Board index Security Virus Removal Guide Remove Win32:Turla-G[Trj] virus&trojan horse

Remove Win32:Turla-G[Trj] virus&trojan horse

This forum provides useful removal guide for various computer virus and malware.


Posts: 228
Win32:Turla-G[Trj] is a trojan horse that attacks users whose computers run on Windows operating system. It can be reported by MSE or AVG, but those antivirus programs are not capable of removing Win32:Turla-G[Trj] completely from your computer and that’s why it always appears in your computer although they remove Win32:Turla-G[Trj]. It is bundled with third party programs and spread via Internet. If someone downloads those free programs from unknown resources, it it very likely to catch this virus. Also visiting insecure websites could increase the possibility of infection.

Image

If unfortunately your computer is infected by Win32:Turla-G[Trj], then you should remove it as soon as possible because it is harmful. First, Win32:Turla-G[Trj] can open backdoors to allow hackers into your PC, which is the most harmful properties because once hackers have infiltrates your computer, they can implant more trojans or other virus to your PC. They can monitor your computer if they want. Although tiny it is, Win32:Turla-G[Trj] is able to collect your personal information. When you have communication with outside, which means you receive Emails or log into your Facebook accounts or bank accounts, Win32:Turla-G[Trj] will intercept your informations and send them to hacker who can decrypt your data and next, get your information. it is definitely sure that they will hack into your accounts and do evil things with them. Mails could be exposed to strangers, too. So you should remove Win32:Turla-G[Trj] as soon as possible before it brings other annoyance to your computer. And here we have instructions showing how to remove Win32:Turla-G[Trj]. If you have any difficulty removing this threat, you can contact our 24/7 online experts for tech support.

How to remove Win32:Turla-G[Trj] trojan horse&virus

Step 1: Launch your computer into Safe Mode with Networking.
Hit Ctrl+Shift+Esc to enter Task Manager and then find Win64:Patched-A[Trj] and stop it.

Image

Step 2: Show all hidden files.
Click : Start->Control Panel->Appearance and Personalization->Folder Option->View.
under the View tab, check Show hidden files, folders and drivers. And uncheck Hide protected operating system files (Recommended) and then click OK.

Image

Step 3: Go to registry editor and delete related registry values:
press Win(the key between Ctrl+Alt) + R and then type regedit to enter registry.

Image

Then find the following regsitry values and remove them :
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run{Win32:Turla-G[Trj]}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run{random.exe}

Step 4: Clean those system files:
%appdata%
%temp%

Attetnion: you should be careful when you carry out manual removal process as one step wrong in deleting registry values will cause a big failure to the system. If you are not sure about what to do, contact our 24/7 online experts and we will take care of your PC.

Image

Return to Virus Removal Guide

cron