How to Remove the Trojan Downloader Win32 Agent Variant

Trojans disguise themselves as legitimate programs.

The Trojan Downloader Win32 Agent is a member of the Trojan family of malware infections. Most Trojans disguise themselves as legitimate programs on a computer while secretly carrying out a harmful process. In this case, the Win32 Agent variant displays fake alerts and pop-ups about supposed infections on your computer. While the Trojan Downloader Win32 infection is not the most serious of virus infections, it should be removed immediately as it may leave your computer vulnerable to subsequent malware infections. Most users with basic knowledge of the Windows operating system and utilities can remove the Trojan in a few steps.

Instructions

1. Back up your computer with the System Restore utility or the Backup and Restore Center prior to beginning the removal process. Since the removal involves editing the Windows Registry, other programs and settings may be inadvertently affected during the removal process.

2. Halt the processes associated with the Trojan Downloader Win32 Agent. To access the Task Manager utility that controls the processes, press "Ctrl + Shift + Esc" on the keyboard. Click on the tab labeled "Processes" to display the running background processes. Click on the names of the Trojan processes and click on the "End Process" button to halt the Trojan Downloader program.

   The Trojan Downloader Win32 Agent processes to be halted are:

   lphcv34j0eacn.exe
   PCAntispy_Installer_eng[1].exe
   PC-Antispy.exe
   C:\programfiles%\pccleanpro\PCCLEANPRO.exe

3. Remove the corrupted registry values and keys associated with the Trojan Downloader Win32 Agent using the Registry Editor utility. To access the utility in Windows XP, click "Start" and click "Run." Enter "regedit" into the "Open:" box and click "OK." For Vista and 7, enter the command directly into the Start Search box and click on the "Registry Editor" option that appears in the list.

4. Click on the "Edit" button on the menu and click "Find." Type the name of the registry entry into the text box and click on the "Find" button. Right-click on the entry that is located and click "Delete." Complete this process for each of the registry entries associated with the Trojan.

   The Trojan Downloader Win32 Agent registry keys to be deleted are:

   PC-Antispy
   {60B244BE-559D-4269-B96E-CD264D828EC9}
   Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PC-Antispy
   Microsoft\Windows\CurrentVersion\Run\PC-Antispy
   Microsoft\Windows\CurrentVersion\Uninstall\PC-Antispy
   Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{60B244BE-559D-4269-B96E-CD264D828EC9}

5. Use the Search tool in Windows Explorer to locate the remaining files and remove them from the computer. Right-click on "Start" and choose "Explore" to open the Windows Explorer. For XP users, click on the "Search" button in the toolbar to open the search functions. Enter the name of the file in the search box and click on the "Search" button. For Vista and 7, type the name of the file directly into the search box in the Explorer's interface. Right-click on the file and click "Delete" to send the file to the Recycling Bin. Repeat this process for each of the files associated with the Trojan infection.

   The Trojan Downloader Win32 Agent files to be deleted are:

   C:\programfiles%\pccleanpro\PCCLEANPRO.DLL
   ASpyPopUpBlk.dll
   ASpyStBlk.dll
   %programfiles%\pccleanpro\

6. Return to the desktop and right-click on the "Recycling Bin." Choose "Empty" from the context menu to completely remove the Trojan Downloader Win32 Agent from the computer.

References

• Faster PC Clean! Clean!: Remove Trojan-Downloader.Win32.Agent.BQ