Remove SafeMass.exe virus yourself

Posted by RupokNet | 5:22 AM | 0 comments »

Many of us have faced SafeMass.exe. It really bother us too damn much. Let's remove this trojan thing without any antivirus. The following behaviors have been observed for this object:
Installs programs.
Invokes dll components.
Creates Run Keys.
Runs other programs.
Creates known malware.
Creates copies of itself.

At first, restart your computer and press F8 key. Windows will prompt you with various boot options. choose the 'Safe Mode'. Now click Start button and click again on 'Search' button. Type "safemass.exe" in the search box and start search. You will find the file in all of your drives. delete all of them. it will also be found in C:\WINDOWS\safemass.exe and C:\WINDOWS\system32\safemass.exe and may be in other locations too, delete all of them.

Then, you should close it from system tray. Click right button on it and then close or exit. Then go to the "Run..." option from the Start menu and write regedit. Select HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>Current Version>Run>SafeMass.exe from the right part. Just Delete it. You will see an autorun.ini file on same folder or drive containing following lines. Delete it also.

[autorun]open=SafeMass.exe
shellexecute=SafeMass.exe
shell\auto=&Auto
shell\auto\command=SafeMass.exe
shell\explore=&Explore
shell\explore\command=SafeMass.exe
shell\find=S&earch...
shell\find\command=SafeMass.exe
shell\open=&Open
shell\open\command=SafeMass.exe

Most hopefully, you are now free from that annoying trojan :)

0 comments