SpyHunter Protect Your PC!

Friday, March 27, 2015

NanoCore RAT Removal - How to Stop It from Hurting Your PC?

Information about NanoCore RAT


NanoCore RAT is classified as a dangerous Trojan horse which can mess up an infected machine. Usually, you may get this Trojan horse through spam email attachments. It can also come through free downloads. It exploits the CVE-2012-0158 vulnerability to come to your PC. Created by cyber criminals, this Trojan horse aims at stealing users' confidential information for commercial purpose. Companies and private businesses are it primary targets, but it can also do harms to personal PCs. And it can download and run threatening plugins automatically. So you may get unwanted ads from it. Your anti-virus program may be blocked by it. You should not take this threat slightly.

Want a quicker way to solve it? >>Click for the recommended Security Tool.

NanoCore RAT and its harmful traits

  • Ads like invoices or messages informing you that you won a prize come to annoy you.
  • NanoCore RAT attacks your firewall and anti-virus program to bypass the detection which will make your system vulnerable.
  • It places its files in the temp folders and delete your files randomly to do harm to your PC.
  • Other viruses or malware can be brought by it.
  • Serious infected problems like system crashes, freezes and blue screen of death also happen from time to time.
  • Cyber criminals can get access to your personal information through the Trojan horse.

Step by step guides on removing NanoCore RAT


Method 1: Manually remove it yourself by following the guides below.
Method 2: Automatically remove it by using SpyHunter.

Manual Steps


Step 1: Use Safe Mode to achieve better results.

Restart your PC and keep pressing F8 key before Windows launches. When you get to the interface, please select "Safe Mode with Networking" and then press "Enter" on your keyboard.


Step 2: End all the harmful processes of NanoCore RAT.

Press Ctrl+Alt+Del keys simultaneously to quickly get to the interface. In the Processes section, seek for all ongoing related or suspicious programs and right click all the harmful processes to end them.


Step 3: Remove it from your browsers.

For Mozilla Firefox



Follow the steps as the pictures show you. Remove add-ons of NanoCore RAT both from "Extensions" and "Plugins".

For Google Chrome

Menu icon>>Tools>>Extensions.
Search for related ones and remove them by clicking on the trashcan icon.


For Internet Explorer

Tools>>Manage Add-ons>>Toolbars and Extensions.


Disable and remove add-ons of NanoCore RAT from your Internet Explorer.

Step 4: Show hidden files on your PC and then delete the malicious ones.
Start button>>Control Panel>>Appearance and Themes>>Folder Options.
In view tab, tick "Show hidden files and folders" and deselect "Hide protected operating system files (Recommended)". And then click "Apply". Since all the related hidden files have been shown, you can go to local disk C or other place to search for them and delete them.


%CommonAppData%\<random>.exe
C:\Windows\Temp\<random>.exe
%temp%\<random>.exe
C:\Program Files\<random>

Step 5: Delete vicious registry entries. (Be cautious during this step.)

Click Start and find Run. Input "regedit" and then click "OK". Then there comes the Registry Editor. Find out all the harmful keys and right click to remove them.




HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings

Automatic Steps


SpyHunter is a real-time anti-spyware program with the function of removing Trojan horses, rootkits, worms, and adware, etc. With good reputation, SpyHunter is used by numerous of people all over the world every day. It works well and it's compatible with existing security program without conflicts. Download this wonderful tool to smash NanoCore RAT now!

Step 1: Click the download icon to download and install SpyHunter.


Step 2: Follow the install guide to install SpyHunter on your PC properly.



Step 3: Launch SpyHunter and click "Malware Scan" to have a full scan for your computer.


Step 4: When the scan is over, tick "Select All" and click "Fix Threats" to clean up all viruses and invaders.



Optional steps to check and optimize your PC


To improve the performance of a PC, we need to fix the Registry Errors and system rubbishes. RegCure Pro is a specialist in this field. Fragmented Core Operating, System FilesFragmented Files on Hard Drive,  and Accumulated Junk File Clutter are all can be cleaned by RegCure Pro.

The following steps are for your reference.

Step 1: Click the safe link here to download RegCure Pro!

(Downloading removal tool from here authorized by relevant official site won't worry you. This can also help you avoid getting pirate software or other malware accidentally.)


Step 2: Double click to run the downloaded file and click next to install RegCure.




Step 3: RegCure will automatically open on your screen. You just need to make a System Scan for NanoCore RAT.


Step 4: Choose the item you want and click "Fix All" to get rid of the harmful parts.


Tips to bear in mind


NanoCore RAT is dangerous that you should remove it once found. A powerful removal tool like SpyHunter is needed if you're a novice. Actually we don't recommend the manual steps here. It's so complicated. Don't hesitate to remove it. The longer the Trojan horse stays on your PC, the more harms it may bring you.

For clean master to recheck and optimize your PC, please click here for RegCure.

For related information, please click here:

How to Remove Trojan:Win64/Alureon.gen!K Completely – Trojan:Win64/Alureon.gen!K Manual Removal Help