We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
VirTool:WinNT/Ispro.B
Aliases: No associated aliases
Summary
The following free Microsoft software detects and removes this threat:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.
Manually remove this threat
Disconnect from the Internet
To prevent your PC from infecting other computers, you should disconnect it from the Internet. Print this web page or save a copy on your PC, then unplug your network cable and disable your wireless connection.
Delete the trojan file from your PC
-
Click Start, and then Run. For Windows 8, press the Windows key, then type Run
-
In the Open field, type %windir%.
-
Click OK.
-
Click Name to sort files by name.
-
If delprot.sys is in the list, delete it.
-
On the Desktop, right-click the Recycle Bin and click Empty Recycle Bin.
-
Click Yes.
If deleting the file fails, follow these steps to verify that delprot.sys is not running:
-
Press CTRL+ALT+DEL once and click Task Manager.
-
Click Processes and click Image Name to sort the running processes by name.
-
Confirm that delprot.sys is not in the list.
Restart your computer
-
On the Start menu, click Shut Down.
-
Select Restart from the drop-down list and click OK.
Do not reconnect your computer to the Internet until the computer is protected from re-infection.