Remove Cytron. Description and removal instructions

Title: Cytron
Type: Trojans	Severity scale: (32 / 100)

The Cytron trojan displays unexpected commercial pop-up advertisements all the time the user surfs the Internet. The parasite is distributed by e-mail. It comes in a letter saying that the user has received an e-card. Once the user clicks on a particular link in the letter, Cytron gets silently installed to the system.

FORUM:
Discuss Cytron in
spyware removal forum

Cytron properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Cytron removal:

remover for Cytron

Cytron manual removal:

Delete registry values:
HKEY_CURRENT_USER\Software\POTD
HKEY_LOCAL_MACHINE\SOFTWARE\POTD
HKEY_LOCAL_MACHINE\SOFTWARE\Burnaby.TargetingSource

HELP:
how to remove registry entries

Unregister DLLs:
potd.dll, sec.dll

HELP:
how to unregister malicious DLLs

Delete files:
potd.dll, sec.dll

HELP:
how to remove harmful files

Other programs to remove Cytron:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 01/09/05

Additional resources related to Cytron:

Attention: If you know or you have a website or page about Cytron removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Cytron parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Comments from visitors:

1. by Anton. 2004-03-02 15:09:56

When IE is started for the first time it attempts to connect to Cytron's servers to download a list of keywords to look for, and URLs of pop-ups to open.

According to various reports, it also sends itself to everybody listed in your address book, with an email claiming you have sent them a greeting card. Once they open it, they too are infected.

Cytron/potd installs potd.dll into Downloaded Program Files; with Cytron/sec the filename is sec.dll instead.