Home Blog

Trojan.Chromext – How to Remove Trojan.Chromext in minutes

Posted by in Blog Trojan
on December 5th, 2012 | Leave a comment

Trojan.Chromext is a malicious Trojan virus that disguises itself as a legitimate Chrome browser extension. It is designed to steal sensitive information associated with browser activities and exploit browser vulnerability to open a back door on the compromised PC. When Trojan.Chromext gets into your computer, it attaches to Google Chrome. It attempts to steal passwords, login name and search inquiries you enter to the web browser and also keep a copy of the browser cookies. By modifying windows registry, the Trojan can run automatically and connect to the server for data transmission. Via the back door, additional pc threats can access your computer easily. To keep your system and your personal information in safe, you need to remove Trojan.Chromext as soon as possible.

Usually, an antivirus program is the most common that help common users to remove a virus. Besides, manual removal way is also an option, but it is only for users who have enough pc skills and knowledge. For example, a pc technician may use Trojan.Chromext manual removal way.

How to remove Trojan.Chromext manually

When the Trojan infects a computer, it will drop lots of files on the computer and add related registry entries. You need to remove them manually.
1. Exit Chrome Browser
2. Remove following files associated with Trojan.Chromext

%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\TODO
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1.h
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1.c
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\LICENSE
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\INSTALL
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\main.js
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\icon.png
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\Makefile
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\make.bat
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\manifest.json
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\jquery.min.js
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\background.js
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\background.html
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack.cc
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack.nmf
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_64.o
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_32.o
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_x86_64.nexe
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_x86_32.nexe
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\pack_extension.bat
%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\pack_extension – Copy.bat

3. Remove malicious registry entries via registry editor

Remove Trojan.Chromext by an antivirus program
First of all, you need to find a virus removal program that has detection on the Trojan. And then you can run a scan to get rid of any related infection easily. Using an antivirus program is the fastest way. When the program is scanning, users can leave the pc and go for other things. After an hour the scan completes and the threats will be picked up. The complicated Trojan.Chromext removal job is simplified in clicking on a couple of buttons.

Are you looking for a virus removal program that can remove Trojan.Chromext completely? Click here to download Spyware Cease. The powerful virus removal program will not let you down.

Leave a Reply