Loadperf.dll

Harmful - Clones

loadperf.dll loadperf.dll is an app used to (Load and unload performance counters) in Microsoft windows.

 

 

 

 

 

 

A file by the name Loadperf.dll is also created by a computer virus program that affects the computers running on the Microsoft windows operating systems. It's analysis report is given below

Files found - view
C:\windows\system32\wbem\loadperf.dll
C:\windows\Temp\a.xlsx


The virus seems to enter the computer as a Microsoft Excel file named "a.xlsx"

It starts a service "WmiApSrv/ WMI Performance Adapter" which is normally turned off.

It loads the malicious file loadperf.dll in the address space of the file wmiapsrv.exe. Thus the virus avoids detection of its dll file. Which injects its code into wmiapsrv.exe.

Necessary steps to remove this virus

  • To turn off the service "WmiApSrv/ WMI Performance Adapter"
  • To search and delete virus files from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise virus files inside the hidden folders will not be found
  • To remove obsolete registry keys using CCleaner

Detailed instructions and free Tools

Preventive step to avoid viruses

Reprinted with permission from Threatexpert.com

Disclaimer


FAQ

Subscribe to me on YouTube