How to Remove the Trojan Dropperwin32/Small.Gen Virus

Post Reply
greg
Site Admin
Posts: 73
Joined: Mon Nov 28, 2005 3:01 pm

How to Remove the Trojan Dropperwin32/Small.Gen Virus

Post by greg »

Trojan horses are malware that modify your Windows registry, changing system preferences, user settings and creating files that allow them to automatically run at startup. Signs that the TrojanDropper.Win32.Small.cf malware has infected your computer include increasingly slow computer processing speeds, the sudden appearance of new desktop shortcuts and pop-ups, and spam emails sent automatically from your email address. To fully remove this malware, you must purge the registry keys and registry values associated with it.

1.
Step 1

Run a thorough antivirus and antiadware scan on your computer in Safe Mode, if possible. Your antivirus software cleans any other malware infecting your system.
2.
Step 2

Back up your registry. Before you begin to modify your registry by deleting the keys and values associated with the Trojan Dropper malware, it is highly recommended that you save a copy of your current version. Deleting the wrong keys could have a significantly detrimental effect on your system's ability to function.
3.
Step 3

Click on the "Start" button, and select "Run." Type "regedit" (without the quotation marks) in the "Open" box, and click on "OK." The "Registry Editor" opens, which breaks down the registry information into two components: folders representing registry keys on the left and the registry values of the keys on the right.
4.
Step 4

Expand the folders in the left pane associated with the registry keys listed below, until you arrive at the key file. Right-click on the key name, and choose "Delete." Confirm that you would like to delete the file by clicking on "Yes" when prompted.

HKEY_CURRENT_USER\software\surfairy
HKEY_CURRENT_USER\software\surfairy
5.
Step 5

Expand the folders in the right pane associated with the registry values, until you arrive at the value name. Right-click on the value name, and choose "Delete." Confirm that you would like to delete the value by clicking on "Yes" when prompted.
Greg Marlett
Forum Site Administrator
Pelstar Computer Systems
gmarlett@pelstar.com
Post Reply