Spyware Database
Uninstall Metafisher
Metafisher Description and Removal Instructions
Metafisher is a dangerous trojan distributed through bogus e-mail messages containing malicious links. Those messages can be either in English or in Spanish. Eeach of them contains a link leading to a web page hosting the WMF exploit. Once the user clicks on such link, the web browser opens a malicious site, which secretly installs Metafisher. Once installed, the trojan starts spying on the user. It logs user passwords and web sites visited, records MSN Explorer and Outlook Express account details. Metafisher also steals Windows passwords, PC network information, mail server details and other sensitive data. Gathered information is transferred to a predetermined remote host or uploaded to a predefined FTP server. The trojan can receive commands from the remote attacker. The intruder can remove all computer files in the root of the main hard disk and destroy installed software. Metafisher is able to bypass the Windows Firewall. It works as an Internet Explorer add-on and therefore runs every time the user launches the web browser.
IMPORTANT DISCLAIMER
Please note: This website is NOT associated or affiliated in any way
with Metafisher or its creators. The content provided in this article should NOT be construed as an endorsement, a recommendation or an advertisement for Metafisher.
The goal of this article is to assist computer users on the detection and removal of Metafisher. This article is provided on an "as is" basis and to be used for informational purposes only. |
Why Should I Remove Metafisher?
Note: Manual removal is a difficult process and it is not recommend
unless you are an expert in this field. Therefore, your best defense is to
download and install a reliable anti-spyware program to scan Metafisher and other spyware on your machine.
In order to detect Metafisher in the easiest and fastest way possible, we advised trying the free SpyHunter scanner provided on this website.
The free version of SpyHunter is only a detection utility.
However, if you wish to continue to the Metafisher removal stage with SpyHunter, you must first purchase the full version of SpyHunter or you
can manually remove Metafisher by moving on to the "Remove Metafisher Manually" section.
Online threats constantly change to avoid detection, and therefore SpyHunter comes equipped with a full technical support, as well as a
one-on-one customer support service called Spyware HelpDesk which gives its support technicians the ability to create a custom automated
fix tailored to your PC. If SpyHunter is unable to detect and remove Metafisher, the Spyware Helpdesk will generate a custom fix, transmit
it to your SpyHunter removal tool and completely remove Metafisher from your PC.
Download SpyHunter Scanner.
- Run a full system scan to detect Metafisher files.
- Once you've detected Metafisher on your PC, you will then need to purchase SpyHunter to start the removal process.
- Reboot your PC and rerun the scan for any remaining traces of Metafisher.
** SpyHunter scanner version is ONLY for detection. To remove Metafisher
and other threats, you will need to purchase SpyHunter's removal tool.
Remove Metafisher Manually
Tip:
If you are not an expert in this field, we highly
recommend you use SpyHunter to scan your PC for Metafisher. You'll run
the risk of damaging your computer if you make a mistake
during the manual removal process.
Stop the following Metafisher processes:
installer.exe
Remove the following
Metafisher registry keys:
78364D99-A640-4DDF-B91A-67EFF8373045 HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:ProgramFilesInternetExploreriexplore.exe=C:ProgramFilesInternetExploreriexplore.exe:*:Enabled:InternetExplorer HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadcompid HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadformwas HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadhttpreport ext_install HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadwaspopup
Unregister the following Metafisher DLL files:
msncps.dll
Locate and delete the following Metafisher
files:
installer.exe msncps.dll 1.bat shot.html form.txt info.txt
Metafisher Advice
Metafisher manual removal process can be difficult to do because you're required to access and edit
sensitive files in your system registry.
Warning: If you try to remove Metafisher files without being completely
sure what you are doing, you run the risk of damaging or losing important data on your computer.
Tip: To avoid this risk, we highly recommend you use a good spyware cleaner/remover to
automatically find and remove Metafisher as well as spyware,
adware, trojan and malware in your PC.
Metafisher Automatic Detection
To automatically search for Metafisher...
Download SpyHunter Scanner.
** SpyHunter scanner version is ONLY for detection. To remove Metafisher
and other threats, you will need to purchase SpyHunter's removal tool.
For more details on Metafisher, please read our "Metafisher Overview" below.
Metafisher Overview
In the following sections, we investigate and explain the key malicious properties that are attributed to Metafisher.
How Metafisher infects your PC
Metafisher may use one or more of these methods to infect your computer. Metafisher is spyware that may take
control of your entire system. Metafisher may infect your computer...
- Through unexpected email attachments. One of the most popular ways of becoming infected with spyware is by opening an attachment
sent via e-mail. You should never open unexpected email attachments. Confirm with the sender first that they did in fact send the
email.
- Through browser security loopholes while you're surfing the Web. Some spyware can even bypass firewalls by disguising itself as
part of legitimate software.
- Through instant messenger programs. If you're not secured by a good firewall, spyware can attach itself when you're
sharing files with your instant messenger.
- Metafisher recreates, repairs and updates itself. Metafisher and other complex spyware
applications may recreate, repair and update themselves to evade deletion. When Metafisher alters, restores and updates
its files, DLLs, registry keys and process, a scanner may only remove part of the program allowing the other
remaining files to execute procedures to repair and update. In these cases, it can make the Metafisher manual removal
process very difficult.
Metafisher Prevention Rules
Follow these Metafisher prevention rules and protect your computer from Metafisher and other spyware:
Rule #1: Ensure that your Windows Security is up-to-date.
Every week Microsoft provides their new updates that can always be downloaded manually from the Microsoft website. To get
Microsoft Update, you should do the following steps:
- Go to IE > Tools > Windows Update > Product Updates,
- Select "ALL High-Priority Security Updates" from the list,
- Open IE and go to Internet Options > Security > Internet,
- Press "Default Level" and then OK,
- Press "Custom Level."
Rule #2: Download and install a reliable anti-spyware software.
A good anti-spyware software that recognizes current Metafisher as well as other forms of spyware
can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively
reverse the damage of your computer and detect Metafisher automatically.
Download SpyHunter Scanner.
** SpyHunter scanner version is ONLY for spyware detection. To remove Metafisher
and other online threats, you will need to purchase SpyHunter's removal tool.
Rule #3: Keep your anti-spyware definitions up-to-date.
New Metafisher files can be created every day, thus it is very important to ensure that your
anti-spyware program is up-to-date. Your anti-spyware scanner should have an update feature where with a click
of a button so you can get new spyware definitions immediately. Often, good anti-spyware software will open
an update window reminding you that there are new updates available.
Rule #4: Install and keep your firewall turned on.
A firewall is vital for a complete protection of your PC. Ensure that your firewall is always turned on.
A firewall can stop unwanted software like Metafisher from hijacking your PC.
Metafisher and other Spyware Related Info:
Wikipedia.org/Spyware - Wikipedia's definition of spyware.
StopBadware.org - A non-profit organization that aims to fight against badware.
Anti-Spyware Coalition - Is a group dedicated to building a consensus about definitions and best
practices in the debate surrounding spyware and other potentially unwanted technologies.
|