Wednesday, March 25, 2009

How to remove SafeMass Trojan from your system

Today we found a new trojan called SafeMass.exe on our office pc. Most of the recent updated antivirus can't detect or remove it from PC. So that we have to remove it manually.

At the very first, close it from your system tray then remove its autorun entry from registry. Here is the registry key location-

\REGISTRY
\MACHINE
\SOFTWARE
\Microsoft
\Windows
\CurrentVersion
\Run
\SafeMass

And then Remove SafeMass.exe from your system

This trojan also create a autorun.inf file with following contents
[autorun]
open=SafeMass.exe
shellexecute=SafeMass.exe
shell\auto=&Auto
shell\auto\command=SafeMass.exe
shell\explore=&Explore
shell\explore\command=SafeMass.exe
shell\find=S&earch...
shell\find\command=SafeMass.exe
shell\open=&Open
shell\open\command=SafeMass.exe

Remove it too..

Thats it.

No comments:

Post a Comment

Vote Cox's Bazar To The New7wonders In Nature.

Give away of the day for www.ferdous.tk