Spyware Database Uninstall Metafisher Uninstall Metafisher

Metafisher Description and Removal Instructions


Metafisher Description (Scan your PC for Metafisher with SpyHunter)

Metafisher is a dangerous trojan distributed through bogus e-mail messages containing malicious links. Those messages can be either in English or in Spanish. Eeach of them contains a link leading to a web page hosting the WMF exploit. Once the user clicks on such link, the web browser opens a malicious site, which secretly installs Metafisher. Once installed, the trojan starts spying on the user. It logs user passwords and web sites visited, records MSN Explorer and Outlook Express account details. Metafisher also steals Windows passwords, PC network information, mail server details and other sensitive data. Gathered information is transferred to a predetermined remote host or uploaded to a predefined FTP server. The trojan can receive commands from the remote attacker. The intruder can remove all computer files in the root of the main hard disk and destroy installed software. Metafisher is able to bypass the Windows Firewall. It works as an Internet Explorer add-on and therefore runs every time the user launches the web browser.

IMPORTANT DISCLAIMER
Please note: This website is NOT associated or affiliated in any way with Metafisher or its creators. The content provided in this article should NOT be construed as an endorsement, a recommendation or an advertisement for Metafisher. The goal of this article is to assist computer users on the detection and removal of Metafisher. This article is provided on an "as is" basis and to be used for informational purposes only.

Why Should I Remove Metafisher?

Note: Manual removal is a difficult process and it is not recommend unless you are an expert in this field. Therefore, your best defense is to download and install a reliable anti-spyware program to scan Metafisher and other spyware on your machine. In order to detect Metafisher in the easiest and fastest way possible, we advised trying the free SpyHunter scanner provided on this website. The free version of SpyHunter is only a detection utility.

However, if you wish to continue to the Metafisher removal stage with SpyHunter, you must first purchase the full version of SpyHunter or you can manually remove Metafisher by moving on to the "Remove Metafisher Manually" section.

Online threats constantly change to avoid detection, and therefore SpyHunter comes equipped with a full technical support, as well as a one-on-one customer support service called Spyware HelpDesk which gives its support technicians the ability to create a custom automated fix tailored to your PC. If SpyHunter is unable to detect and remove Metafisher, the Spyware Helpdesk will generate a custom fix, transmit it to your SpyHunter removal tool and completely remove Metafisher from your PC.

  1. Download SpyHunter Scanner Download SpyHunter Scanner.

  2. Run a full system scan to detect Metafisher files.

  3. Once you've detected Metafisher on your PC, you will then need to purchase SpyHunter to start the removal process.

  4. Reboot your PC and rerun the scan for any remaining traces of Metafisher.

** SpyHunter scanner version is ONLY for detection. To remove Metafisher and other threats, you will need to purchase SpyHunter's removal tool.

Remove Metafisher Manually

Tip: If you are not an expert in this field, we highly recommend you use SpyHunter to scan your PC for Metafisher. You'll run the risk of damaging your computer if you make a mistake during the manual removal process.

Stop the following Metafisher processes:
installer.exe


Remove the following Metafisher registry keys:
78364D99-A640-4DDF-B91A-67EFF8373045
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:ProgramFilesInternetExploreriexplore.exe=C:ProgramFilesInternetExploreriexplore.exe:*:Enabled:InternetExplorer
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadcompid
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadformwas
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadhttpreport
ext_install
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionControlPanelloadwaspopup


Unregister the following Metafisher DLL files:
msncps.dll


Locate and delete the following Metafisher files:
installer.exe
msncps.dll
1.bat
shot.html
form.txt
info.txt


Metafisher Advice

Metafisher manual removal process can be difficult to do because you're required to access and edit sensitive files in your system registry.

Warning: If you try to remove Metafisher files without being completely sure what you are doing, you run the risk of damaging or losing important data on your computer.

Tip: To avoid this risk, we highly recommend you use a good spyware cleaner/remover to automatically find and remove Metafisher as well as spyware, adware, trojan and malware in your PC.

Metafisher Automatic Detection

To automatically search for Metafisher...
Download SpyHunter Scanner Download SpyHunter Scanner.

** SpyHunter scanner version is ONLY for detection. To remove Metafisher and other threats, you will need to purchase SpyHunter's removal tool.

For more details on Metafisher, please read our "Metafisher Overview" below.


Metafisher Overview

In the following sections, we investigate and explain the key malicious properties that are attributed to Metafisher.

How Metafisher infects your PC

Metafisher may use one or more of these methods to infect your computer. Metafisher is spyware that may take control of your entire system. Metafisher may infect your computer...

  • Through unexpected email attachments. One of the most popular ways of becoming infected with spyware is by opening an attachment sent via e-mail. You should never open unexpected email attachments. Confirm with the sender first that they did in fact send the email.

  • Through browser security loopholes while you're surfing the Web. Some spyware can even bypass firewalls by disguising itself as part of legitimate software.

  • Through instant messenger programs. If you're not secured by a good firewall, spyware can attach itself when you're sharing files with your instant messenger.

  • Metafisher recreates, repairs and updates itself. Metafisher and other complex spyware applications may recreate, repair and update themselves to evade deletion. When Metafisher alters, restores and updates its files, DLLs, registry keys and process, a scanner may only remove part of the program allowing the other remaining files to execute procedures to repair and update. In these cases, it can make the Metafisher manual removal process very difficult.

Metafisher Prevention Rules

Follow these Metafisher prevention rules and protect your computer from Metafisher and other spyware:

Rule #1: Ensure that your Windows Security is up-to-date.

Every week Microsoft provides their new updates that can always be downloaded manually from the Microsoft website. To get Microsoft Update, you should do the following steps:

  1. Go to IE > Tools > Windows Update > Product Updates,

  2. Select "ALL High-Priority Security Updates" from the list,

  3. Open IE and go to Internet Options > Security > Internet,

  4. Press "Default Level" and then OK,

  5. Press "Custom Level."

Rule #2: Download and install a reliable anti-spyware software.

A good anti-spyware software that recognizes current Metafisher as well as other forms of spyware can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively reverse the damage of your computer and detect Metafisher automatically.

Download SpyHunter Scanner Download SpyHunter Scanner.

** SpyHunter scanner version is ONLY for spyware detection. To remove Metafisher and other online threats, you will need to purchase SpyHunter's removal tool.

Rule #3: Keep your anti-spyware definitions up-to-date.

New Metafisher files can be created every day, thus it is very important to ensure that your anti-spyware program is up-to-date. Your anti-spyware scanner should have an update feature where with a click of a button so you can get new spyware definitions immediately. Often, good anti-spyware software will open an update window reminding you that there are new updates available.

Rule #4: Install and keep your firewall turned on.

A firewall is vital for a complete protection of your PC. Ensure that your firewall is always turned on. A firewall can stop unwanted software like Metafisher from hijacking your PC.

Metafisher and other Spyware Related Info:

Wikipedia.org/Spyware - Wikipedia's definition of spyware.
StopBadware.org - A non-profit organization that aims to fight against badware.
Anti-Spyware Coalition - Is a group dedicated to building a consensus about definitions and best practices in the debate surrounding spyware and other potentially unwanted technologies.

Uninstall Spyware