Remove Trunlow. Description and removal instructions

Title: Trunlow	Also known as: Psyme
Type: Trojans	Severity scale: (68 / 100)

Trunlow, also known as Psyme, is a trojan designed to steal user passwords. It is distributed through specific links found in malicious web pages and pop-ups able to exploit certain Internet Explorer vulnerabilities. Once executed, the parasite attempts to terminate running antivirus processes, download from the Internet and run password-recovery software or other malicious files. Then it steals system passwords, dial-up configuration details and passwords of e-mail accounts and transfers them to a predetermined remote host or uploads to a predefined FTP server. Trunlow is able to silently update itself via the Internet. The threat runs on every Windows startup.

FORUM:
Discuss Trunlow in
spyware removal forum

Related files: csrss.exe

Trunlow properties:
• Sends out logs by FTP or email
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Trunlow removal:

remover for Trunlow

Trunlow manual removal:

Kill processes:
dp.exe, cucu.exe, m.exe, mp.exe, winupdate.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Eventlog=%Windir%\winupdate.exe

HELP:
how to remove registry entries

Delete files:
dp.exe cucu.exe m.exe mp.exe winupdate.exe cucu.dll a4d22.vbs dc50.vbs Temp\\csrss.exe autoexec.exe

HELP:
how to remove harmful files

Misc:
Filenames may vary. The trojan may use files with random names.

Other programs to remove Trunlow:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 21/10/05
Information updated: 26/04/07

Additional resources related to Trunlow:

Attention: If you know or you have a website or page about Trunlow removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Trunlow parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.