Remove Malware and Viruses

FG.Server malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.Carufax.d;
[Eset]Win32/Lazi.E trojan;
[Computer Associates]Backdoor/FG.Server,Win32.Reign.F

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing FG.Server:

An up-to-date copy of ExterminateIt should detect and prevent infection from FG.Server.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove FG.Server manually.

To completely manually remove FG.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FG.Server.

1. Use Task Manager to terminate the FG.Server process.
2. Delete the original FG.Server file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
TopAntiSpyware Trojan Removal instruction
SpyKeySpy Spyware Removal
Tuareg.dr Trojan Information

Spitfire malware description and removal detail
Categories:Trojan
Also known as:

[Computer Associates]Win32/Spitfire.b!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Spitfire:

An up-to-date copy of ExterminateIt should detect and prevent infection from Spitfire.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Spitfire manually.

To completely manually remove Spitfire malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Spitfire.

1. Use Task Manager to terminate the Spitfire process.
2. Delete the original Spitfire file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
FastFind Trojan Symptoms

VB.rc malware description and removal detail
Categories:Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing VB.rc:

An up-to-date copy of ExterminateIt should detect and prevent infection from VB.rc.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove VB.rc manually.

To completely manually remove VB.rc malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VB.rc.

1. Use Task Manager to terminate the VB.rc process.
2. Delete the original VB.rc file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Bancos.FWF Trojan Symptoms
LowZones.cza Trojan Cleaner
AdLogix.Zamingo BHO Symptoms

Vxidl.AWM malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AWM:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AWM.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.AWM manually.

To completely manually remove Vxidl.AWM malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AWM.

1. Use Task Manager to terminate the Vxidl.AWM process.
2. Delete the original Vxidl.AWM file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.AVBD Trojan Symptoms

IECodec malware description and removal detail
Categories:Ransomware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting IECodec:

Folders:
[%PROGRAM_FILES%]\IECodec

Registry Keys:
HKEY_CLASSES_ROOT\interface\{da5eab81-9e79-4751-8e06-3e68ff0cffb6}
HKEY_CLASSES_ROOT\typelib\{7c12a866-f10b-43b4-a9d0-8857c318af17}
HKEY_CURRENT_USER\software\classes\appid\iecodec.dll
HKEY_CURRENT_USER\software\classes\appid\{9f264a67-6126-451a-8d14-d6ee64364cd0}
HKEY_CURRENT_USER\software\classes\clsid\{4507c219-24aa-4813-9561-a2003f9920c3}
HKEY_CURRENT_USER\software\classes\iecodec.iecodecbho
HKEY_CURRENT_USER\software\classes\iecodec.iecodecbho.1
HKEY_LOCAL_MACHINE\software\iecodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4507c219-24aa-4813-9561-a2003f9920c3}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\iecodec

Removing IECodec:

An up-to-date copy of ExterminateIt should detect and prevent infection from IECodec.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove IECodec manually.

To completely manually remove IECodec malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IECodec.

1. Use Task Manager to terminate the IECodec process.
2. Delete the original IECodec file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing Ads.CiMedia.com Tracking Cookie
Remove VCL.Dome Trojan
Remove Mario Trojan

Vxidl.BDK malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.BDK:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.BDK.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.BDK manually.

To completely manually remove Vxidl.BDK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BDK.

1. Use Task Manager to terminate the Vxidl.BDK process.
2. Delete the original Vxidl.BDK file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
mediaturf.net Tracking Cookie Information
SpyArsenal AIM Logger Spyware Cleaner
SillyDl.CHD Trojan Cleaner
Vxidl.BDX Trojan Cleaner
Removing Bancos.ADG Trojan

Musanub malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.Musanub.a;
[Eset]Win32/Musanub.A trojan;
[Panda]Bck/Musanub.A;
[Computer Associates]Backdoor/Noobies!Server

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Musanub:

An up-to-date copy of ExterminateIt should detect and prevent infection from Musanub.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Musanub manually.

To completely manually remove Musanub malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Musanub.

1. Use Task Manager to terminate the Musanub process.
2. Delete the original Musanub file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Bancos.FVE Trojan Removal

Bancos.HTE malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.HTE:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.HTE.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.HTE manually.

To completely manually remove Bancos.HTE malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HTE.

1. Use Task Manager to terminate the Bancos.HTE process.
2. Delete the original Bancos.HTE file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
LinkGrabber Adware Cleaner

NetTrash.xs malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.NetTrash.10.e;
[McAfee]BackDoor-HS;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program;
[Computer Associates]Backdoor/NetTrash.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing NetTrash.xs:

An up-to-date copy of ExterminateIt should detect and prevent infection from NetTrash.xs.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove NetTrash.xs manually.

To completely manually remove NetTrash.xs malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with NetTrash.xs.

1. Use Task Manager to terminate the NetTrash.xs process.
2. Delete the original NetTrash.xs file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Ozzy Trojan
BaciamiStupido Adware Cleaner
Removing SearchClickAds Adware

Pigeon.ENX malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.ENX:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.ENX.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.ENX manually.

To completely manually remove Pigeon.ENX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ENX.

1. Use Task Manager to terminate the Pigeon.ENX process.
2. Delete the original Pigeon.ENX file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
TrojanDownloader.Win32.Friendown Trojan Removal instruction
Removing Piaoyes RAT
Remove SillyDl.COV Trojan
Remove VCS Trojan
Removing Nullbnc Backdoor

Dumador.bl malware description and removal detail
Categories:Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Dumador.bl:

An up-to-date copy of ExterminateIt should detect and prevent infection from Dumador.bl.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Dumador.bl manually.

To completely manually remove Dumador.bl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Dumador.bl.

1. Use Task Manager to terminate the Dumador.bl process.
2. Delete the original Dumador.bl file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
SentryRemote Spyware Cleaner
Remove NetContr Backdoor
Logger.Buddy Spyware Removal
Removing Trufout Trojan

W95.Boza malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Win95.Boza.c;
[Eset]Win95/Boza.C.Intended virus;
[McAfee]W95/Boza;
[Panda]W95/Boza.C;
[Computer Associates]Win32/Bizatch.B,Win95.Boza.C

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing W95.Boza:

An up-to-date copy of ExterminateIt should detect and prevent infection from W95.Boza.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove W95.Boza manually.

To completely manually remove W95.Boza malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with W95.Boza.

1. Use Task Manager to terminate the W95.Boza process.
2. Delete the original W95.Boza file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing WWW.GlobeTechnology.com Tracking Cookie
Frethog.AEY Trojan Removal
Bancos.HKP Trojan Cleaner

StartPage.bs malware description and removal detail
Categories:Hijacker

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing StartPage.bs:

An up-to-date copy of ExterminateIt should detect and prevent infection from StartPage.bs.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove StartPage.bs manually.

To completely manually remove StartPage.bs malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with StartPage.bs.

1. Use Task Manager to terminate the StartPage.bs process.
2. Delete the original StartPage.bs file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.LD!downloader Trojan
Honeypot Trojan Removal instruction
BAT.Limi Trojan Cleaner
AAG RAT Symptoms

EBlaster malware description and removal detail
Categories:Trojan,Spyware,BHO
Also known as:

[Panda]Trj/Reboot.htm
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\chkdisk.exe
[%SYSTEM%]\svrwin.exe
[%SYSTEM%]\wmscmod.chm
[%DESKTOP%]\pestpatrolbait.exe
[%FAVORITES%]\pestpatrolbait.exe
[%PROFILE%]\pestpatrolbait.exe
[%PROGRAMS%]\pestpatrolbait.exe
[%PROGRAM_FILES%]\pestpatrolbait.exe
[%STARTUP%]\pestpatrolbait.exe
[%SYSTEM%]\autprof.dll
[%SYSTEM%]\biosuni.dll
[%SYSTEM%]\catmidi.dll
[%SYSTEM%]\cfgtcp.dll
[%SYSTEM%]\cfgvga.dll
[%SYSTEM%]\compserver.dll
[%SYSTEM%]\conflib32.dll
[%SYSTEM%]\ctldde.dll
[%SYSTEM%]\ctldll.dll
[%SYSTEM%]\ddectl.dll
[%SYSTEM%]\devcrypt.dll
[%SYSTEM%]\dhcpkbd.dll
[%SYSTEM%]\dllcmd.dll
[%SYSTEM%]\httpsserver32.dll
[%SYSTEM%]\ipdll32.dll
[%SYSTEM%]\kbdman.dll
[%SYSTEM%]\logmon.exe
[%SYSTEM%]\macnetb32.dll
[%SYSTEM%]\midical.dll
[%SYSTEM%]\modipx.dll
[%SYSTEM%]\modstats.dll
[%SYSTEM%]\msdde.dll
[%SYSTEM%]\msnetsrv\msvfjbwin.dll
[%SYSTEM%]\msnetsrv\msvfjbwin.sys
[%SYSTEM%]\msnetsrv\winmsvfjbwin.drv
[%SYSTEM%]\MSWEBHLP.DLL
[%SYSTEM%]\netbaut.dll
[%SYSTEM%]\netbcam.exe
[%SYSTEM%]\netipx.dll
[%SYSTEM%]\netutil.exe
[%SYSTEM%]\odbckey.dll
[%SYSTEM%]\olehost.dll
[%SYSTEM%]\profwin.exe
[%SYSTEM%]\regdb.dll
[%SYSTEM%]\rtfftp.dll
[%SYSTEM%]\sqlhost32.dll
[%SYSTEM%]\statip.dll
[%SYSTEM%]\tcpterm.dll
[%SYSTEM%]\uniserver.dll
[%SYSTEM%]\v32wsock.exe
[%SYSTEM%]\vgalog.dll
[%SYSTEM%]\xmlbot32.dll
[%SYSTEM%]\xpcmd.dll
[%WINDOWS%]\pestpatrolbait.exe
[%WINDOWS%]\system\mstv9swin.dll
[%WINDOWS%]\system\mstv9swin.ocx
[%WINDOWS%]\system\mswebhlp.dll
[%WINDOWS%]\system\winmstv9swin.drv
[%SYSTEM%]\chkdisk.exe
[%SYSTEM%]\svrwin.exe
[%SYSTEM%]\wmscmod.chm
[%DESKTOP%]\pestpatrolbait.exe
[%FAVORITES%]\pestpatrolbait.exe
[%PROFILE%]\pestpatrolbait.exe
[%PROGRAMS%]\pestpatrolbait.exe
[%PROGRAM_FILES%]\pestpatrolbait.exe
[%STARTUP%]\pestpatrolbait.exe
[%SYSTEM%]\autprof.dll
[%SYSTEM%]\biosuni.dll
[%SYSTEM%]\catmidi.dll
[%SYSTEM%]\cfgtcp.dll
[%SYSTEM%]\cfgvga.dll
[%SYSTEM%]\compserver.dll
[%SYSTEM%]\conflib32.dll
[%SYSTEM%]\ctldde.dll
[%SYSTEM%]\ctldll.dll
[%SYSTEM%]\ddectl.dll
[%SYSTEM%]\devcrypt.dll
[%SYSTEM%]\dhcpkbd.dll
[%SYSTEM%]\dllcmd.dll
[%SYSTEM%]\httpsserver32.dll
[%SYSTEM%]\ipdll32.dll
[%SYSTEM%]\kbdman.dll
[%SYSTEM%]\logmon.exe
[%SYSTEM%]\macnetb32.dll
[%SYSTEM%]\midical.dll
[%SYSTEM%]\modipx.dll
[%SYSTEM%]\modstats.dll
[%SYSTEM%]\msdde.dll
[%SYSTEM%]\msnetsrv\msvfjbwin.dll
[%SYSTEM%]\msnetsrv\msvfjbwin.sys
[%SYSTEM%]\msnetsrv\winmsvfjbwin.drv
[%SYSTEM%]\MSWEBHLP.DLL
[%SYSTEM%]\netbaut.dll
[%SYSTEM%]\netbcam.exe
[%SYSTEM%]\netipx.dll
[%SYSTEM%]\netutil.exe
[%SYSTEM%]\odbckey.dll
[%SYSTEM%]\olehost.dll
[%SYSTEM%]\profwin.exe
[%SYSTEM%]\regdb.dll
[%SYSTEM%]\rtfftp.dll
[%SYSTEM%]\sqlhost32.dll
[%SYSTEM%]\statip.dll
[%SYSTEM%]\tcpterm.dll
[%SYSTEM%]\uniserver.dll
[%SYSTEM%]\v32wsock.exe
[%SYSTEM%]\vgalog.dll
[%SYSTEM%]\xmlbot32.dll
[%SYSTEM%]\xpcmd.dll
[%WINDOWS%]\pestpatrolbait.exe
[%WINDOWS%]\system\mstv9swin.dll
[%WINDOWS%]\system\mstv9swin.ocx
[%WINDOWS%]\system\mswebhlp.dll
[%WINDOWS%]\system\winmstv9swin.drv

In order to ensure that the EBlaster is launched automatically each time the system is booted, the EBlaster adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\chkdisk.exe
[%SYSTEM%]\svrwin.exe
[%DESKTOP%]\pestpatrolbait.exe
[%FAVORITES%]\pestpatrolbait.exe
[%PROFILE%]\pestpatrolbait.exe
[%PROGRAMS%]\pestpatrolbait.exe
[%PROGRAM_FILES%]\pestpatrolbait.exe
[%STARTUP%]\pestpatrolbait.exe
[%SYSTEM%]\logmon.exe
[%SYSTEM%]\netbcam.exe
[%SYSTEM%]\netutil.exe
[%SYSTEM%]\profwin.exe
[%SYSTEM%]\v32wsock.exe
[%WINDOWS%]\pestpatrolbait.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista