How to remove TROJ_RANSOM.AQWA trojan

[Enriqueta]

Sponsored Links

Hi buddies, I have recently purchased a new laptop which loaded with Windows Vista OS. But now my laptop is infected with TROJ_RANSOM.AQWA trojan. I have tried to many ways to remove this virus. This virus creates a numbers of file and folders in my system. It is also takes a entire control of my computer and restricting to use application. I want a good removal solution for this virus. So can any one will help me please?

[Steve123]

This malware can be generates by WORM_RANSOM variants. This may comes contains through malware packages as a malware component.

This creates the a non-malicious configuration file through a specific file name.

This makes registry entries to makes it enable its automatic run at all time system startup.

[Shen]

Remove the given below registry key:

• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\

Installed Components
-- {F14656H1-VMVK-A5RL-RUFL-D0BR00B4E551}

• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\

Installed Components
-- {Y479C7A0-OTRV-U8KH-S1UE-E0BC10B4E879}

[Big Fish]

Locate and remove given files

*Note: There may be some component files that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.

• {malware path}\oodcnt3.ini

[Snake08]

This trojan makes the given registry entry to makes it enable its automatic execution at all time system startup:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\

{F14656H1-VMVK-A5RL-RUFL-D0BR00B4E551}
StubPath = "{malware path and file name}"

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\

{Y479C7A0-OTRV-U8KH-S1UE-E0BC10B4E879}
StubPath = "{malware path and file name}"