Backdoor.Acropolis - Removal

To remove this Trojan horse, you need to delete the registry entries it created, restart the computer, and then run a full system scan. Follow these steps to do this:

CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.

1. Click Start, and click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the following subkey:
   
   HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\RunServices
   
4. In the right pane, delete the following value:
   
   Winport.com <Trojan file name and path>
   
5. Navigate to and delete the following subkey:
   
   HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\UDP Ports
   
6. Close the Registry Editor.
7. Restart the computer.
8. Run LiveUpdate to make sure that you have the most recent virus definitions.
9. Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set to scan all files.
10. Delete any files that are detected as Backdoor.Acropolis.

Technical Details