I did a full scan with AVG Free 2014, and it detected Trojan Horse Generic_r.EJI in several files including dllhost.exe, dpnsvr.exe, regsvr32.exe, and numerous others in Windows\SysWOW64. AVG could not remove the virus as it keeps coming back. What should I do? I really need this virus gone. Please help.
Trojan horse Generic_r.eji is defined as Trojan Horse which is designed for destroying computer system and stealing personal information for commercial purpose. It usually gets into your computer by downloading spam email attachments, visiting suspicious websites, opening spam links, clicking malicious ads or being bundled with freeware or shareware that you download from the free online resources. Once it is successfully installed on your PC, it will drop its malicious codes and files to every corner of your system. It also re-edits your registry so that it will be able to run when system starts up. Therefore, you will notice that your computer keeps freezing and CPU usage can jump to over 80% even though you have no application opened. It even takes much longer than before for you to start up the computer. Everything will be messed up because of this bad virus.
The infected symptoms of Trojan horse Generic_r.eji virus are obvious. When you open task manager, you will notice strange processes active including ctfmon, dllhost, fixmapi, dvdupgdr, and others and if you force close the processes, they will return again in a few minutes. Besides, tons of popups will be presented on your browsers including IE, Firefox or Chrome. Clicking any of those ads will link you to other unwanted websites or download potentially unwanted programs to your PC. Apart from that, you will find that your homepage is replaced and your browser settings are changed without your knowledge. Trojan horse Generic_r.eji virus can open a backdoor by exploiting the vulnerabilities in the computer system to allow other cyber infections to break into your infected PC. It can collect your private information, such as usernames and passwords of important websites or online banking accounts, and transmit to the remote hackers for illegal purposes. In a word, Trojan horse Generic_r.eji is an evil Trojan virus that should be deleted as quickly as possible.
1. It can compromise your system and may introduce additional infections like rogue software.
2. It forces you to visit websites and advertisements which are not trusted and may lead you to pay money wrongly for worthless products.
3. It takes up high resources and strikingly slows down your computer speed and even causes your computer stuck frequently.
4. It may allow cyber criminals to track your computer and steal your personal information.
From malicious drive-by-download scripts from corrupted porn and shareware / freeware websites.
Through spam email attachments, media downloads and social networks.
When clicking suspicious pop-ups or malicious links.
Open unknown email or download media files that contain the activation code of the virus.
Currently many computer users had the same experience that this virus couldn’t be removed by any anti-virus applications. So the manual approach is always required to combat this virus. And here is the step-by-step removal guide for all computer users.
1. End the malicious process from Task Manager.
Once Trojan horse Generic_r.eji virus is installed, computer user may notice that CPU usage randomly jumps to 100 percent. At any time Windows always has many running processes. A process is an individual task that the computer runs. In general, the more processes, the more work the computer has to do and the slower it will run. If your system’s CPU spike is constant and remain at a constant 90-95%, users should check from Task Manager and see if there is a suspicious process occupying system resources and then end it immediately.
(The name of the virus process can be random.)
Press Ctrl+Shift+Esc to quickly bring up Task Manager Window：
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press Windows key + R to open Run box. In the “Open” field, type “regedit” and click the “OK” button.
Then a Registry Editor window will pop up as the following picture shows:
b. Search malicious files and registry entries and then remove all of them:
%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AllUsersProfile%\Application Data\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\[random]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Temp
Trojan horse Generic_r.eji virus is commonly Trojan horse that may perform many harmful actions on the computer once downloaded. It disables your current antivirus program and changes your browser settings without any approval in order to display all different kind of advertisements on your browser. Its aim is not only to distribute potentially unwanted programs, adware or other infections, but also to steal your personal details for illegal purposes. One should stay away from this malicious virus. Besides, this Trojan can create a lot of junk files which occupy a lot of space in hard drive, therefore you will find your computer always gets stuck and it takes a long time to respond every task you perform. You will see unusual processes running in Task Manager and you have no way to stop them. They take up your system resources and make your PC perform poor. Hence, it is necessary to remove Trojan horse Generic_r.eji virus from the computer to avoid computer crash and money loss.
Note: If you are not knowledgeable enough to be able to distinguish the location of this virus, or you are afraid of making mistake during the manual removal, please contact experts from Yoocare Online Tech Support for further help.
Published by on August 2, 2015 8:44 am, last updated on August 2, 2015 8:44 am
Leave a Reply
You must be logged in to post a comment.