Recommended
Jul 17, 2012

Completely Get Rid of W32/Patched.UB From Services.exe – Trojan Manual Removal Guide

Avira internet security keeps alerting W32/Patched.UB is found in C:\Windows\System32\services.exe and you can’t get rid of it at all? Follow the instruction here to completely remove this virus without coming back.

W32/Patched.UB Description:

W32/Patched.UB is high dangerous Trojan that will spread through known software and security vulnerabilities. It will target every computer users that range from individual, educational institutions, up to known organizations. It is shown that this virus can proliferate through malicious websites, spam email messages, unsafe downloads and lots of other means used by attackers.

Users can find this malicious virus while running Avira antivirus. However, it is unable to get rid of it completely as this tricky Trojan is located in C:\Windows\System32\services.exe which belongs to system files that can’t be simply removed. Avira will keep reporting the presence of the virus. It annoys users. When this Trojan is installed, it can download and install more malware infection on the infected computer system. Moreover, it allows cybercriminals to gain remote access and control over the targeted computer. Thus, your personal information and privacy will be in danger. Don’t hesitate to remove this pest from your machine now.

Expertise is required to finish the manual removal process. If you are a computer newbie and need assistance, please live chat with YooCare experts now.

Manual Removal Guides:

1. Show hidden files and folders.

Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.

Click the View tab.

Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.

2. Open Registry entries. Find out the malicious files and entries and then delete all.

Attention: Always be sure to back up your PC before making any changes.

a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.

b. All malicious files and registry entries that should be deleted:

%Documents and Settings%\[UserName]\Application Data\[random]
%AllUsersProfile%\Application Data\.exe(W32/Patched.UB)
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s
HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s

Video Shows You How to Safely Modify Windows Registry Editor:

If you failed to remove this malware with the instructions above or need any assistant, you are welcome to contact YooCare experts to resolve all the problems completely.

Published by & last updated on July 17, 2012 6:32 pm

Leave a Reply

Your email address will not be published.

Problems with your PC, Mac or mobile device?

Live Chat Now

Thanks for using YooCare Services!

Here're some of the support team members who are passionate about their works and support our customers 24/7.

As Seen On