Remove the Trojan.Inject.WX

[Gaelic]

Hi friends, I suffering some system problem with Trojan.Inject.WX virus. This virus using extensive of CPU which makes system extremely slow. This idiot virus also display some pop up on the screen at specific time of interval. This malware collecting some important data and information from the hard disk and trying to using internet connection. Can any one help me to remove Trojan.Inject.WX virus from my computer?

[Milton.J]

I think you have to try by installing an Avast Anti-Virus. Avast Anti-Virus can be the best Anti-Virus that can help you to deal with the trojans that can be available on your computer system. I suggest you to install the Bit defender anti -Virus on your system. You can not required to update the Bit defender anti -Virus software as the Bit defender anti -Virus can be automatically updated by itself whenever you can get connected with the internet.

[Spyrus]

The Trojan.Inject.WX virus can be of the type Trojan as the Trojans can not be replicated by itself. The following can be the symptoms of the Trojan.Inject.WX as :
1. When you can find the presence of a files whose name can be wcoredg.exe in the windows directory %windir%\system32\ that can be hidden.
2. You can also came to know about the Trojan.Inject.WX whenever the network activities can be Increased on your computer system.

[Snake08]

In order to avoid the detection it can performs the following :
1. The Trojan.Inject.WX can disable the services that can be associated with the different firewall and Anti-Virus products like Nod32krn, KPF4, SophosClientFirewalletc if they all can be available.
2. It can adds itself in the Firewall of the windows exceptions list under the name "LAN Router".
3. It can try to end the following processes if they can be found :
WITSETUP.EXE
AVINSTALL.EXE
K7TS_SETUP.EXE
P08PROMO.EXE
ISSDM_EN_32.EXE
VIPRE.EXE
4. If it finds but cannot end a process from the above mentioned list the computer can be switched off.

[Zachary]

The Trojan.Inject.WX can modifies the following registry values as :
1. To corrupt the System Restore :
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\DisableSR = 1
2. To hide the firewall and anti-Virus security warnings that can be related to it :
HKLM\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify = 1
HKLM\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify = 1
3. It can also changes the hosts file in order to link to the different anti-malware sites to the address 203.151.73.99.
4. To automatically execute on start-up of the Windows :
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\conime.exe\Debugger = wcoredg.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\conime.exe (clean file)