Solved! Use DNCYOOL32.SYS (Trojan Provis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

DNCYOOL32.SYS – Trojan Provis removal

FileMD5Virus Alias
DNCYOOL32.SYS 90888f2efc61fe44e11fdcd76c7ef269 Trojan Provis
DNCYOOL32.SYS 90888f2efc61fe44e11fdcd76c7ef269 Trojan Xema
DNCYOOL32.SYS 90888f2efc61fe44e11fdcd76c7ef269 Trojan Click
DNCYOOL32.SYS 90888f2efc61fe44e11fdcd76c7ef269 Trojan Small
DNCYOOL32.SYS 90888f2efc61fe44e11fdcd76c7ef269 Trojan LdPinch

DNCYOOL32.SYS size: 36864 bytes
DNCYOOL32.SYS hash: 90888F2EFC61FE44E11FDCD76C7EF269

Created files:

%SysDir%\comsa32.sys
%SysDir%\dncyool32.sys
%SysDir%\dpcxool64.sys
%SysDir%\sopidkc.exe
%SysDir%\tpsaxyd.exe
%SysDir%\txpxr_798445136270
%Temp%\x1c53572.dll

Detected by UnHackMe:

DNCYOOL32.SYS
Default location: %SYSDIR%\DNCYOOL32.SYS

Dropper information:
MD5: 5444822e851ea0d19c72e22c2ec9704e
File size: 234485 bytes

Leave a Reply