Trojan.Bankpatch Removal Tool

1. Download and Install Norton Security Scan
Download Norton Security Scan from:
ftp://ftp.symantec.com/misc/tools/nss/NortonSecurityScan.exe
1.
Save the file to a convenient location, such as your Windows desktop2. .
3. Close all running programs.
4. Create a new folder named NSS in your C drive.
5. Locate the file that you just downloaded.
6. Double-click the NortonSecurityScan.exe file.
7. Click Run.
8. Click Browse, and then navigate to the following folder: C:\NSS
9. Click Unzip.
10. Click OK and then Close.
2. Run Norton Security Scan
1. Navigate to the following folder: C:\NSS
2. Double-click the NSS.exe file.
3. Read the License Agreement, and then click I Agree to continue.
4. Downloading Protection Update will appear on the GUI. Wait for the update process to finish before proceeding to the next step.
Click Full System Scan and then click Start Scan.
If the following system files are reported to be infected with Trojan.Bankpatch.C!inf, they will need to be restored from trusted media.
kernel32.dll
powrprof.dll
wininet.dll
If nothing is reported at this point, the system is clean and no further action is required.
5.
6. Click Next on the GUI when the scan finishes.
7. NSS will report that: "Items need attention, please resolve them". Keep the default GUI settings and click Apply.
8. Click Done and reboot the system when prompted.
3. Restore the Infected System Files
1. Insert the Windows XP/Windows Vista CD-ROM into the CD-ROM drive.
2. Restart the computer from the CD-ROM drive.
3. Press R to start the Recovery Console when the "Welcome to Setup" screen appears.
4. Select the option to access from the Recovery Console.
5. If requested, provide the administrator password and press Enter.