It seems that my computer has been infected by Win32/Spy.SpyEye.CA Virus because my AVG keeps notifying the Trojan was found? What will happen if I don’t delete it in time? Will it damage my computer badly? Read this article to find out the answer.

General Description of Win32/Spy.SpyEyeCA Virus

Win32/Spy.SpyEye.CA Virus a vicious Trojan horse infection which is quite difficult to be detected and removed completely from the computer. This is a extreme dangerous virus that very popular recently. The tricky Trojan comes by help of Internet access and most of the infection occurs when users are accidently clicking on unsafe pages from adult sites or opening the attachment from suspicious emails. Is it necessary to learn how to remove Win32/Spy.SpyEye.CA Virus? If I can’t delete it in time, what will happen? The Trojan virus is so bad that it can delete your critical files that needed to run your system so that you will find your computer just freezes over frequently and sometimes it shows a blue screen there, and the damages may increase until one day your computer is just dead and you can’t even boot it into windows. After landing on your hard drive, the Trojan virus pretends to be something else such as system files or other regular program files so that your anti-virus can not catch it at all when you’re performing a full scan, therefore manual removal is considered to be the best solution to remove Win32/Spy.SpyEyeCA Virus permanently.

Common Signs of Win32/Spy.SpyEyeCA Virus Infection

A) Windows firewall is disable and it would not be activated even you try to turn it on.
B) The virus propagates very fast and thus leads to great consumption of system resource and network bandwidth thus severely reduces the performance of your computer.
C) The nasty Trojan forces your computer restart or shutdown frequently and unreasonably. Sometimes you even found your PC is totally crash down.
D) Create backdoor for intended hackers who will be able to control your computer and steal your important information such as private data and banking details.
E) Fails to view hidden files; fails to make files viewable or hidden, since Win32/Spy.SpyEye.CA Virus sets all your folders on your partitions to be hidden.
F) The Trojan virus can block the functions of your antivirus programs, you can’t run them as well as updating them via Internet.
G) Other threats were found bundled with the Trojan virus.
H) Win32/Spy.SpyEyeCA Virus pretends to be system files and automatically downloads other threats from remote servers when the Internet connection is available.
I) The Trojan virus attack and damage your system files and programs, you will find your computer is running weirdly and some programs are not able to run any more.

If there’s any difficulty for you to remove Win32/Spy.SpyEye.CA Virus from your computer, please contact YooSecurity professionals to keep your computer safe and virus free, or you can follow our step-by-step virus removal instruction below to clean the virus yourself. (For advanced computer users)

Best Way to Remove Win32/Spy.SpyEyeCA Virus Step by Step:

Firstly, please go to the folder option to show hidden files, here’s the guide:

1) Click on Start button and then click on Control Panel
2) Click on Appearance and Personalization item


3) Click on Folder Options item
4) Click on View tab in the Folder Options window


5) Check the box of Show hidden files, folders, and drives under the Hidden files and folders category

Next, please follow these steps to get rid of Win32/Spy.SpyEyeCA Virus manually:
Step 1: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC. Open the Windows Task Manager.
If that didn’t work, try another way. Press the Start button and click on the Run option. This will start the Run tool. Type in task-mgr and press OK. This should start the Windows Task Manager.

Step 2: Within the Windows Task Manager click on the Processes tab. Find the process by name. random.exe related to Win32/Spy.SpyEyeCA Virus. Then scroll the list to find required process. Select it with your mouse or keyboard and click on the End Process button. This will kill the process.

Step3: Remove malicious files of Win32/Spy.SpyEyeCA Virus.

C:\windows\system32\services.exe
C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
C:\Windows\Installer\{bbee3ba2-89af-930c-bb78-1fb4e17db3cc}

Step4: Delete malicious registry entries of Win32/Spy.SpyEyeCA Virus.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer
“EnableShellExecuteHooks”= 1 (0x1)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe

Video Show You on How to Modify or Change Windows Registry:

In conclusion, it’s obvious that Win32/Spy.SpyEyeCA Virus is such a dangerous threat that can result in great damage to the infected computers. The destructive Trojan virus can automatically communicate with certain remote server to upload your confidential data files and meanwhile download other threats onto your computer, which can make your system totally vulnerable to cyber criminals to remote in. Sometimes your antivirus may catch it accidently but never can it delete the nasty virus completely, and that’s why every time you scan it out and delete it then you will see the antivirus reporting the infection again after your reboot your computer. In this case, you may wonder how to delete Win32/Spy.SpyEye.CA Virus completely? The fact is, in order to delete this stubborn Trojan virus, manual removal is proven to be the most feasible and effective solution.

Kindly reminder: Manual removal needs expert skills, if you failed to remove Win32/Spy.SpyEye.CA Virus by yourself,please contact YooSecurity professionals to keep your computer safe and virus free.

Published by Tony Shepherd & last updated on June 3, 2013 6:49 am

Leave a Reply