Language:

English
- English
- Russian
- German
- Spanish
- French

Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

How to Remove Generic Trojan

Trojans is one of the most wide-spread threat in the internet. They can spread in lot of ways (torrents, e-mail attachments, video codecs etc.). Generic Trojan as well as any other trojan can harm your PC in different ways. Originally, trojans stole just your e-mail contacts and some personal data. Nowadays, they can steal any type of private information, being serious threat. In this tutorial we will show how to deal with Generic Trojan detect and remove it from your PC.

Choose option :

Generic Trojan description and technical details.

Manual removal of Generic Trojanl.

Download tool that will solve your problem automatically.

Professional support that will help you remove Generic Trojan from our Security Support Team.

Generic Trojan is developed by amateurs. Generic Trojan is crimeware - two of the needed tools a cybercriminal might use to take unsanctioned accession and sneak data from a fallen sparow as part of an crack. Generic Trojan authors present this feature as required to advertisers paying for publicity places making funds to block Generic Trojan removal and sophisticating Generic Trojan even for seemly Generic Trojan removal tools. Various Generic Trojan display publicities to specific websites that consumers treat. A great number of users habitually slight authorizations of software allowing Generic Trojan installing on their PCs. There are legislation under which it's unlawful to install any applications that alters website-browsing settings, follows keystrokes, that's why Generic Trojan is unallowable and the use of Generic Trojan removal tools with the purpose to remove Generic Trojan or fulfill attempts of Generic Trojan removal obligatory for the sake of law.

Trojan's detail table

Trojan alias:

Executable file:

Threat class:

Affected OS:

Generic Trojan

Rewhiif.exe

Trojan

Win32 (Windows 9x, Windows XP, Windows Vista, Windows Seven)

Generic Trojan infiltration

As we already said there numerous ways trojan can get to your PC from the internet. Generic Trojan copies its file(s) to your hard disk. File name typical to Generic Trojan is Rewhiif.exe. Then it runs itself and creates new startup key in registry with name Generic Trojan and value Rewhiif.exe. If you will look into running processes list you will see some extra process with name like Rewhiif.exe or any random name that uses decent amount of your CPU.

If you would like to remove Generic Trojan use WiperSoft Antispyware Malware Remediation Tool (see below)

Automatic Trojan Removal

So what is Generic Trojan Removal Tool? Basically, it is the tool that will remove every file and registry key that was created by Generic Trojan. It was created after analyzing all versions and types of this threat on test PCs and every file and key was added to the database. Removal Tool is updated regularly to make sure it can remove latest versions of Generic Trojan:

Download WiperSoft Antispyware to remove Generic Trojan

* WiperSoft Antispyware was developed to remove threats like Generic Trojan in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

How to remove Generic Trojan manually?

During all time since adding Generic Trojan to our database we track it changes and add them in the list below, removing files mentioned from your hard drive and deleting them from starup list and also unregistering all corresponding DLLs will result cleaning your computer drom the trojan. But also, missing DLL's that can be removed or corrupted by Generic Trojan should be restored from your Windows CD .

So, here is the simple process to remove Generic Trojan:

1. Delete following processes form startup and files from your hard drive:

658b867f.exe

NTEPAD~1.EXE

wink.lnk

Wink.exe

JAVADM32.EXE

3381.TMP.exe

3372.TMP.EXE

issearch.exe

ishost.exe

isnotify.exe

ismon.exe

ixt1.dll

qwinrqez.exe

IEFilter.dll

jkylaeon.exe

kernel.exe

tclserv80.exe

ftka.exe

vmonts.exe

dxvwkqpt.exe

kii.dll

ie.exe

orderedbj.exe

ldvuf.dll

fthot.exe

rwinqqez.exe

pumd.exe

sys101141897339.exe

rwinoqez.exe

cbxyv.dll

Jhyzv.exe

ssqrp.dll

68e8f6f7.exe

WIN32079051040402.EXE

MS062905104040.EXE

SYS024040290510.EXE

dxvid.exe

ib14.dll

antipc.exe

ztm8m6.exe

pwinqqez.exe

pujvns.exe

ms0505727-5932.exe

wlt848101kp.exe

fpdrnznx.dll

vnslpvxr.exe

wuass32.exe

bdpn.exe

xd7ehbkw.exe

win32hp.dll

DLLHOST.EXE

MSLSA32.exe

MSASP32.exe

11.tmp5120.exe

windmupdr.exe

zqskw.exe

VSL07.exe

VSL13.exe

apbzk.exe

l3jdfs.exe

office_pnl.dll

officescan.exe

ffzim.exe

ffzia.exe

wfxqhv.exe

smartdrv.exe

ktkphal.exe

updwebmin.exe

ghynf.exe

cvn0.exe

n9nyb.exe

comreplsvc.exe

pn9683r9.exe

msijavaup32.exe

bjjsnj.exe

msctools.exe

lprndrv.exe

jpbgciil.dll

unldr32.exe

zlxqowis.exe

sebfpnhp.exe

artm_new.dll

wowexec.dll

sys02177548917.exe

Rewhiif.exe

2. Delete the following folders that are assosiated with Generic Trojan:

%system%\crosof~1.net\

%programfiles%\wink\

progra~1\softwa~1\adabas~1\pgm\

%programfiles%\dhgq\

%windows%\web\

docume~1\david\locals~1\temp\

%system%\wins\

docume~1\Ð°Ð½Ð´Ñ€ÐµÐ¹\locals~1\temp\

progra~1\common~1\ffzi\

%profile%\documents\settings\

%programfiles%\stfgdue\

3. Finally, remove this registry keys:

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{78364D99-A240-4dff-B11A-67E448373045}

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{78364D99-A640-4ddf-B91A-67EFF8373045}

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{C8F21DFE-B35C-4274-82EC-1E072D09025E}

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{62E2E094-F989-48C6-B947-6E79DA2294F9}

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{87185E78-A61B-4DB3-965A-3235BBD7A622}
Value: {9230901B-70AA-1F7E-DDF6-5417C28755C1}

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{5f4c3d09-b3b9-4f88-aa82-31332fee1c08}

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{7BDAF75A-0D6F-4F50-AFE9-333D08DF4005}

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{B53455DB-5527-4041-AC41-F86E6947AA47}

Key: Software\Microsoft\Windows NT\CurrentVersion\Windows
Value: AppInit_DLLs
Data: pushow4.dll

Key: Software\Microsoft\Windows NT\CurrentVersion\Windows
Value: AppInit_DLLs
Data: C:\WINDOWS\system32\wuauboot.dll

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{F05C29C9-C907-E5A3-7A4D-9BECD99519C5}
Value: IEFilter

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{AA21F3D4-6494-4F2A-9D03-96A03B29FEF0}
Value: IEFilter

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{52070C5B-E5C7-CF34-EB44-BBEE8982EBCC}
Value: IEFilter

Key: software\microsoft\windows nt\currentversion\windows
Value: appinit_dlls
Data: c:\winnt\system32\wuauboot.dll

Key: Software\Microsoft\Windows NT\CurrentVersion\Windows
Value: AppInit_DLLs
Data: C:\WINDOWS\system32\wowexec.dll

Key: Software\Microsoft\Internet Explorer\URLSearchHooks
Value: _{EA756889-2338-43DB-8F07-D1CA6FB9C90D}

Key: Software\Microsoft\Windows\CurrentVersion\RunOnce
Value: ztm8m6.exe

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\loky2reg
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\loky2reg
Value: Startup

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\loky2reg
Value: DllName

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\artm_newreg
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\se500mdm
Value: nk48id

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensSrv
Value: StartShell

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensSrv
Value: DllName

Key: Software\Microsoft\Windows NT\CurrentVersion\Windows
Value: AppInit_DLLs
Data: wowexec.dll C:\WINDOWS\system32\wowexec.dll

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Applets
Value: DllName

Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
\{9230901B-70AA-1F7E-DDF6-5417C28755C1}
Value: updwebmin

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\logons
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Asynchronous

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Impersonate

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Startup

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Shutdown

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Asynchronous

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: DllName

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Impersonate

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Startup

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32
Value: Shutdown

Key: Software\Microsoft\Internet Explorer\Main
Value: Local Page
Data: c:\secure32.html

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Value: Shell
Data: explorer.exe C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe

Warning: Sometimes, trojan can use system file names or randomly generated names for its executable. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

If you are already our customer or you have additional questions ask our support team for help in removing Generic Trojan!

Let our support team solve your problem with Generic Trojan and remove Generic Trojan right now!

Submit support ticket below and describe your problem with Generic Trojan. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Generic Trojan. Trouble-free tech support with over 10 years experience removing malware.

Submit support ticket

Write a few words of how you got Generic Trojan with all circunstances in the form below. Our support team open support ticket for you in an hour and we will start solving your problem with Generic Trojan. Attach suspicious files that you see that possibly a part of Generic Trojan.

Describe your problem here and we'll contact you in several minutes:

Click on this button to submit request.

Solution guaranteed!

It is important:

We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you Generic Trojan removal solution.
All fields of this form are obligatory.

Here are the descriptions of problems connected with Generic Trojan and Rewhiif.exe we received earlier:

Problem Summary: Generic Download viruses keep infecting my computer.

Hello,

I have McAfee SecurityCenter but it is not catching the Generic Downloaded Trojans that keep infecting my computer. However, when I scan for viruses it then catches them then quarantines them. Later though, they will be back. I tried downloading your generic removal tool but when I go to start a scan I get this:

"Access violation at address 7C90225A in module 'ntdll.dll.' Write of address 00405F86"

Please help, I want to get rid of these viruses. What it does is when I search via google it directs me to some random website...

Thanks,
Mike