How to remove Trojan:Win32/Tracur.AV virus that detected by Microsoft Security Essentials software? My Microsoft security essentials said I have Trojan Win32/Tracur.AV and it said it removed the threat but i viruses have to be removed by accessing the registry right? How do I get rid of it completely without coming back?

Trojan:Win32/Tracur.AV Description

Need help removing Trojan:Win32/Tracur.AV? I just got home from work and i found this pop up from the Microsoft Security Essentials saying my computer has been effected because i looked at pornography with minors in it but i don’t how do i log onto Facebook , says Suspicious activity has been detected on your Facebook account and it has been temporarily suspended as a security precaution. It is likely that your account was compromised as a result of entering your password on a website designed to look like Facebook. This type of attack is known as phishing. This can be very dangerous, as an update usually indicates that there is a new potentially harmful virus that the software needs to protect the user from. This could be one of the reasons that the Trojan:Win32/Tracur.AV virus has still been able to harm some computers lately. The antivirus programs have been updated to search for the Trojan.Agent.H virus, but it requires that all users are running the newly updated versions of the antivirus software.

Since the Trojan:Win32/Tracur.AV virus opens up remote access there is nothing safe from cyber criminals from accessing. They can even install keystroke recognition software that will record every single keystroke and send that information to the hackers. This can reveal passwords to email accounts and social media profile, which they can then hack and send spam to all of the accessible contacts. Although this is very inconvenient and slightly embarrassing at least it doesn’t present extreme harm. Now, if they are able to pick up credit card number, bank account numbers and online banking passwords this can be very harmful! Get it off of your computer in no time.

Special tips: How do you delete this Trojan horse safely and permanently? Manual removal is suggested here as it is a guaranteed complete removal. Contact YooSecurity Online PC Expert to get further help in removing Trojan infection.

Screenshot of Trojan:Win32/Tracur.AV


Why Is The Trojan Win32/Tracur.AV Virus So Hard To Remove?

Well, the group that created the Trojan:Win32/Tracur.AV virus is very well aware of how the major antivirus programs work and have specifically created this virus around avoiding those virus scanning programs. This virus is one step ahead of the commonly found antivirus programs. It goes in undetected and since there are no warnings the user doesn’t suspect anything until the major issues and problems begin to surface.

This is a mutating virus that will use different files names and store them in different folders each time. It is very unpredictable and this makes it hard to pinpoint it during a manual clean up. It really takes an experienced user that knows what legit files should be in each folder and location. For the average user it would be next to impossible to locate the fake files infected with the Trojan:Win32/Tracur.AV virus.

Steps on How to Get Rid of Trojan Win32/Tracur.AV Virus

Firstly, you had better to restart your infected computer and get in safe mode with networking by pressing F8 Key constantly.

safe mode with networking for Windows XP Vista and Win 7

Step 1: Open Windows Task Manager to end all processes generated by the virus. Hold down the Ctrl+Alt+Del keys at the same time or right click on Task Bar and select Start Task Manager.

Step 2: Show hidden files. Go to Folder Options from Control Panel. Under View tab, uncheck Show hidden files and folders and non-select Hide protected operating system files (Recommended) then click OK.

Step 3: Go to Registry Editor. First press Windows+R keys and then type regedit in Run box to run it. Delete all the following or those related to the following files and registry entries:

%AllUsersProfile%\Application Data\random letters
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Random letters
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit”
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\{rnd}=disable

Video on How to Modify or Change Windows Registry


Obviously an experienced user could eliminate the bad files but not everyone has experience with all of the files. If a file is removed that is though to be part of the virus but it was an operation file then it could really ruin the computer. Professional help is always available for removing problems such as the Trojan:Win32/Tracur.AV virus, and this is one of those Trojans that make it hard to follow a step by step detailed removal process.

Note: Still having problems with your computer after every reboot? Have no idea to permanently remove Trojan:Win32/Tracur.AV virus from your computer? Contact Online PC Expert to get help from professionals online if you failed to do it.

Published by Tony Shepherd & last updated on February 21, 2013 10:37 am

Leave a Reply