PDM:Trojan.Win32.Bazon.a Develops New Technique and Require Manual Remove

Dangerous PDM:Trojan.Win32.Bazon.a

OUTLINE

• Know more about PDM
• Troubles caused by PDM:Trojan.Win32.Bazon.a
• How PDM:Trojan.Win32.Bazon.a spreads itself?
• Can PDM:Trojan.Win32.Bazon.a be false positive?
• Learn the way to remove PDM:Trojan.Win32.Bazon.a
• Final

How PDM Helps Trojan.Win32.Bazon.a?

A computing technique called PDM has been found to recently be involved in vicious attack by Trojan.Win32.Bazon.a. Let’s see how this technique helps with the vicious attack:

1. PDM enables secure storage and easy access to user data.
2. PDM can analyze data and find periodic components in time series data.
3. PDM helps define a database structure, from the physical point of view and takes into account the physical structure.

In other word, anti-virus program will not able to remove Trojan.Win32.Bazon.a when the Trojan is trying to access data and weaken security defense as PDM is a computing technique.

Consequence of Getting PDM:Trojan.Win32.Bazon.a

1. Additional virus, Trojan horse particularly, will be detected before long.
2. The overall PC performance will be degraded considerably.
3. More unknown processes will be caught to run in the background.
4. Identity theft, information and money loss.
5. Browser mass could occur.
6. The computer becomes instable, error messages could be triggered and some program would shut it down abruptly. 

PDM:Trojan.Win32.Bazon.a Dissemination Routine

As a Trojan horse, PDM:Trojan.Win32.Bazon.a would definitely adopt the typical dissemination routines:

1. Makes up counterfeit but vivid websites to trap for clicks.
2. Attacks the computers with vulnerability/bug.
3. Capitalizes loosely programmed websites (like ads)/programs (like freeware).
4. Bundles with virus especially Trojan downloader.

Is PDM:Trojan.Win32.Bazon.a FP?

It is a shared secret that some anti-virus program companies would detect (or you could say create) some so-called virus that other anti-virus programs won’t detect to make its security utility look more powerful and efficient.

Of course, there is another reason for the FP that is each anti-virus program company applies its own way to define a vicious binary string and has its own data based on its experience. This is why the same virus are called differently and some utility will not detect certain item.

If one doesn’t detect any trouble as the “Consequence of Getting PDM:Trojan.Win32.Bazon.a” section lists, then the alert about the Trojan horse can be FP. To add the detected file to the anti-virus program’s whitelist (take Kaspersky for example as it’s the only utility so far detects the Trojan horse), just upload the file to its email: newvirus@kaspersky.com.

Learn The Way to Remove PDM:Trojan.Win32.Bazon.a 

A
Access Task Manager to remove the items with the path directing to PDM:Trojan.Win32.Bazon.a according to the installed anti-virus program.

Win+R key combination > Run box > type "CMD" > Enter key > type “taskkill.exe /im msblast.exe” or “taskkill.exe /im teekids.exe” or “taskkill.exe /im penis32.exe” > Enter key > access Task Manager > View >　select columns > tick "PID" and "Path name" > go to open up System Information > end the process with path name directing to Trojan.Win32.Bazon.a's path(according to the threat alert) or the path that doesn't belong to system.

select Colunms to tick PID and Path Name to find out the services and processes related to
Trojan.Win32.Bazon.a

(tip: if some vicious processes reappear, one could find the PPID through PID functionality; please then remove the parent process(es) with the command “taskkill /im system.exe /f” through DOS window.)

B
Unveil hidden files and folders to remove the ones created by Trojan.Win32.Bazon.a.

Windows 7/XP/Vista 
Control Panel > user accounts and family safety > Folder Options > View tab > tick ‘Show hidden files and folders’ > non-tick ‘Hide protected operating system files (Recommended)’ > OK button.

Windows 8
Windows Explorer > View tab > tick ‘File name extensions’ and ‘Hidden items’ > OK button.

show hidden files and folder on Windows 8 to remove the ones related to Trojan.Win32.Bazon.a

• Access the detected path and remove all the items there.
• Access the following folders to remove the items generated on the day when  Trojan.Win32.Bazon.a was firstly detected according to the installed anti-virus program:

%SystemRoot%\system32\%Temp%\
%SystemDriver%\
C:\Windows
C:\Windows\System32
C:\windows\winstart.bat
C:\windows\wininit.ini
C:\windows\Autoexec.bat
C:\Users\[your username]\Documents\
C:\users\user\appdata\local\
C:\Program Files\

variable declarations

• %SystemDriver% - the system division is "C:\" by default.          
• %SystemRoot% - the directory of WINDOWS is known as“C:\Windows” by default.

C
Remove temp files generated by Trojan.Win32.Bazon.a.

1. Press Win key and R key together, you’ll get a pop-up Run box.
2. Type “%Temp%” in the box and hit Enter key, you’ll be led to all temp files.
3. Remove the ones that are not loaded by system.
4. When done, return to the previous menu to click open “Temporary Internet Files”.
5. Locate the folder ”Content.[the browser you are using]+[the version you are using] ”, for example, content.ie5.
6. Remove all the files there (except index.dat).

It should be widely informed that the name of the items dropped by Trojan.Win32.Bazon.a can be different from OS and the way to access certain location can be various. This is why certain computer skills and virus knowledge is required. One should also know that the Trojan is made to make money, not to just damage your system. It is always designed strictly to make sure that the Trojan horse will stay on a machine for as much valuable information as possible. So there’s no simple and effective way to troubleshoot this annoying issue. All one can do is to follow up manual instruction carefully.