Trojan.Brisv.A. Removal guide
Trojan.Brisv.A!inf is a detection for the multimedia files infected with Trojan.Brisv.A.
remove Trojan.Brisv.A!inf need to disable System Restore
Trojan.Brisv.A!inf Summary
Virus Name:Trojan.Brisv.A!inf
Detected By:BitDefender antivirus program
Virus Trojan.Brisv.A!inf Detected times:232381 times
Trojan.Brisv.A!inf Overall Risk:Medium 732382
Type: Trojan
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP
Trojan.Brisv.A!inf file size:3623820 bytes Trojan.Brisv.A!infwas first Detected by BitDefender on Tuesday, August 5th, 2008 , 6:02 am,Trojan.Brisv.A!inf is a new threats of Hacking,Malware,Spam,worm.
Removal f Trojan brisv
OPTION 1: Remove Trojan.Brisv.A!inf instruction:
1.Temporarily Disable System Restore;
2.Reboot computer in SafeMode;
3.delte Trojan.Brisv.A!inf virus files and kill Trojan.Brisv.A!inf file task process(if have);
4.Delete/Modify any values added to the registry by Trojan.Brisv.A!inf ;
5.delete IE temp files,restart the computer and run a whole scan with Antivirus Program.
The most popular description of Trojan.Brisv.A!inf states that this infection embeds itself to the files with the following extensions:
• .asf
• .mp2
• .mp3
• .wma
• .wmv
It also looks for media files with other extantions and modifies their extention to .wma. The accession of Trojan.Brisv.A!inf to the files of the above types results in downloading of malicious websites by Windows Media Player once it plays any of the infected media files. The above is a common description of Trojan.Brisv.A!inf. It is true but incomplete. Trojan.Brisv.A!inf hides itself and may disable removal tools of certain times. It may also disable the downloading feature of Windows so that any program cannot be downloaded before you remove Trojan.Brisv.A!inf. As you can see, Trojan.Brisv.A!inf is a tricky and dangerous program that acts as an advertising agent. The products it promotes are normally adult websites and fake computer security tools. It is strongly recommended to ignore services and products adverted by Trojan.Brisv.A!inf and remove Trojan.Brisv.A!inf at the earliest opportunity.
Trojan.Brisv.A!inf Technical Details
Full name: Trojan.Brisv.A!inf
Version: 2009
Type: Rogue anti-spyware
Origin: USA
Signs of being infected with Trojan.Brisv.A!inf:
Trojan.Brisv.A!inf may affect media files as it attempt to embed itself into them. That, if the process of accession of Trojan.Brisv.A!inf has been completed successfully, should increase the size of infected media files by 1.138 kb. If the file has not accepted the embedding copy of Trojan.Brisv.A!inf, it usually goes out of order and cannot be read any more. Trojan.Brisv.A!inf may by chance destroy files other than media if it identifies them as media files and tries to apply the same procedure of embedding itself. Media files infected with Trojan.Brisv.A!inf may go out of order if played with players of developers other than Microsoft. If you see that Windows Media Player downloads strange websites and files are becoming unreadable, you may need to remove Trojan.Brisv.A!inf.
There are rather technical details of Trojan.Brisv.A!inf presence:
Trojan.Brisv.A!inf creates the following key upon launching: HKEY_CURRENT_USER\Software\Microsoft\PIMSRV
and modifies the follwing keys in the Registry:
HKEY_CURRENT_USER\ Software\ Microsoft\ MediaPlayer\ Preferences\ “URLAndExitCommandsEnabled” = “0?
HKEY_CURRENT_USER\ Software\ Microsoft\ MediaPlayer\ Player\ Extensions\ .mp3\ “Permissions” = “21?
Trojan.Brisv.A!inf creates mutex PIMSRV1 in order to provide its one-time presence in the memory.
Trojan.Brisv.A!inf is detected by many fair removal tools, but most of them cannot remove Trojan.Brisv.A!inf, unfortunately. They disregard its ability to disable programs, unlike the tool we are recommending to remove Trojan.Brisv.A!inf
Manual Removal of Trojan Brisv.A
1. Edit Windows registry and remove these registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\PIMSRV
2. Restore these registry entries to default value.(If required)
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\
“URLAndExitCommandsEnabled” = “0″
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\
Extensions\.mp3\”Permissions” = “21″
