Does Trojan horse patched_c.lyt virus keep popping up on your screen? Are you annoyed with this issue since AVG can’t help at all? Read the following instruction and remove this stubborn Trojan as soon as possible.
Trojan horse patched_c.lyt is a malicious Trojan that opens a back door to receive commands from the remote command-and-control (C&C) server and distributes more files onto the affected PC.It can drop more malware infections such as Trojan horse Patched_c.xlt on the compromised PC once downloaded.
Generally, this pesky virus can be detected by AVG antivirus. But no matter how many times AVG reports, it is still hard for users to get rid of it since the virus is located in C:\Windows\System32\services.exe. Each time when you try to remove it, you will get a warning telling you that object is white-listed (critical/system file that should not be removed). Such malicious Trojan always can alter IE home page settings, eliminate access to Task Manager as well as corrupt security tools to conceal itself from detection and extermination. It can collect your user names and passwords by using recorded keystrokes, mouse taps or screen content, and then transfer to the remote hacker without your permission. Since it runs high risk for all the compromised computers, users should get rid of it instantly to secure your computer.
Slow down your PC speed notably.
Add other dangerous Trojan or Spyware to your system secretly.
Allow the hacker to access your entire system.
Collect all your personal information and transfer to a remote hacker.
Destroy critical system files and make PC unstable.
1. Reboot your computer to safe mode with networking. As your computer restarts but before Windows launches, tap “F8” key constantly.
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
%UserProfile%\Start Menu\Programs\Trojan horse patched_c.lyt\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\”Shell” = “[random].exe”
If you failed to remove Trojan horse patched_c.lyt with the instructions above or need any assistant, you are welcome to contact YooCare experts to resolve all the problems completely.
Published by Sarah Poehler, last updated on August 17, 2012 5:17 pm | How to Guides