Start to remove DDoS:Win32/Decill.A now!
DDoS:Win32/Decill.A description and removal instruction

DDoS:Win32/Decill.A

Free DDoS:Win32/Decill.A Scan

Technical information
Payload
Removal instructions

Technical information

The DDoS:Win32/Decill.A will install rogue security software Impassable into the affected machines without users knowledge. The DDoS:Win32/Decill.A file size is 25457152 bytes.

Payload

Once launched, the DDoS:Win32/Decill.A performs the following actions:

  • Download rogue security tool Impassable from the following domains:
    http://www.softarama.com
  • Modify the properties of the following files:
    %SYSTEMROOT%:\WINDOWS\assembly\NativeImages_v2.0.50727_64\ehshell\7d2a6fb678a0d911e205971f01290ad9\\ehshell.ni.dll

    (25457152 bytes; detected by HitMalware as " DDoS:Win32/Decill.A")
  • Removal instructions

    If your machine doesn't have antivirus/antispyware, please take the following steps to resolve the problems caused by DDoS:Win32/Decill.A:

    1. Replace the infected file ehshell.ni.dll for free by using ehshell.ni.dll repair tool - DLL Suite. See how to replace ehshell.ni.dll by using DLL Suite.

    2. Perform a full DDoS:Win32/Decill.A scan by using the latest antivirus/antispyware HitMalware.
    (Download Trial Version Now)

    MD5: 69791606979160


    How to replace ehshell.ni.dll by using DLL Suite

  • Download DLL Suite, install and run
  • Click "Start Scan" button to check ehshell.ni.dll file
  • Choose ehshell.ni.dll and click "More Information"
  • Download ehshell.ni.dll for free from the open web page
  • Save ehshell.ni.dll to its default folder to replace infected ehshell.ni.dll file.
  • Download DDoS:Win32/Decill.A Removal Tool Now

    Download DDoS:Win32/Decill.A Removal Tool Now