dllcache32.exe (Trojan)Removal

Symantec: Infostealer.Spunst


                                    Here's what happens. A file gets dropped into his system when the user visits a malicious site. This file executes itself thus launching its own process. This process performs several modifications to the computer's registry. These modifications prompt the launch of this process at every startup. During execution of this process, information with reference to the target system is gathered into a log file. This log file consists of several attributes such as the Usernames, Passwords, IP, Gateway and many more. This data is sent to a remote address and by applying this data, the computer can be accessed without much difficulty. This must have given you the idea that you're dealing with a Backdoor Trojan. I honestly feel that the code of this virus comprised a lot of flaws because of which its deletion process becomes simpler.


                                     The Trojan can in fact run on any platform of Windows making it quite dangerous. Still, the damage caused by it is not much and can be recovered easily. Because of its name, it is rather difficult to understand that your system is practically infected by a virus.Whatever a virus does, there is always a solution in virusdaddy! Here are the instructions to manually delete the Trojan:

Manual instructions to delete dllcache32.exe:

  1. Begin by rebooting your computer in the Safe Mode. By doing so, you can prevent the process of the virus from launching at the Startup. See this if you're having trouble booting in the Safe Mode.
  2. First, let's undo the Registry modifications done by the Trojan. Open Start --> Run and type regedit to open the Registry Editor. In the Registry, go to the following location:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
    Delete the key consisting of the value
    "NoDriveTypeAutoRun" = "dllcache32.exe" 
  3. That's the only Registry modification made by the Trojan. Now it's time to delete it permanently from your computer. To do this, go to the folder and delete the files dllcache32.exe, colectinf.tag and zipcinf.tag. The Trojan might be hidden so do this after checking the "Show hidden folders" and by unchecking the "Hide protected Operating System files" buttons in the folder options. Also delete the directory office from the same folder. You can check the links provided below if your options aren't working.
  4. Once you've done that, you can relax. 'Coz that Trojan is not going to trouble you again.

Posts that might help you here:
Enabling Safe Mode booting, Enabling the Registry , Enable Hidden files and folders option and Enabling the Command Prompt.

Install a good Firewall program to keep your personal information safe. Here are a few recommended Firewall applications

Zonealarm Extreme Security

Comodo Internet Security Complete 2011

Kaspersky Internet Security 2011 1-User
VShop
Get the best security software for your compter here!

powered by Blogger | WordPress by Newwpthemes | Converted by BloggerTheme