Remove Asprox. Description and removal instructions

Title: Asprox
Type: Trojans	Severity scale: (36 / 100)

Asprox is a trojan that runs a hidden proxy on the compromised computer. Computers from all over the world can connect to the infected system. The parasite runs as a service on every Windows startup.

FORUM:
Discuss Asprox in
spyware removal forum

Related files: aspimgr.exe, _check32.bat, ws386.ini

Asprox properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic Asprox removal:

remover for Asprox

Asprox manual removal:

Kill processes:
aspimgr.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aspimgr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\sft

HELP:
how to remove registry entries

Delete files:
aspimgr.exe, _check32.bat, ws386.ini

HELP:
how to remove harmful files

Misc:
Asprox uses TCP ports 80 and 82.

Exact file location:
ws386.ini - C:\WINDOWS or C:\WINNT
aspimgr.exe - C:\WINDOWS\System32 or C:\WINNT\System32
_check32.bat - C:\Documents and Settings\[Current User]\Local Settings\Temp

Other programs to remove Asprox:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 13/06/07
Information updated: 18/06/08

Additional resources related to Asprox:

Attention: If you know or you have a website or page about Asprox removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Asprox parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Comments from visitors:

1. by . 2008-06-18 18:06:54

Thanks - works great!

2. by . 2008-06-05 15:06:38

worked like a charm. Thanks!
the check32.bat file was hidden. so be sure to search all files, but exactly where you said it would be.

3. by Guest. 2007-12-13 05:12:06

Same here, Thx alot for the info!

4. by Guest. 2007-12-05 23:12:45

Thank you so much. I'm a computer tech (obviously not a steller one) and shoulda just deleted that e-mail...

5. by Guest. 2007-09-22 07:09:20

Thank you ,,,
i'm infected with that trojan and i suspetec that file aspimgr on the task manager
and when i searched on goggle i get this valuable information to remove it