Start to remove TrojanSpy:Win32/Bancos.GS now!
TrojanSpy:Win32/Bancos.GS description and removal instruction

TrojanSpy:Win32/Bancos.GS

Free TrojanSpy:Win32/Bancos.GS Scan

Technical information
Payload
Removal instructions

Technical information

The TrojanSpy:Win32/Bancos.GS will install rogue security software Dr.Web anti-virus for Mac OS X into the affected machines without users knowledge. The TrojanSpy:Win32/Bancos.GS file size is 12288 bytes.

Payload

Once launched, the TrojanSpy:Win32/Bancos.GS performs the following actions:

  • Download rogue security tool Dr.Web anti-virus for Mac OS X from the following domains:
    http://www.drweb.net/
  • Modify the properties of the following files:
    %SYSTEMROOT%:\WINDOWS\System32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_7cf7ee04af725210\\atlmc.sys

    (12288 bytes; detected by HitMalware as " TrojanSpy:Win32/Bancos.GS")
  • Removal instructions

    If your machine doesn't have antivirus/antispyware, please take the following steps to resolve the problems caused by TrojanSpy:Win32/Bancos.GS:

    1. Replace the infected file atlmc.sys for free by using atlmc.sys repair tool - DLL Suite. See how to replace atlmc.sys by using DLL Suite.

    2. Perform a full TrojanSpy:Win32/Bancos.GS scan by using the latest antivirus/antispyware HitMalware.
    (Download Trial Version Now)

    MD5: 40751394075139


    How to replace atlmc.sys by using DLL Suite

  • Download DLL Suite, install and run
  • Click "Start Scan" button to check atlmc.sys file
  • Choose atlmc.sys and click "More Information"
  • Download atlmc.sys for free from the open web page
  • Save atlmc.sys to its default folder to replace infected atlmc.sys file.
  • Download TrojanSpy:Win32/Bancos.GS Removal Tool Now

    Download TrojanSpy:Win32/Bancos.GS Removal Tool Now