Start to remove Worm:Win32/Decoy.A now!
Worm:Win32/Decoy.A description and removal instruction

Worm:Win32/Decoy.A

Free Worm:Win32/Decoy.A Scan

Technical information
Payload
Removal instructions

Technical information

The Worm:Win32/Decoy.A will install rogue security software AV Security 2012 into the affected computers without users knowledge. The Worm:Win32/Decoy.A file size is 487936 bytes.

Payload

Once launched, the Worm:Win32/Decoy.A performs the following actions:

  • Download rogue security tool AV Security 2012 from the following domains:
    http://download.cnet.com/
  • Modify the properties of the following files:
    %SYSTEMROOT%:\WINDOWS\System32\\catsrvut.dll

    (487936 bytes; detected by HitMalware as " Worm:Win32/Decoy.A")
  • Removal instructions

    If your machine doesn't have antivirus/antispyware, please take the following steps to resolve the problems caused by Worm:Win32/Decoy.A:

    1. Replace the infected file catsrvut.dll for free by using catsrvut.dll repair tool - DLL Suite. See how to replace catsrvut.dll by using DLL Suite.

    2. Perform a full Worm:Win32/Decoy.A scan by using the latest antivirus/antispyware HitMalware.
    (Download Trial Version Now)

    MD5: 61642166164216


    How to replace catsrvut.dll by using DLL Suite

  • Download DLL Suite, install and run
  • Click "Start Scan" button to check catsrvut.dll file
  • Choose catsrvut.dll and click "More Information"
  • Download catsrvut.dll for free from the open web page
  • Save catsrvut.dll to its default folder to replace infected catsrvut.dll file.
  • Download Worm:Win32/Decoy.A Removal Tool Now

    Download Worm:Win32/Decoy.A Removal Tool Now