks into system folders such as the Windows folder. So, the essential step to remove the Trojan from a computer should be to identify and delete the files it installed, as well as the registry links that may be pointing to it for malicious intent.

This Trojan can avoid being remove the anti-virus software by changing Windows Registry and the important settings of the antivirus program. With a computer boot, the virus is activated immediately. The Trojan slows down the computer performance because it can consume a large percent of your CUP. As a result, your computer needs a long time to respond to your action. The computer infected by the virus may also be out of your control. How annoying it is to use a clumsy computer. More seriously, the virus let cyber criminals to implant more other malware into the computer to mess up your computer. As a result , they will be able to record information that can be used to earn money, when you are visiting websites, typing in passwords or reviewing important files. So, don’t let Trojan Horse PSW.Generic11.CIZG virus stay on your computer. Remove it as early as possible. Trojan Horse PSW.Generic11.CIZG can escape from being removed by the antivirus program and even disable the antivirus program. It is so stubborn that various removal tools cannot get rid of it. Thus, manual removal can be the best way to remove it.

Trojan Horse PSW.Generic11.CIZG is a malicious Trojan virus which can install itself into the computer system without your consent and awareness. It makes your computer work slowly and implants other nasty infections into the computer. What’s worst, this Trojan allows the hacker to invade your computer to steal information that can help them make money. It is important to remove it as soon as possible. The manual removal guide below can help you get rid of the Trojan.

Step 1. End Relevant Processes

(1). Press Ctrl+Shift+Esc together to pop up Windows Task Manager, click Processes tab

*For Win 8 Users:

(1). Press Ctrl+Shift+Esc together to pop up Windows Task Manager then click Details tab

(2). Find out and end the processes of Trojan.Win32.Bublik.cfgi

Step 2. Show Hidden Files

(1). Click on Start button and then on Control Panel

(2). Click on Appearance and Personalization

(3). Click on Folder Options

(4). Click on the View tab in the Folder Options window

(5). Choose Show hidden files, folders, and drives under the Hidden files and folders category

(6). Click OK at the bottom of the Folder Options window

*For Win 8 Users:

Press Win+E together to open Computer window, click View and then click Options

Click View tab in the Folder Options window, choose Show hidden files, folders, and drives under the Hidden files and folders category

Step 3. Remove the following files:
%AllUsersProfile%\random.exe
%AppData%\Roaming\Microsoft\Windows\Templates\random.exe
%Temp%\random.exe
%AllUsersProfile%\Application Data\.dll HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Random “.exe”

Step 4. Delete Relevant Registry Entries and Files

(1). Delete the registry entries of Trojan.Win32.Bublik.cfgi through Registry Editor

Press Win+R to bring up the Run window, type “regedit” and click “OK”

While the Registry Editor is open, search and delete the related registry entries
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\[RANDOM CHARACTERS].exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” =Random
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe

Step 5. Reboot the computer normally to take effective, when the above steps are done.

Conclusion

Trojan Horse PSW.Generic11.CIZG is a horrible Trojan virus which has infected many computer with Windows operating systems across the world. Visiting hacked websites or clicking on unsafe links, opening email attachments from unknown resource or downloading freeware will result in its installation into the computer. Computer users may not realize this Trojan is on their computer until a pop-up warning message from the antivirus program installed on their computer. Trojan Horse PSW.Generic11.CIZG Trjan is very dangerous because it can do many vicious things as soon as it finishes its installation on their computer.