Remove Malware and Viruses

Acebot malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.SdBot.05.w,packed: PE_Patch;
[Eset]Win32/IRC.SdBot.05.W trojan;
[McAfee]IRC-Sdbot;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program;
[Computer Associates]Win32.Sdbot.G,Win32/Gnu!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Acebot:

An up-to-date copy of ExterminateIt should detect and prevent infection from Acebot.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Acebot manually.

To completely manually remove Acebot malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Acebot.

1. Use Task Manager to terminate the Acebot process.
2. Delete the original Acebot file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove MiniuII RAT
Remove Sathi Trojan
Remove Win32.Botten Trojan
Remove Bilateral Backdoor
Remove Junkoil Trojan

PayPal malware description and removal detail
Categories:Hoax

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PayPal:

An up-to-date copy of ExterminateIt should detect and prevent infection from PayPal.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove PayPal manually.

To completely manually remove PayPal malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with PayPal.

1. Use Task Manager to terminate the PayPal process.
2. Delete the original PayPal file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove WurldMedia.MSCStat Hijacker
Remove Pigeon.ASP Trojan
Remove Bancos.GDZ Trojan
Remove Vxidl.AXK Trojan
Remove SillyDl.BCV Trojan

AOL.Ikobur malware description and removal detail
Categories:DoS
Also known as:

[Panda]Flooder Program

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing AOL.Ikobur:

An up-to-date copy of ExterminateIt should detect and prevent infection from AOL.Ikobur.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove AOL.Ikobur manually.

To completely manually remove AOL.Ikobur malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with AOL.Ikobur.

1. Use Task Manager to terminate the AOL.Ikobur process.
2. Delete the original AOL.Ikobur file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SubSeven.2b1 Trojan
Remove Galler.sys Downloader
Remove OTX.Preloader Downloader
Remove Bilateral Backdoor
Remove Clickxchange.com Tracking Cookie

Tarex.ow malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Win32.HLLO.Tarex;
[McAfee]W32/Tarex.ow;
[F-Prot]W32/HLLO.Tarex;
[Panda]HLLO.Gen;
[Computer Associates]Win32.HLLO.Tarex

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Tarex.ow:

An up-to-date copy of ExterminateIt should detect and prevent infection from Tarex.ow.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Tarex.ow manually.

To completely manually remove Tarex.ow malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Tarex.ow.

1. Use Task Manager to terminate the Tarex.ow process.
2. Delete the original Tarex.ow file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Win32.DoS.Fedup Hacker Tool
Remove rute Downloader
Remove PSW.Barrio Trojan
Remove Vxidl.BEE Trojan
Remove Pigeon.DSF Trojan

Made malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Made.334.d;
[Computer Associates]Made

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Made:

An up-to-date copy of ExterminateIt should detect and prevent infection from Made.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Made manually.

To completely manually remove Made malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Made.

1. Use Task Manager to terminate the Made process.
2. Delete the original Made file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SillyDl.CUB Trojan
Remove Spy.Striker Trojan
Remove Correct Backdoor
Remove REG.Drakken Trojan
Remove Lop.bb Adware

Pigeon.EFP malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EFP:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EFP.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Pigeon.EFP manually.

To completely manually remove Pigeon.EFP malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Pigeon.EFP.

1. Use Task Manager to terminate the Pigeon.EFP process.
2. Delete the original Pigeon.EFP file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove PSW.MiniLD.exe Trojan
Remove Telnet.Server RAT
Remove Win32.Killqq Trojan
Remove Z0X Trojan
Remove PWS.BR.gen Trojan

SillyDl.CUB malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CUB:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CUB.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove SillyDl.CUB manually.

To completely manually remove SillyDl.CUB malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with SillyDl.CUB.

1. Use Task Manager to terminate the SillyDl.CUB process.
2. Delete the original SillyDl.CUB file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove FTP.SSSrv Trojan
Remove SillyDl.DBT Trojan
Remove SillyDl.BCV Trojan
Remove CoViN.Version.53b DoS
Remove Sonitro RAT

LinkOptimizer malware description and removal detail
Categories:Adware
Also known as:

[Kaspersky]AdWare.Win32.LinkOptimiser.c;
[Other]Trojan.Linkoptimizer
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\3.tmp
[%WINDOWS%]\vonye1.dll
[%WINDOWS%]\vonye1.upd

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting LinkOptimizer:

Files:
[%WINDOWS%]\3.tmp
[%WINDOWS%]\vonye1.dll
[%WINDOWS%]\vonye1.upd

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\linkoptimizer
HKEY_CLASSES_ROOT\clsid\{03179e97-7354-42a2-7164-91104e39d1af}
HKEY_CLASSES_ROOT\clsid\{12d16b6a-c74c-c201-749f-1edf4eb6e595}
HKEY_CLASSES_ROOT\clsid\{179b48b2-9eae-5dcd-c6f2-32568074d775}
HKEY_CLASSES_ROOT\clsid\{4674a95b-999e-2db8-849c-a7cec78dd6ba}\data
HKEY_CLASSES_ROOT\clsid\{6ea9ed45-3c7f-0834-10d7-cde8551b0299}
HKEY_LOCAL_MACHINE\software\microsoft\hsfmm
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{6ea9ed45-3c7f-0834-10d7-cde8551b0299}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{cfbfae00-17a6-11d0-99cb-00c04fd64497}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6ea9ed45-3c7f-0834-10d7-cde8551b0299}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\bdwbb
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks

Removing LinkOptimizer:

An up-to-date copy of ExterminateIt should detect and prevent infection from LinkOptimizer.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove LinkOptimizer manually.

To completely manually remove LinkOptimizer malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with LinkOptimizer.

1. Use Task Manager to terminate the LinkOptimizer process.
2. Delete the original LinkOptimizer file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.FFS Trojan
Remove Code.Blue DoS
Remove Bancos.HCB Trojan
Remove TinyM Downloader
Remove SillyDl.BCV Trojan

OnlineGuard malware description and removal detail
Categories:Ransomware
Visible Symptoms:
Files in system folders:
[%DESKTOP%]\OnlineGuard.lnk

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting OnlineGuard:

Files:
[%DESKTOP%]\OnlineGuard.lnk

Folders:
[%PROGRAMS%]\OnlineGuard
[%PROGRAM_FILES%]\OnlineGuard

Registry Keys:
HKEY_CURRENT_USER\software\onlineguard
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\onlineguard

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing OnlineGuard:

An up-to-date copy of ExterminateIt should detect and prevent infection from OnlineGuard.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove OnlineGuard manually.

To completely manually remove OnlineGuard malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with OnlineGuard.

1. Use Task Manager to terminate the OnlineGuard process.
2. Delete the original OnlineGuard file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.AMM Trojan
Remove IRC.Zapchast Backdoor
Remove PS2.Emulator Trojan
Remove Backdoor.VB.id Trojan
Remove BootDr245 Trojan

Win32.Adult malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan.Win32.Adut;
[McAfee]W32/Adult.worm;
[F-Prot]destructive program;
[Panda]Trj/Adult;
[Computer Associates]Win32.Adult,Win32/Adultchk!Worm

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win32.Adult:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win32.Adult.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Win32.Adult manually.

To completely manually remove Win32.Adult malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Win32.Adult.

1. Use Task Manager to terminate the Win32.Adult process.
2. Delete the original Win32.Adult file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove DMLoad Downloader
Remove WurldMedia.MSCStat Hijacker
Remove WordMacro.MadDog Trojan
Remove Vxidl.ATX Trojan
Remove MiniBackLash Backdoor

YAT.beta malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.Antilam.20.p,Backdoor.Pestdoor.31;
[McAfee]BackDoor-BQ.gen;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing YAT.beta:

An up-to-date copy of ExterminateIt should detect and prevent infection from YAT.beta.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove YAT.beta manually.

To completely manually remove YAT.beta malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with YAT.beta.

1. Use Task Manager to terminate the YAT.beta process.
2. Delete the original YAT.beta file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Backdoor.Y3KRat.Server.family Trojan
Remove Pigeon.AHL Trojan
Remove Snooby Trojan
Remove Pigeon.AVDZ Trojan
Remove TrojanDownloader.Win32.Small.dg Trojan

Vxidl.BAH malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.BAH:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.BAH.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Vxidl.BAH manually.

To completely manually remove Vxidl.BAH malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Vxidl.BAH.

1. Use Task Manager to terminate the Vxidl.BAH process.
2. Delete the original Vxidl.BAH file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Dewkin Trojan
Remove Fisec Trojan
Remove Yagoda Backdoor
Remove Pigeon.AVMW Trojan
Remove Kyjak Trojan

Nuke.ICQNuker malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Kaspersky]Trojan.PSW.Fakenuke,Trojan.Win32.ICQNuker;
[McAfee]Nuke-ICQNuker,PWS-FakeNuke;
[F-Prot]destructive program,security risk or a "backdoor" program;
[Panda]Trj/W32.ICQNuker;
[Computer Associates]Win32.ICQNuker,Win32/ICQNuker!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Nuke.ICQNuker:

An up-to-date copy of ExterminateIt should detect and prevent infection from Nuke.ICQNuker.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Nuke.ICQNuker manually.

To completely manually remove Nuke.ICQNuker malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Nuke.ICQNuker.

1. Use Task Manager to terminate the Nuke.ICQNuker process.
2. Delete the original Nuke.ICQNuker file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove CMD32 Trojan
Remove Bancos.IDL Trojan
Remove WordMacro.MadDog Trojan
Remove ProBot.Activity.Monitor Spyware
Remove Pigeon.AFR Trojan

QQshou malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan-PSW.Win32.QQShou.iz,Trojan-PWS.Win32.WOW.jv;
[McAfee]PWS-JB;
[Other]Win32/QQShou.C,W32/QQShou.ARX,Win32/QQShou.D,Troj/QQPass-AIV,TSPY_QQSHOU.CT
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\agetltfes.exe
[%SYSTEM%]\algeleteri.exe
[%SYSTEM%]\algeletrl.exe
[%SYSTEM%]\psapi.lib
[%SYSTEM%]\ravseteyns.exe
[%SYSTEM%]\winsylbtew.dll

In order to ensure that the QQshou is launched automatically each time the system is booted, the QQshou adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\agetltfes.exe
[%SYSTEM%]\algeleteri.exe
[%SYSTEM%]\algeletrl.exe
[%SYSTEM%]\ravseteyns.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting QQshou:

Files:
[%SYSTEM%]\agetltfes.exe
[%SYSTEM%]\algeleteri.exe
[%SYSTEM%]\algeletrl.exe
[%SYSTEM%]\psapi.lib
[%SYSTEM%]\ravseteyns.exe
[%SYSTEM%]\winsylbtew.dll

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing QQshou:

An up-to-date copy of ExterminateIt should detect and prevent infection from QQshou.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove QQshou manually.

To completely manually remove QQshou malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with QQshou.

1. Use Task Manager to terminate the QQshou process.
2. Delete the original QQshou file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove CWS.QTTasks Hijacker
Remove Doomob Trojan
Remove TinyM Downloader
Remove SpyMon Spyware
Remove PSW.IDI Trojan

Bancos.IJO malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.IJO:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.IJO.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Bancos.IJO manually.

To completely manually remove Bancos.IJO malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Bancos.IJO.

1. Use Task Manager to terminate the Bancos.IJO process.
2. Delete the original Bancos.IJO file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Pigeon.EZZ Trojan
Remove MiniuII RAT
Remove Stalker.dr Trojan
Remove HungryHands Adware
Remove Tedon Trojan

Mir malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Eset]Win32/VB.EP trojan;
[Computer Associates]Win32.Mir,Win32/Mir.Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Mir:

An up-to-date copy of ExterminateIt should detect and prevent infection from Mir.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Mir manually.

To completely manually remove Mir malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Mir.

1. Use Task Manager to terminate the Mir process.
2. Delete the original Mir file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.GXZ Trojan
Remove Sonitro RAT
Remove AprilFool.615a Trojan
Remove Desktop.Detective Spyware
Remove Kali Trojan

Code.Blue malware description and removal detail
Categories:DoS

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Code.Blue:

An up-to-date copy of ExterminateIt should detect and prevent infection from Code.Blue.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Code.Blue manually.

To completely manually remove Code.Blue malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Code.Blue.

1. Use Task Manager to terminate the Code.Blue process.
2. Delete the original Code.Blue file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove PSW.MiniLD.exe Trojan
Remove Pigeon.EPE Trojan
Remove Hax.Console DoS
Remove Backdoor.VB.id Trojan
Remove Need2Find Adware

SurfAssistant malware description and removal detail
Categories:BHO,Toolbar
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\saiemod.dll
[%WINDOWS%]\atct.exe
[%WINDOWS%]\elahwrcf.exe
[%WINDOWS%]\etyxkr.exe
[%WINDOWS%]\evgnin.exe
[%WINDOWS%]\fov.exe
[%WINDOWS%]\ihglcl.exe
[%WINDOWS%]\jon.exe
[%WINDOWS%]\mrqt.exe
[%WINDOWS%]\nknqzkt.exe
[%WINDOWS%]\pixut.exe
[%WINDOWS%]\system\saiemod.dll
[%WINDOWS%]\tsr.exe
[%WINDOWS%]\xgf.exe

In order to ensure that the SurfAssistant is launched automatically each time the system is booted, the SurfAssistant adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\atct.exe
[%WINDOWS%]\elahwrcf.exe
[%WINDOWS%]\etyxkr.exe
[%WINDOWS%]\evgnin.exe
[%WINDOWS%]\fov.exe
[%WINDOWS%]\ihglcl.exe
[%WINDOWS%]\jon.exe
[%WINDOWS%]\mrqt.exe
[%WINDOWS%]\nknqzkt.exe
[%WINDOWS%]\pixut.exe
[%WINDOWS%]\tsr.exe
[%WINDOWS%]\xgf.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting SurfAssistant:

Files:
[%SYSTEM%]\saiemod.dll
[%WINDOWS%]\atct.exe
[%WINDOWS%]\elahwrcf.exe
[%WINDOWS%]\etyxkr.exe
[%WINDOWS%]\evgnin.exe
[%WINDOWS%]\fov.exe
[%WINDOWS%]\ihglcl.exe
[%WINDOWS%]\jon.exe
[%WINDOWS%]\mrqt.exe
[%WINDOWS%]\nknqzkt.exe
[%WINDOWS%]\pixut.exe
[%WINDOWS%]\system\saiemod.dll
[%WINDOWS%]\tsr.exe
[%WINDOWS%]\xgf.exe

Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5DAFD089-24B1-4C5E-BD42-8CA72550717B}
HKEY_CLASSES_ROOT\clsid\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
HKEY_LOCAL_MACHINE\software\classes\clsid\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5dafd089-24b1-4c5e-bd42-8ca72550717b}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing SurfAssistant:

An up-to-date copy of ExterminateIt should detect and prevent infection from SurfAssistant.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove SurfAssistant manually.

To completely manually remove SurfAssistant malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with SurfAssistant.

1. Use Task Manager to terminate the SurfAssistant process.
2. Delete the original SurfAssistant file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove VB.cc Adware
Remove WhlpIntOvrflw.A!exploit Trojan
Remove Pripi Trojan
Remove Grog.Villino Trojan
Remove Sparta Backdoor

Keyhost malware description and removal detail
Categories:Spyware
Also known as:

[Panda]Adware/PopMonster
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\keyhost.exe

In order to ensure that the Keyhost is launched automatically each time the system is booted, the Keyhost adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\keyhost.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Keyhost:

Files:
[%SYSTEM%]\keyhost.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Keyhost:

An up-to-date copy of ExterminateIt should detect and prevent infection from Keyhost.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Keyhost manually.

To completely manually remove Keyhost malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Keyhost.

1. Use Task Manager to terminate the Keyhost process.
2. Delete the original Keyhost file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Corsaro Trojan
Remove Dewkin Trojan
Remove Pigeon.AWFY Trojan
Remove Bancos.HNA Trojan
Remove End.of Trojan

CrazyCrunch malware description and removal detail
Categories:Trojan
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\mylog.esf
[%SYSTEM%]\telcel.exe
[%WINDOWS%]\telcel.dll

In order to ensure that the CrazyCrunch is launched automatically each time the system is booted, the CrazyCrunch adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\telcel.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting CrazyCrunch:

Files:
[%SYSTEM%]\mylog.esf
[%SYSTEM%]\telcel.exe
[%WINDOWS%]\telcel.dll

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{53bc022a-13ee-2acb-1c21-a$e42a2e1c2c}

Removing CrazyCrunch:

An up-to-date copy of ExterminateIt should detect and prevent infection from CrazyCrunch.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove CrazyCrunch manually.

To completely manually remove CrazyCrunch malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with CrazyCrunch.

1. Use Task Manager to terminate the CrazyCrunch process.
2. Delete the original CrazyCrunch file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Backdoor.VB.id Trojan
Remove Dosh RAT
Remove Boot.IIB RAT
Remove BootDr245 Trojan
Remove DuckToy Backdoor

CMDGet malware description and removal detail
Categories:Trojan,Downloader
Also known as:

[Kaspersky]TrojanDownloader.Win32.Small.ai;
[Panda]Trojan Horse.LC;
[Computer Associates]Win32/Small.AI!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing CMDGet:

An up-to-date copy of ExterminateIt should detect and prevent infection from CMDGet.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove CMDGet manually.

To completely manually remove CMDGet malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with CMDGet.

1. Use Task Manager to terminate the CMDGet process.
2. Delete the original CMDGet file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Wortron Trojan
Remove Galler.sys Downloader
Remove Snooby Trojan
Remove Lop.bb Adware
Remove BAT.Etimolod Trojan

MiniBackLash malware description and removal detail
Categories:Backdoor,RAT,Hacker Tool
Also known as:

[Kaspersky]Backdoor.Minilash.10.a,Backdoor.Minilash.10.b;
[McAfee]BackDoor-KY;
[F-Prot]security risk or a "backdoor" program;
[Panda]Bck/MiniBackLash.10A,Bck/MiniBackLash.10b;
[Computer Associates]Backdoor/Minilash.10,Backdoor/Minilash.10.A,Backdoor/Backlash!Server,Backdoor/Minil.10_B!Server
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\d3dloader.exe
[%WINDOWS%]\system\pddt.dat

In order to ensure that the MiniBackLash is launched automatically each time the system is booted, the MiniBackLash adds a link to its executable file in the system registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\d3dloader.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting MiniBackLash:

Files:
[%WINDOWS%]\d3dloader.exe
[%WINDOWS%]\system\pddt.dat

Removing MiniBackLash:

An up-to-date copy of ExterminateIt should detect and prevent infection from MiniBackLash.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove MiniBackLash manually.

To completely manually remove MiniBackLash malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with MiniBackLash.

1. Use Task Manager to terminate the MiniBackLash process.
2. Delete the original MiniBackLash file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove TinyM Downloader
Remove Tofpox Trojan
Remove Agent.gd Downloader
Remove Vxidl.AFN Trojan
Remove Doomob Trojan

Vxidl.AYJ malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AYJ:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AYJ.

If you do not have ExterminateIt and you are worried that you may have infected computer,you could run trial version of ExterminateIt, or remove Vxidl.AYJ manually.

To completely manually remove Vxidl.AYJ malware from your computer,you need to delete the Windows registry keys and registry values, the files and foldersassociated with Vxidl.AYJ.

1. Use Task Manager to terminate the Vxidl.AYJ process.
2. Delete the original Vxidl.AYJ file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users
back up any important information on their computers,
enable maximum protection from network attacks and malicious code on their computers,
refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SillyFDC.Y Worm
Remove Bancos.GJU Trojan
Remove Sathi Trojan
Remove Green.Caterpillar Trojan
Remove Pigeon.EQL Trojan