Help me!!! My MSE cannot delete PWS:HTML/Phish.CO from 
my computer. It is driving me crazy. MSE keeps reporting this infection when I 
start up my computer. But it cannot help me to remove it. MSE scans out this 
Trojan horse and shows the “Clean Computer” button. I click the “protect me” 
option, but then AVG says, “Removing of threat has failed” and it doesn’t let me 
ignore it. How can I completely clean up this nasty thing from my computer? 
Friendly Reminder: Please try a professional trojan horse removal tool 
to remove this trojan horse once you can't remove it through the manual removal 
guide below. 
PWS:HTML/Phish.CO Description
PWS:HTML/Phish.CO is a new type of Trojan horse that belongs to the TDSS 
family. It can infect a computer by exploiting operating system vulnerability 
and it has the ability to expose your computer to download other malware like 
Trojan horse Dropper.Generic8.AXHI Virus. The virus will take root into your 
system and prevent itself from being removed from your computer. Hence, even if 
legal antivirus programs have the ability to detect out PWS:HTML/Phish.CO, it 
doesn’t mean that the malware cannot be removed automatically. The Trojan is 
equipped with a rootkit function. With this technique, it can deeply hide itself 
and keep itself safe in your computer. As a result, anti-malware program can not 
detect anything related to this malware. 
Commonly, surfing the Internet carelessly is the main reason your 
machine gets infected. The malware distributes itself through hacked legal 
webpage, drive- by downloads, spam email attachments and continuous pop- up ads. 
It will drop harmful files and make several changes on computer settings. Then, 
you will be redirected to some unknown web pages and receive a bunch of ad pop 
ups on the browser when you surf online The most obvious symptom on the presence 
of this Trojan is huge reduction in performance of the PC. Similar to other 
Trojan viruses, it is able to record and send your personal information, such as 
online accounts details, ID number and address, to cyber criminals for malicious 
purposes. Remove PWS:HTML/Phish.CO before it mess up your computer. 
What if you do not remove PWS:HTML/Phish.CO
1) It is able to bypass the security protection and mess up the infected 
machine. It deletes important system files and disables some critical programs 
and services. 3.It can make your browser redirected to all kinds of malicious 
websites. 4) It enables hackers to access to your computer without authorization 
and steal confidential information randomly as they want. 
Note: PWS:HTML/Phish.CO is a highly dangerous Trojan and it infects your 
computer through vulnerability or security program exploits. Once it is found, 
please take action immediately. Otherwise, your computer will be damaged 
severely. 
How does PWS:HTML/Phish.CO infect your PC?
The Trojan can spread via drive-by-download scripts, illicit websites 
like porn sites and gambling sites. 2.Do not open up spam email attachments, do 
not decompress multi-media downloads and social communities. The Trojan may slip 
into your computer when you click suspicious pop-ups or malicious links. 
Sometimes, some emails or files from the Internet contain the activation code of 
the Trojan. 
Note: Since PWS:HTML/Phish.CO can sneak into your computer in many 
ways, you need to be more careful when viewing websites, downloading programs or 
files or playing online games, etc. Try the manual way. It is a bit risky 
though. To effectively remove PWS:HTML/Phish.CO, you can try the manual removal. 
How to Manually Remove PWS:HTML/Phish.CO - Remove Trojan Horse Virus Step by Step
This Trojan horse is so canny that it will first block your antivirus 
program from working, in order to avoid detection and removal by the antivirus 
program, so you can try manually removing it from the infected system. Please 
back up the important data and registry before you start the manual removal in 
case of any losses during the process. Guides below can help remove it manually: 
Step1: Restart your computer in safe mode with networking. Turn on the power of your computer, press "F8" key continuously before windows starts up. Then, you will see Windows Advanced Option menu. Use the Up-Down arrow keys on your keyboard to highlight "Safe Mode with Networking" option from the list and hit "Enter" key to go on.
Step 2: End relevant Process
Keep pressing CTRL + Shift + ESC keys together to launch Windows Task Manager. Press its Processes tab, find out and click End Process button block the processes related to this Trojan virus.
[Random.exe]
Step3: Delete PWS:HTML/Phish.CO files from PC:
Navigate to directory and delete all related files below:
%windows%\system32\ PWS:HTML/Phish.CO
%documents and settings%\all users\ application data\ PWS:HTML/Phish.CO
%program files% PWS:HTML/Phish.CO
%Desktopdir%\PWS:HTML/Phish.CO.lnk
%AllUsersProfile%\{random}\
%AllUsersProfile%\{random}.lnk
Step 4: Delete registry entries from Redistry Editor
Pressing "Windows+R" keys at the same time to bring up run command box. Type "regedit" into the run box and click "Ok" button to continue. If your operating system is win7, just type “regedit” into the "Search programs and files" box in the Start menu. Remove registry keys added by PWS:HTML/Phish.CO in Registry Editor
Microsoft\Windows\CurrentVersion\Internet Settings\{ PWS:HTML/Phish.CO }
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Regedit32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current\Winlogon\”Shell” = “{random}.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\ DisplayName PWS:HTML/Phish.CO virus
Note: Of course, it's highly recommended that you should remove trojan horse in a professional way if there are still some similar probelms with your computer.
PWS:HTML/Phish.CO is one kind of threat used to provide cyber hackers 
with the access to the deep of the system and drop further complicated malware 
onto the computer. You need to remove it with the manual solution without any 
hesitation. It may bring others virus into your computer without your permission 
if it is not removed in time. Some Trojans can spread itself to other contacts 
of the victim by sending emails or instant messages. So you have to be wary of 
the drive- by downloads and suspicious websites. What’s worse, its main purpose 
is to steal your important information and tend to gain financial benefit from 
you. In short, it is necessary to remove PWS:HTML/Phish.CO as soon as possible. 
Anyway, PWS:HTML/Phish.CO should be cleaned up from your computer as quickly as 
possible. Moreover, it's clever for you to set up a professional malware removal tool to detect and remove all the feasilbe infections. 

没有评论:
发表评论