Home Blog

Backdoor.Wisti Removal Help – How Can You Remove Backdoor.Wisti instantly from PC

Posted by in Blog backdoor trojan
on September 18th, 2012 | Leave a comment

Backdoor.Wisti is a Trojan created by hackers or crackers to open a back door on the compromised computers. The Trojan may disguise itself as a useful program so as to attack the computer secretly. It can also attach to other freeware or shareware and access the computer without being noticed by users. Once the infected program is executed, Backdoor.Wisti will be activated and then generate many malicious files on the system.

Properties of Backdoor.Wisti
It changes system settings like firewall settings and browser settings
It modifies registry startup entries so that it can run at windows startup
It gives other threats access to the computer
It allow hackers to gain sensitive information

Technical details of Backdoor.Wisti
When the Trojan is executed, it adds the following files to the target computer:

%Temp%\csrss.exe
%Temp%\lass.exe
%Temp%\svchost.exe
%UserProfile%\Application Data\Microsoft\Network\msscrt726.dll
%Windir%\~00ELISE1D797.TMP

Backdoor.Wisti creates the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\stisvc

The Trojan may then connect to one or more of the following URLs:

[https://]77.78.29.94/c0883674/page_30892
[https://]77.40.52.146/c0883674/page_30892
[https://]27.1.84.7/c0883674/page_30892
[https://]91.197.18.85/c0883674/page_30892
[http://]77.78.29.94/c0883674/page_30892
[http://]91.197.18.85/c0883674/page_30892
[http://]200.25.216.124/c0883674/page_30892
[https://]200.25.216.124/c0883674/page_30892
[http://]27.1.84.7/c0883674/page_30892
[https://]77.78.29.94/c0881492/page_30892
[http://]27.1.84.7/c0881492/page_30892
[http://]65.203.140.75/c0881492/page_30892
[http://]77.78.29.94/c0881492/page_30892
[https://]190.196.71.231/c0881492/page_30892
[https://]27.1.84.7/c0881492/page_30892
[https://]65.203.140.75/c0881492/page_30892
[https://]77.40.52.146/c0881492/page_30892

Notes: above information may help users who have advanced pc skills remove Backdoor.Wisti manually from the computer.

How to remove Backdoor.Wisti effectively
The most effective way to get rid of such a Trojan is to scan the computer with a virus removal program and let it wipe off the infection automatically. Actually, it has become the most common way to remove threats and protect computers. Do you have an antivirus program? Does your antivirus program remove Backdoor.Wisti effectively? Here we have a recommendation for Backdoor.Wisti removal. Users who can not delete the Trojan with their security program can download Spyware Cease, an advanced antispyware program.

The advantage of using Spyware Cease is it removes not only Backdoor.Wisti but also threats accessing the infected computer via back door.

Leave a Reply