Win32.Dofoil - How to remove November 23, 2011 By gabriele Win32.Dofoil is a malicious Trojan that is designed to receive and follow every command got from its remote server. This configurable virus will additionally download arbitrary files and execute them for malicious reasons. Win32.Dofoil is closely connected to rogue security softwares (System Fix and other fake defragmenters), so make sure you remove it immediately. In most of the cases, TrojanDownloader:Win32.Dofoil is distributed with a help of spam emails when, after being convinced, victims open malicious attachments or click on misleading links letting virus to come. Most of spam campaigns are using such or similar emails: From: [email protected] Subject: IRS Notification Tax notice, There are arrears reckoned on your account over a period of 2010-2011 year. You will find all calculations according to your financial debt, enclosed. You have to sick the debt by the 17 December 2011. Sincerely, IRS. Xerox Subject: Fwd: Scan from a Xerox W. Pro #16389356 Please open the attached document. It was scanned and sent to you using a Xerox WorkCentre Pro. Sent by: Guest Number of Images: 4 Attachment File Type: ZIP [DOC] WorkCentre Pro Location: machine location not set Device Name: RXX135OO6MSX6732224 As you can see, you must remove Win32.Dofoil without any delay because it will download more malware to your computer. Please, run a full system scan with updated anti-spyware program to be sure you are safe because more than 13,000 computers have been found to have this dangerous Trojan on November, 2011. Automatic Malware removal tools Download Spyhunter for Malware detection(Win) Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Download Combo Cleaner for Malware detection(Mac) Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy , Manual removal Processes: dxdiag.exe lxdiag.exe ctfmon.exe gefreg.exe [random].exe Files: <startup folder>\\dxdiag.exe <startup folder>\\lxdiag.exe <startup folder>\\ctfmon.exe <startup folder>\\gefreg.exe %appdata%\\csrss.exe %appdata%\\smss.exe Registers: HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\Run %appdata%\\csrss.exe\" HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\Run %appdata%\\smss.exe\" Win32.Dofoil facts Type: Trojan Download Spyhunter for Malware detection(Win) Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Download Combo Cleaner for Malware detection(Mac) Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy , TOC Leave a ReplyYour email address will not be published. Required fields are marked *Comment * Name * Email * Website