How do I remove Trojan.FileHarakiri?

Discussion in 'Windows - Virus and spyware problems' started by questi, Oct 8, 2010.

  1. questi

    questi Guest

    Could you please help me? There is the Trojan.FileHarakiri virus on my computer http://xmages.net/storage/10/1/0/4/3/upload/075b2803.jpg My antivirus is unable to do anything. This virus is corrupting my files and I can't open Word and Excel files, as well as my photos and e-mail. How do I delete it from my computer? Can I still save the files?!!!
    [​IMG]
     
  2. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Trojan.FileHarakiri is a fake virus detection included in the fake License expiration error being exhibited by rogue antivirus programs. Trojan.FileHarakiri does not really exists on the computer. It was rather a trick commonly employed by rogue developers to scare computer users. This fake alert will attempt to induce its victims into purchasing the licensed version of a rogue program. For them, displaying fake alerts are the best convincing method to sell their potentially unwanted application.

    This fake pop-up must be totally ignored. Its messages may seem believable especially when declaring a presence of Trojan.FileHarakiri.

    Removal Tool:

    In order to completely remove the threat from a computer, it is best to download and run Malwarebytes Anti-Malware:
    http://www.precisesecurity.com/tools-resources/adware-tools/malwarebytes-anti-malware/

    Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected computer.

    Scan with Norton Power Eraser:

    A free removal tool from Norton Antivirus was developed to remove unfamiliar threats without using the traditional AV signatures. Download the tool and start scanning with Norton Power Eraser:
    http://www.precisesecurity.com/tools-resources/free-antivirus/norton-power-eraser/

    Kaspersky Bootable USB Flash Drive

    A tool from Kaspersky will allow you to create a bootable virus scanner that can be run from any computer. This can be boot and run from media drives such as CD, DVD or USB Flash Drive. Download and follow the procedures here: http://www.precisesecurity.com/tools-resources/free-antivirus/virus-scan-kaspersky-usb/

    What are fake alerts objective?

    - Detection of Trojan.FileHarakiri was displayed to deceive users on the security status of the computer. If victim thinks that they are infected, there is a possibility to sell the program and malware authors will have the opportunity to earn from this scam.

    - If executed, it can connect to a remote host and download additional threat that can disable security programs, block Internet access to anti-virus provider’s web site and redirect homepage.

    Help protect your computer from fake "Trojan.FileHarakiri" pop-up alert:

    - Make firewall active.
    - Always update operating system, internet browser and anti-virus programs.
    - Install a separate anti-malware program aside from present anti-virus application if it is not included.
    - Be cautious when clicking links. It can point your browser to download threats or visit malicious web site.


    2oG

    P.S. You can get this information by simply Googling “Trojan.FileHarakiri” – read my signature and stay away from electric fences….. : ) lol
     
  3. questi

    questi Guest

    ...
     
    Last edited by a moderator: Oct 9, 2010
  4. imagine_

    imagine_ Guest

    hi. It's an old virus, and it usually invades your computer to make you pay money. As you pay, your credit card information is being stolen, and it is later used to steal the money from it. However, even after you pay, the virus does not get deleted from the computer. Here I have written a short instruction on how to delete it (although I still think it may not work for all the versions of the virus):

    1. HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon - replace Shell via explorer.exe
    2. kill alert.exe process
    3. remove $APPDATA\Primary

    it's far more complicated to restore the files. Not all of them can be restored. I tried programs http://www.recoverytoolbox.com and http://www.quetek.com/prod02.htm?sou...FYHozAodvEz-lA, but the one that works the best is http://www.recovernow.me/?refid=17. It helped me with e-mail files and photos that other programs failed to restore
     

Share This Page