Click on screenshot to zoom
Danger level 8
Type: Trojans
Common infection symptoms:
  • Connects to the internet without permission
  • Shows commercial adverts
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Trojan.Matcash

The term Trojan refers to the fact this particular malware, Trojan.Matcash is not only installed under deceptive pretences, infiltrating the user’s PC without their approval or knowledge, but also refers to the fact that this malware application is intensely dangerous for any PC system. The fact that Trojan.Matcash can easily enter any PC system via security exploits and flaws, most times without the user’s interaction, means that it is that much easier for Trojan.Matcash to enter the system and ensure the system’s security is greatly compromised. Trojan.Matcash is a clearly malicious application consisting of harmful functionality which is utilized to ensure a PC user’s entire network remains compromised and possibly endangered. Trojan.Matcash is particularly damaging as once it has fully embedded itself within the PC’s system, it puts the system at risk of the opening of illicit network connections, the use of polymorphic tactics to self-mutate, the disabling of already installed security software, modification of system files, and not forgetting the installation of additional malware. Furthermore, these security risks may also collect and transmit personally identifiable information (PII) without the user’s consent thus severely degrading the performance and stability of the computer. It is largely due to all these reasons that Trojan.Matcash is given a high priority security risk status by many computer analysts. The best way to deal with the threat of Trojan.Matcash is to simply remove it from the affected PC system.

Download Spyware Removal Tool to Remove* Trojan.Matcash
  • Quick & tested solution for Trojan.Matcash removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Trojan.Matcash

Files associated with Trojan.Matcash infection:

faceback.exe
cft.exe
Gool.exe
retadpu572.exe
faceback.exe
faceback1001186.exe
mrofinu572.exe
mrofinu27.exe
Update.exe
retadpu1000106.exe
Twain.exe
Skra.exe
b104.exe
webtools.dll
retadpu922.exe
svchosts.exe
mrofinu72.exe
gadcom.exe

Trojan.Matcash DLL's to remove:

webtools.dll

Trojan.Matcash processes to kill:

cft.exe
Gool.exe
retadpu572.exe
faceback.exe
faceback1001186.exe
mrofinu572.exe
mrofinu27.exe
Update.exe
retadpu1000106.exe
Twain.exe
Skra.exe
b104.exe
retadpu922.exe
svchosts.exe
mrofinu72.exe
gadcom.exe
faceback.exe

Remove Trojan.Matcash registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COM+ Messages
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\gadcom
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ runner1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{15421B84-3488-49A7-AD18-CBF84A3EFAF6}
RUNNING PROGRAM\b104.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Skra
RUNNING PROGRAM\Twain.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\{5C109D1B-07CD-1033-0929-060323060001}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Client IP-IPX
RUNNING PROGRAM\faceback.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Gool
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Twain
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft_Hosts_system
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ cft
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.