INetCache Folder Trojan

INetCache

INetCache appears to be one of the “special” folders in Windows. INetCache malware is a variant of the Trojan Horse family who can hack into the folder that contains files – such as images, HTML pages, executable and script files – that Internet Explorer has downloaded from websites visited by the user.

INetCache trojan
The CryptoStealBTC trojan in INetCache folder is a good example of a malware program that could be especially difficult to detect

It is important to be observant and aware of the current condition of your computer system as there are many malicious software threats out there that are particularly good at staying hidden once inside a given machine and showing as few infection symptoms as possible. Case in point, the recently reported malicious program named CryptoStealBTC in INetCache folder is a good example of a malware program that could be especially difficult to detect even with a reliable antivirus program at the user’s disposal. This is because INetCache CryptoStealBTC is a Trojan Horse representative – it is a silent and very harmful threat that doesn’t typically reveal its presence in the machine in any way, at least not until it is already too late to do anything about its presence in the computer. However, seeing as how you are on this page, we assume that you at the very least have some suspicion that this insidious malware may have infiltrated your machine’s system. In this case, you are already a bit closer to solving the INetCache-related issue as most users don’t even get to find out about the infection on time.

Now, if you really think that INetCache Trojan may currently be messing with the computer’s system, you must not waste any time – read the rest of this article and take a careful look at the instructions we have inserted below. They will help you with the detection and the elimination of the harmful Trojan but you must really make sure to follow them meticulously, without omitting anything. It is also advisable to use the added help of the removal program you will find linked below as it may not always be enough to use the manual steps. Also, should you face any difficulties during the removal process, do not hesitate to contact us through the comments section.

The INetCache CryptoStealBTC Trojan

One major problem related to the INetCache CryptoStealBTC Trojan is the overall versatility of the abilities of most Trojan Horse representatives. The INetCache CryptoStealBTC trojan is no exception – it may be able to steal data from your machine and gain access to your online accounts as well as give the hackers behind it unauthorized access to your computer system.

Once such access is established, there is no telling what may follow. Sometimes, other malicious programs may also enter your computer with the help of infections like INetCache. Some popular examples you’ve probably already heard of are Spyware, Rootkits and, of course, the infamous Ransomware cryptoviruses. Unfortunately, since this particular Trojan is new and it is still not fully researched, we do not know its exact goal once it attacks a given computer. In fact, its goals may differ in each separate case. Regardless of that, one thing is certain and that is the fact you really cannot allow this nefarious piece of code to stay in your computer and operate undisturbed. Use our guide and maybe the security tool we’ve linked there and be sure to rid your machine of the insidious Trojan Horse.

SUMMARY:

NameINetCache
TypeTrojan
Danger Level High (Trojans are often used as a backdoor for Ransomware)
Symptoms The threats of this type are likely to cause crashes and system slow-downs.
Distribution Method The most typical ways of spreading Trojan infections is through spam and mavlertisements.
Detection Tool

Remove INetCache CryptoStealBTC Trojan

If you are looking for a way to remove INetCache you can try this:

  1. Click on the Start button in the bottom left corner of your Windows OS.
  2. Go to Control Panel -> Programs and Features -> Uninstall a Program.
  3. Search for INetCache and any other unfamiliar programs.
  4. Uninstall INetCache as well as other suspicious programs.

Note that this might not get rid of INetCache completely. For more detailed removal instructions follow the guide below.

If you have a Windows virus, continue with the guide below.

If you have a Mac virus, please use our How to remove Ads on Mac guide.

If you have an Android virus, please use our Android Malware Removal guide.

If you have an iPhone virus, please use our iPhone Virus Removal guide


Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

WARNING! READ CAREFULLY BEFORE PROCEEDING!

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 

malware-start-taskbar

Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
This scanner is free and will always remain free for our website's users.
This file is not matched with any known malware in the database. You can either do a full real-time scan of the file or skip it to upload a new file. Doing a full scan with 64 antivirus programs can take up to 3-4 minutes per file.
Drag and Drop File Here To Scan
Drag and Drop File Here To Scan
Loading
Analyzing 0 s
Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
    This scanner is based on VirusTotal's API. By submitting data to it, you agree to their Terms of Service and Privacy Policy, and to the sharing of your sample submission with the security community. Please do not submit files with personal information if you do not want them to be shared.

    After you open their folder, end the processes that are infected, then delete their folders. 

    Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 

    Step3

     

    Hold together the Start Key and R. Type appwiz.cpl –> OK.

    appwiz

     

    You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:

    virus-removal1

     

    Step4

     

    Type msconfig in the search field and hit enter. A window will pop-up:

    msconfig_opt

     

    Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

    • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.

    Hold the Start Key and R –  copy + paste the following and click OK:

    notepad %windir%/system32/Drivers/etc/hosts

    A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

    hosts_opt (1)

     

    If there are suspicious IPs below “Localhost” – write to us in the comments.

    Step5

     

    Type Regedit in the windows search field and press Enter.

    Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

    • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
      HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
      HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

    If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!


    About the author

    blank

    Brandon Skies

    Brandon is a researcher and content creator in the fields of cyber-security and virtual privacy. Years of experience enable him to provide readers with important information and adequate solutions for the latest software and malware problems.

    Leave a Comment