Remove Trymedia.ew32/sality.gen.z

By | May 29, 2015

My computer has got infected by Trymedia.ew32/sality.gen.z. I think my computer was infected my PC when I accidentally clicked and agreed to install an update for the software installed on my PC. I have tried several ways to remove this threat, but none of them are helpful. I cannot figure out any solution to this problem now. Please help me!!!

Trymedia.ew32/sality.gen.z is a Trojan horse which is detected recently by some famous antivirus programs such as Avast, Avira and Norton. It is designed to mess up the targeted computers and infect other machines around the world through the Internet. For computer users, it is a disaster which may terribly do harm to their PCs and bring about unwanted losses. The Trojan horse is able to disguise itself as a part of Windows files and make it difficult for security tools to detect and remove it. If you have some valid system files deleted mistakenly, as a result, the computer may be greatly damaged.

Trymedia.ew32/sality.gen.z can infiltrate into the targeted system by exploiting system vulnerability. To safely prevent the attacks from this Trojan horse, you may need to be aware of the drive-by downloads and spam email attachments. The Trojan horse will start to add malicious codes onto the system to modify the function of the crucial system files. By performing this, it has the ability to shut down some ongoing process, especially the antivirus programs, and prevent antivirus scanner from detecting its malicious codes and disrupt the system. The Trojan horse can cause various problems on the infected computer, such as blue screen of death, abrupt system shutdown and undesirably automatic restarting, which will completely mess up the system and result in crucial system file corruption. If you ignore this Trojan horse and leave it stay on your system, more dangerous malware may be dropped into the system and more serious problems can be caused. Even worse, the Trojan horse is designed with the aim to steal users’ private information. When in your computer, the Trojan horse will try to collect your personal information and then send it to the remote hackers. So, you may have to quickly remove Trymedia.ew32/sality.gen.z from your computer so as to avoid unwanted trouble.

The manual removal needs users to be skilled at computer. If you haven’t any experience in dealing with processes, files, and registry entries, please download and install a professional removal tool to remove the Trojan horse.


Symptoms of the Infection

Your computer suddenly gets very slow when starting up, shutting down, launching programs or processing tasks.
Network connection speed slows down significantly and it often takes a long time to access a website.
You frequently get alerts from your firewall about an unknown program or process trying to access the internet.
Your computer is flooded with numerous ad pop-ups and false security alerts.
Some of your files become corrupted or suddenly don’t work properly.
Some files or folders are deleted or changed without any human actions.
Your favorites list has added some sites that you never placed there
Unknown toolbars appear in your web browser and you don’t remember installing them.
Unexpected icons appear in the task tray at the bottom of your screen.
You cannot access security related websites or cannot update your antivirus software.
You are redirected to websites which have nothing to do with the ones you type into the address bar.

Why Cannot Remove Trymedia.ew32/sality.gen.z Using Your Antivirus?

You may find it hard to detect and remove the Trojan horse using your antivirus program. Why? First of all, it should be known that an antivirus program or anti-malware program can help protect your computer from malware just because that it is able to recognize that they’re actually malware. However, in these days more and more malware are created by cyber hackers for various purposes and not every type of malware can be easily recognized by an anti-malware program, especially one that hasn’t been updated for a long time. In addition, some cyber hackers know much about how anti-malware programs work and they can write a Trojan horse which has the ability to bypass most security tools. Trymedia.ew32/sality.gen.z is such a Trojan horse that can evade detection and removal by a general anti-malware program. When downloaded onto a computer, it will quickly load itself into the Windows registry, which allows it to be executed every time the computer starts up. Also, it will disguise itself as a part of the system file, attempting to evade detection by the antivirus program. Moreover, this Trojan horse will try to kill process of the antivirus program so as to disable it. All these can explain why it becomes a so difficult task to remove the Trojan horse from an infected computer.

How to Remove Trymedia.ew32/sality.gen.z Completely

Method 1: Manually Remove the Trojan Horse Step by Step.

Method 2: Automatically Remove the Trojan Horse by Using SpyHunter.

Method 1: Manually Remove the Trojan Horse Step by Step.

Step 1: Terminate process of Trymedia.ew32/sality.gen.z.
a. Start the Task Manager by pressing the key combination “CTRL + Shift + ESC”.
b. Under the “Processes” tab, find out and terminate the Trojan horse related process (process of the Trojan horse may be named with random characters and it occupies extremely high CPU usage).

End process

Step 2: Remove all Trojan horse related programs.
a. Click the Start menu, and select “Control Panel”.
b. In the “Control Panel” window, click on “Uninstall a program”.

uninstall a_program_1
c. In the list of all currently installed programs, find out any programs related to the Trojan horse and click on “Uninstall” button.
d. Then, click “Yes” in the pop-up window which asks if you want to uninstall the program.

Step 3: Show all hidden files and folders.
a. Go to Start button and select “Control Panel” option.
b. In the “Control Panel” window, click on the “Appearance and Personalization” link.
c. Select “Folder Options” and click the “View” tab.
d. Under “Advanced settings”, tick “Show hidden files, folders and drives”, non-tick “Hide protected operating system files (Recommended)” and then click the “OK” button.

Folder Options-Win 7

Step 4: Remove all files relative to Trymedia.ew32/sality.gen.z.
a. Navigate to the local disk C.

open local hard disk C

b. Find out and delete all malicious files created by the Trojan horse.

%AllUsersProfile%\Application Data\.dll
%UserProfile%\Desktop\[Trojan horse name].lnk
%UserProfile%\Start Menu\[Trojan horse name]\Help.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\[Trojan horse name].lnk

Step 5: Delete all registry entries associated with Trymedia.ew32/sality.gen.z.
a. Open Registry Editor by pressing the Windows key + R key, typing “regedit” and clicking OK.


b. Search for all the registry entries associated with the Trojan horse and remove them all.


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “random.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\[Trojan horse name]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\[Trojan horse name]\DisplayIcon %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe,0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\[Trojan horse name]\DisplayName [Trojan horse name]

Method 2: Automatically Remove the Trojan Horse by Using SpyHunter.

If you are not expert at computer, automatically removing Trymedia.ew32/sality.gen.z will be a better option. SpyHunter is a reputable anti-malware program offering detection and protection against malware including Trojans, worms, viruses, rootkits, adware, spyware, ransomware, etc. You can follow the steps below to download and install this powerful removal tool on your computer, and then run it to detect and remove all found threats on your PC.

Step 1: Click SpyHunter Download Link and save the file in your hard drive. When a small window pops up, please click on the “Save File” button.

spyhunter-save file

Step 2: Once the file is downloaded, double click on it. And click on the “Run” button when a window appears and asks if you want to run this file.

spyhunter-run setup file

Step 3: After that, SpyHunter installer will be downloaded. You can see the downloading process as shown below.

spyhunter-download installer

Step 4: Once downloading finishes, select the language, accept the SpyHunter license agreement and click “Next”.


Step 5: Keep following the wizard during the setup process. When you are presented with the prompt saying that SpyHunter has been successfully installed, click the “Finish” button.

spyhunter-installation finish

Step 6: Then, launch SpyHunter by double-clicking on its icon, and then click on “Scan Computer Now” to scan your system for Trymedia.ew32/sality.gen.z and other potential threats.


Step 7: The scanning process may take 20 minutes or more (depending on the number of files in your system). So, you need to wait for some time until the system scan is completed.

spyhunter-scan files process

Step 8: Once SpyHunter finishes scanning your computer, make sure that all malicious items are selected, and click on the “Fix Threats” button. Then, SpyHunter will begin remove all threats from your PC. Restart your computer, and Trymedia.ew32/sality.gen.z should have been completely removed out of your PC.

spyhunter-fix threats

Tips to Protect Your PC from Malware Infection

Install a reliable anti-malware program and update it regularly.
Your first line of defense would be a powerful anti-malware program that provides real-time protection. SpyHunter is such a powerful anti-malware program which does not only detect and remove threats, but also stops any processes that attempt to let malware enter into your PC secretly to exploit Windows registry. Click here to download this excellent anti-malware program now.

Always update the software installed on your PC.
Software vendors constantly releases updates for programs whenever a flaw is discovered. Getting the updates makes the computer more secured and help prevents spyware, worms, viruses, and other malware similar to Trymedia.ew32/sality.gen.z.

Keep your operating system up-to-date.
Malware tend to exploit system vulnerabilities to attack your computer. Keeping your operating system updated helps protect against the malware attacks. Besides, you should configure your system to perform automatic updates to ensure your system is operating with the latest patches.

Use caution when surfing on the Internet.
1) Be suspicious of any email attachments from unknown people or with offers that seem too good to be true.
2) Avoid clicking on suspicious links in emails or instant messages, or you may be linked to some malicious websites.
3) Don’t click on misleading pop-up windows in unsafe website, or you may download unknown malware onto your PC.
4) Don’t download and install software from unreliable sources. Some malware come bundled in software packages and once you install such software on your PC, you install malware as well.

Warm Tips:

The manual removal is a cumbersome and risky task that it is not for everyone. If you make any mistakes during the manual removal process, you may bring additional problems to your computer system. For the sake of safety, you can safely and completely remove Trymedia.ew32/sality.gen.z by using a quality malware removal tool. You can download the removal tool on your PC by clicking on the button below right now!


Share Button