Sunday, March 2, 2014

How to Remove Win32:BHO-ALX[Trj] Trojan Horse from Your Computer



Your antivirus program warns you every time about Win32:BHO-ALX[Trj] when you enter the Windows? But you fail to remove it with the help of your antivirus program. It comes back after you restart your computer repeatedly. This post will tell you how to remove Win32:BHO-ALX[Trj] successfully. 
 

What Is Win32:BHO-ALX[Trj]?

Win32:BHO-ALX[Trj] is a very terrific Trojan infection that causes great harm to random computers. Once this virus gets into your PC and generates malicious files, your machine will be controlled by this parasite completely. This Trojan horse installs a mass of unwanted and suspicious programs onto your Windows without your awareness each time you launch your machine. Then your computer lacks lots of available resources to support its operation as a result of these vicious applications and files. It is no wonder that your computer often takes forever to boot up and make responses. Besides, Win32:BHO-ALX[Trj] modifies certain system files, which leads to the appearance of invalid programs and error messages.

In addition, Win32:BHO-ALX[Trj] distributes other computer viruses to the whole operating system. If your computer comes across different viruses at the same time, it will be worse and worse. The contaminated Windows automatically restarts randomly and shows you a blue screen. I think you must be worried and frustrated about your issue. The worst situation is that Win32:BHO-ALX[Trj] opens a backdoor for helping hackers enter your computer. In consequence, your saved login details and bank account information are stolen by hackers. Finally, you can not escape from identity theft and financial loss. Hence, we strongly suggest that you remove Win32:BHO-ALX[Trj] immediately for avoiding unexpected attacks in future.

Detailed Removal Guide of Win32:BHO-ALX[Trj] Virus

In general, Win32:BHO-ALX[Trj] has an ability to escape from being removed by antivirus programs though it can be detected easily. Facing the difficulty, you have to find out its files and registry entries manually and try your best to eliminate Win32:BHO-ALX[Trj] from your PC. If you have no idea how to start, please follow the manual removal solution below.

Step 1: Restart your computer and hit F8 key incessantly. When some mode options show up, please select the safe mode with networking by arrow keys.

Step 2: Press Alt+Ctrl+Delete keys at the same time to open Task Manager. When it is done, find out Win32:BHO-ALX[Trj] process in Processes tab and click End Process button.

Step 3: Disable any suspicious startup items that are made by infections. Click start menu and type msconfig in the search bar. When you open System Configuration, please disable all possible startup items generated.

Step 4: Click the Start button and choose Control Panel, clicking Appearance and Personalization to find Folder Options then double-click on it. In the pop-up dialog box, click the View tab and uncheck Hide protected operating system files (Recommended). Clean all the malicious files about Win32:BHO-ALX[Trj] as below. 
 


%UserProfile%\Application Data\Microsoft\[random].exe
%System Root%\Samples
%User Profile%\Local Settings\Temp
%AppData%\.exe
%CommonAppData%\.exe
C:\Windows\Temp\.exe
%temp%\.exe

Step 5: Press Win+R keys to open RUN box, then input regedit to open Registry Editor window. Then you need to find out and clean up all registry entries of Win32:BHO-ALX[Trj] step by step. 
 


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\.exe"
HKLM\SOFTWARE\Classes\AppID\.exe

Step 6: Reboot your computer