Trojan.Bankpatch Removal Tool

The Trojan.Bankpatch Removal Tool was designed to remove the infections of Trojan.Bankpatch.C and Infostealer.Nadebanker
· Save the file to a convenient location, such as your Windows desktop.
· Close all running programs.
· Create a new folder named NSS in your C drive.
· Locate the file that you just downloaded.
· Double-click the NortonSecurityScan.exe file.
· Click Run.
· Click Browse, and then navigate to the following folder: C:\NSS
· Click Unzip.
· Click OK and then Close.
· Navigate to the following folder: C:\NSS
· Double-click the NSS.exe file.
· Read the License Agreement, and then click I Agree to continue.
· Click Full System Scan and then click Start Scan.
· If the following system files are reported to be infected with Trojan.Bankpatch.C and need to be restored continue to instructions to Restore the Infected System Files: kernel32.dll, powrprof.dll, wininet.dll
· Restart your computer and run Norton Security Scan again to ensure the system is clean.
· Insert the Windows XP/Windows Vista CD-ROM into the CD-ROM drive.
· Restart the computer from the CD-ROM drive.
· Press R to start the Recovery Console when the "Welcome to Setup" screen appears.
· Select the option to access from the Recovery Console.
· Enter the administrator password and press Enter.
· At the command prompt, type the following commands and press Enter after each line:
cd system32
ren kernel32.dll kernel32.old
ren powrprof.dll powrprof.old
ren wininet.dll wininet.old
expand [CD-ROM DRIVE LETTER]i386kernel32.dl_
expand [CD-ROM DRIVE LETTER]i386powrprof.dl_
expand [CD-ROM DRIVE LETTER]i386wininet.dl_
exit
· The computer will now restart automatically.
· Run Norton Security Scan again to ensure the system is clean.System requirementsYou must have administrative rights to run this tool on Windows XP and Windows Vista.
You must have a Windows XP/Windows Vista CDROM to recover system files