Win32/Induc.A
|
|
copies source\rtl\sys\SysConst.pas (Delphi library source file), in the found Delphi root directory to lib\SysConst.pas. Then it appends malicious source code to the copied file.
Virus:Win32/Induc.A renames the original Delphi library file lib\SysConst.dcu to lib\SysConst.bak and then invokes the Delphi compiler (bin\dcc32.exe) to compile a new copy of SysConst.dcu with the replaced copy (lib\sysConst.pas) of the source file. Finally, Virus:Win32/Induc.A deletes the file lib\SysConst.pas and sets the new compiled lib\Sysconst.dcu to the same date/time as the original copy.
After a computer is infected by Virus:Win32/Induc.A, ALL files compiled/linked by the Delphi compiler on that computer will be infected.
How to Get rid of Win32/Induc.A
1. if you are the author about the infected program please replace SysConst.dcu files in delphi lib path
2. if you aren’t the owner of software , you could download a Win32/Induc.A fix tool remove win32/induc.a
3.download it ,then drag the infected file in to file path box,then click “fix” button
Additional Steps to keep your PC Clear:
PS:using Malwarebytes'Anti-Malware to Remove other spyware ,if you don't have one,here it is :Malwarebytes' Anti-Malware Download Linkgood luck!
Shaun 
Mudassar Ali 
Earl 
on 
August 23, 2009 IP:212.63.222.15
[...] på virusen er: Win32/Induc.A Mere info: http://www.xdelbox.com/how-to-remove-win32induca/ Tjeck også lige dit Delphi bibliotek. Så er du sikker og ved hvordan du fixer det. Leave a [...]