Last Updated on Monday, 27 August 2012 17:46 Tuesday, 22 November 2011 18:14
loadperf.dll is an app used to (Load and unload performance counters) in Microsoft windows.
Files found - view
It starts a service "WmiApSrv/ WMI Performance Adapter" which is normally turned off.
The virus seems to enter the computer as a Microsoft Excel file named "a.xlsx"
It loads the malicious file loadperf.dll in the address space of the file wmiapsrv.exe. Thus the virus avoids detection of its dll file. Which injects its code into wmiapsrv.exe.
Necessary steps to remove this virus
- To turn off the service "WmiApSrv/ WMI Performance Adapter"
- To search and delete virus files from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise virus files inside the hidden folders will not be found
- To remove obsolete registry keys using CCleaner
Detailed instructions and free Tools
Preventive step to avoid viruses
Reprinted with permission from Threatexpert.com
|< Prev||Next >|