Monday, January 11, 2016

Eliminate Trojan:Win64/Patched.AZ.gen!dll Completely From Infected PC

I foolishly picked up a Trojan virus (Trojan:Win64/Patched.AZ.gen!dll) on my media PC a few nights ago and, after some battling, managed to remove all the software it added, and regain access to the internet. However, I was unable to remove the virus from the dnsapi.dll file. Please anyone help me?

Trojan:Win64/Patched.AZ.gen!dll Description


Trojan:Win64/Patched.AZ.gen!dll is a severe Trojan infection that can affect many Windows computers. It is often distributed via spam emails, pornographic websites, free application downloads, and other social network services. So this Trojan horse usually invades your computer without your knowledge. Once you find it in your computer, you should take immediate actions to deal with it or it will seriously damage your system.

Trojan:Win64/Patched.AZ.gen!dll is a stubborn infection that can replicate itself and if you fail to get rid of it completely, it will soon be recovered. And then your computer will once again infect with this Trojan, usually in the dnsapi.dll file. Please see what this Trojan will do to damage your system.

It may corrupt or delete your system files and replace them with the files it generates;
It may drop other threats to your computer and drag down your computer;
It may exploit your system vulnerability and steal important data about your computer and your privacy;
It may open backdoor and allow remote hackers to access and control your computer.

Trojan:Win64/Patched.AZ.gen!dll Removal Guide


It is dangerous to have this high-risk Trojan horse in your computer. Once you see it in your computer and need help remove it completely from your computer, you can refer to the useful guide below.

Guide 1: Manually Remove Trojan:Win64/Patched.AZ.gen!dll by Yourself

Guide 1: Manually Remove Trojan:Win64/Patched.AZ.gen!dll by Yourself


Step 1. Restart your computer in Safe mode.

Keep tabbing F8 key before the Windows start-up logo appears until you get to Advanced Options, select Safe Mode, and hit ENTER.


Step 2. End up the trojan processes in Windows Task Manager.

Press Ctrl+Shift+Esc or Ctrl+Alt+Delete to open Windows Task Manager, find malicious processes and click End process.


Step 3. Navigate to Registry Editor and clean up all Trojan:Win64/Patched.AZ.gen!dll registry entries.

Press Win+ R key at and same time to open Run Commend Box. Open Registry Editor by typing “regedit” in Runbox and clicking OK.


Look through the registry entries and find out all listed harmful items. Right click on them and terminate the related entries.


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation"=1
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger"="svchost.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe

Step 4. Show hidden folders and files.

Windows XP

Start button > Control Panel > Appearance and Personalization > Folder Options > Show Hidden Files or Folders


Remove the checkmark from Hide extensions for known file types. And remove the checkmark from Hide protected operating system files (Recommended).

Windows 7 / Vista

Libraries > Folder Options > Tools > Show Hidden Files or Folders



Remove the checkmark from Hide extensions for known file types and Hide protected operating system files (Recommended)

Windows 8 /8.1

Windows Explorer > View > Hidden Items


Delete Trojan:Win64/Patched.AZ.gen!dll Virus associated files.

%UserProfile%\Application Data\Microsoft\[random].exe
%System Root%\Samples
%User Profile%\Local Settings\Temp
%AppData%\<random>.exe
%CommonAppData%\<random>.exe
C:\Windows\Temp\<random>.exe
%temp%\<random>.exe
C:\Program Files\<random>
C:\ProgramData\[random numbers]\

Step 5. Remove leftover and speed up your PC.

You can download and install RegCure Pro to speed up and optimize your PC. It is packed with the tools you need to boost your PC's speed and performance.

  • Clean away Windows registry errors
  • Eject active viruses, spyware and other malware
  • Stop unneeded processes 
  • Delete startup items
  • Delete privacy files

Click the icon to download RegCure Pro.


Guide 2: Automatically Remove Trojan:Win64/Patched.AZ.gen!dll with Powerful Removal Tool


SpyHunter is an adaptive real-time spyware detection and removal tool. It  can help you remove Trojan:Win64/Patched.AZ.gen!dll and all the threats in your PC. It will never bundle with any programs and can get along with existing security programs without any conflicts. Please feel relieved about usage.

Click the download button below to get SpyHunter


After detecting all the threats in your system, you can click on “Fix Threats” to remove them.


Warm Reminder:

SpyHunter is a powerful anti-malware/spyware for inexperience computer user. It can help you remove all the detected threats automatically. So all you need to do is install it for immediate and ongoing protection.

No comments:

Post a Comment