Start to remove TrojanDownloader:BAT/Adfer.A now!
TrojanDownloader:BAT/Adfer.A description and removal instruction

TrojanDownloader:BAT/Adfer.A

Free TrojanDownloader:BAT/Adfer.A Scan

Technical information
Payload
Removal instructions

Technical information

The TrojanDownloader:BAT/Adfer.A will install rogue security software Ashampoo Internet Accelerator 3 into the affected machines without users knowledge. The TrojanDownloader:BAT/Adfer.A file size is 30208 bytes.

Payload

Once launched, the TrojanDownloader:BAT/Adfer.A performs the following actions:

  • Download rogue security tool Ashampoo Internet Accelerator 3 from the following domains:
    http://www.ashampoo.com
  • Modify the properties of the following files:
    %SYSTEMROOT%:\WINDOWS\System32\DriverStore\FileRepository\mdmnokia.inf_amd64_neutral_a8e9a41983d33a0b\\MSIRCOMM.sys

    (30208 bytes; detected by HitMalware as " TrojanDownloader:BAT/Adfer.A")
  • Removal instructions

    If your machine doesn't have antivirus/antispyware, please take the following steps to resolve the problems caused by TrojanDownloader:BAT/Adfer.A:

    1. Replace the infected file MSIRCOMM.sys for free by using MSIRCOMM.sys repair tool - DLL Suite. See how to replace MSIRCOMM.sys by using DLL Suite.

    2. Perform a full TrojanDownloader:BAT/Adfer.A scan by using the latest antivirus/antispyware HitMalware.
    (Download Trial Version Now)

    MD5: 29271302927130


    How to replace MSIRCOMM.sys by using DLL Suite

  • Download DLL Suite, install and run
  • Click "Start Scan" button to check MSIRCOMM.sys file
  • Choose MSIRCOMM.sys and click "More Information"
  • Download MSIRCOMM.sys for free from the open web page
  • Save MSIRCOMM.sys to its default folder to replace infected MSIRCOMM.sys file.
  • Download TrojanDownloader:BAT/Adfer.A Removal Tool Now

    Download TrojanDownloader:BAT/Adfer.A Removal Tool Now