How Do I Remove Ali.exe Permanently?

gilu

My system has been infected with the ali.exe trojan. That's what I think it is!

It starts my default browser (hidden) and sends stuff out into the world. Now I've renamed firefox.exe to something else and now I can see ali.exe coming up in the taskmanager trying to start firefox.exe every 2 seconds!

How can I remove this malware once and for all?

And, HOW did that thing bypass Bitdefender? Bitdefender doesn't even see it as malware!

Thanks for any advice!

Gilbert.

AndreiASM

Please put the file in an archive with the password "infected" and attach it to a new post. We'll take a look at it, BD analysts will add detection and we will tell you what to do next. Meanwhile, you can try to kill it's process, remove any reference that points to the trojan in registry at startup (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run and HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Current Version\Run), and, after uploading it here, you may even try to delete the trojan.

Regards, Andrei.