Start to remove TrojanSpy:HTML/Citifraud.O now!
TrojanSpy:HTML/Citifraud.O description and removal instruction

TrojanSpy:HTML/Citifraud.O

Free TrojanSpy:HTML/Citifraud.O Scan

Technical information
Payload
Removal instructions

Technical information

The TrojanSpy:HTML/Citifraud.O will install rogue security software PC Health Advisor into the affected computers without users knowledge. The TrojanSpy:HTML/Citifraud.O file size is 16384 bytes.

Payload

Once launched, the TrojanSpy:HTML/Citifraud.O performs the following actions:

  • Download rogue security tool PC Health Advisor from the following domains:
    http://www.pchealthadvisor.co.uk/
  • Modify the properties of the following files:
    %SYSTEMROOT%:\WINDOWS\winsxs\amd64_microsoft-windows-defrag-core_31bf3856ad364e35_6.1.7600.16385_none_74535a2cd1bda1d0\\defragproxy.dll

    (16384 bytes; detected by HitMalware as " TrojanSpy:HTML/Citifraud.O")
  • Removal instructions

    If your machine doesn't have antivirus/antispyware, please take the following steps to resolve the problems caused by TrojanSpy:HTML/Citifraud.O:

    1. Replace the infected file defragproxy.dll for free by using defragproxy.dll repair tool - DLL Suite. See how to replace defragproxy.dll by using DLL Suite.

    2. Perform a full TrojanSpy:HTML/Citifraud.O scan by using the latest antivirus/antispyware HitMalware.
    (Download Trial Version Now)

    MD5: 12972861297286


    How to replace defragproxy.dll by using DLL Suite

  • Download DLL Suite, install and run
  • Click "Start Scan" button to check defragproxy.dll file
  • Choose defragproxy.dll and click "More Information"
  • Download defragproxy.dll for free from the open web page
  • Save defragproxy.dll to its default folder to replace infected defragproxy.dll file.
  • Download TrojanSpy:HTML/Citifraud.O Removal Tool Now

    Download TrojanSpy:HTML/Citifraud.O Removal Tool Now