Remove Trojan:Win32/Ficos.A

My AVG detects out a Trojan:Win32/Ficos.A virus in the system and the alerts keep popping up constantly to interrupt my work in the computer. What can this Trojan virus do in general? Why can’t the AVG take it out? Will it steal my private information? How do I get rid of this kind of Trojan infection?

Details of Trojan:Win32/Ficos.A:

Trojan:Win32/Ficos.A is classified as a Trojan virus from a large Trojan family. A Trojan virus, unlike malicious software and browser hijacker, cannot be seen clearly in the computer screen. It can only be found out by the antivirus programs. Trojan virus is able to not only replicate itself but also change the names and locations of its files. It is usually bound in unknown free downloads on the Internet. Being hidden in pornographic and advertising sites is also a good way to outtrick computer users. Once it gets into the computer successfully, it will begin to create a lot of terrible problems in the infected computer.

Trojan infection like Trojan:Win32/Ficos.A is designed by cyber criminals to attack computers actively and steal valuable personal information stored in the computer. When the time is right, it is even able to allow furtive remote access to the infected computer from the virus makers. In this case, one should stop his / her computer. As mentioned above, this Trojan is released widely on the Internet by cyber criminals, so many computers from all over the world are attacked by it unfortunately. It has the ability to survive in different windows systems no matter whether there is a antivirus program in the system or not. In the back door, the Trojan is usually very active. Sometimes when the Trojan and some malicious programs are combined, they can help other dangerous infections get into the infected system without letting you know. To do so, Trojan:Win32/Ficos.A can expand the damages as well as collect more valuable data for the virus makers. Hence, we need to avoid suspicious online resources so as to keep away from viruses and should take measures to remove the virus as soon as possible once the computer is infected unfortunately.

What Can the Vicious Virus Do?

1. It has the ability to download additional components and other infections in the target computer in order to fully complete its penetration.
2. It is able to cause system crash and destroy some of your programs in the infected computer.
3. It facilitates the virus makers to intrude your computer remotely without letting you know.
4. It is capable of collecting your browsing history and other private data.

Manual Removal Guide:

Here are some steps to get rid of the Trojan:Win32/Ficos.A manually. But because this kind of Trojan virus is changeable, the manual removal guide here is just to give you a general idea. In case that any unexpected damages may happen in the manual removal process, prior backup to your important things is necessary.

1. End Relevant Processes

(1). Press Ctrl+Shift+Esc together to pop up Windows Task Manager, click Processes tab

*For Win 8 Users:

Click More details when you see the Task Manager box

And then click Details tab

(2). Find out and end the processes of Trojan:Win32/Ficos.A

2. Show Hidden Files

(1). Click on Start button and then on Control Panel

(2). Click on Appearance and Personalization

(3). Click on Folder Options

(4). Click on the View tab in the Folder Options window

(5). Choose Show hidden files, folders, and drives under the Hidden files and folders category

(6). Click OK at the bottom of the Folder Options window

*For Win 8 Users:

Press Win+E together to open Computer window, click View and then click Options

Click View tab in the Folder Options window, choose Show hidden files, folders, and drives under the Hidden files and folders category

3. Delete Relevant Registry Entries and Files

(1). Delete the registry entries of Trojan:Win32/Ficos.A through Registry Editor

Press Win+R to bring up the Run window, type “regedit” and click “OK”

While the Registry Editor is open, search and delete the related registry entries

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\[RANDOM CHARACTERS].exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” =Random

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe

(2). Find out and remove the associated files

%AppData%\Roaming\Microsoft\Windows\Templates\random.exe

%Temp%\random.exe

%AllUsersProfile%\Application Data\~random

%AllUsersProfile%\Application Data\.dll HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Random “.exe”

Video Shows You How to Safely Modify Windows Registry Editor:

Nowadays, computer viruses have become more and more stubborn and many viruses are created every day. Trojan:Win32/Ficos.A is designed to collect computer users’ privacy so that the virus makers can gain profits. Trojan viruses usually have the ability to mutate. That is why the one we focus on now can avoid a lot of antivirus programs. Once it enters the target computer successfully, it will restructure some default system settings to keep it staying in the system longer. Some famous antivirus programs are able to detect the Trojan infection and report to you. But they are unable to eliminate the virus completely because they are not flexible. Thus, manual removal is a good way. By means of checking documents and files in different locations manually, we can ensure a complete resection.

The above manual removal is quite dangerous and complicated, which needs sufficient professional skills. Therefore, only computer users with rich computer knowledge are recommended to implement the process because any errors including deleting important system files and registry entries will crash your computer system. If you have no idea of how to process the manual removal, please contact experts from YooCare Online Tech Support for further assistance.

Published by & last updated on July 20, 2014 6:34 am