Brastk.exe - how to remove?
Posted by admin
This malware creates two files - brastk.exe and karna.dat, and makes a copy in the folders C:\Windows and C:\Windows\System32.
Moreover, it also creates two autorun entries in registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run
value called “Brastk” under run subkey - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows
value AppInit_Dlls=Karna.dat
But the most important trick, is that Brastk replaces regular windows system file Beep.sys (4,224 bytes) to infected (27,648 bytes) in C:\Windows\System32\drivers.
This infected Beep.sys is an autoloader with brastk.exe and karna.dat files, installed any time system is rebooted.
To remove this malware you sholud:
- Delete beep.sys
- Start windows in safe mode and delete entries in registry
- Delete Brastk.exe and Karna.dat
Leave a Reply
You must be logged in to post a comment.