Remove Malware and Viruses

Vxidl.AYS malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AYS:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AYS.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.AYS manually.

To completely manually remove Vxidl.AYS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AYS.

1. Use Task Manager to terminate the Vxidl.AYS process.
2. Delete the original Vxidl.AYS file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Mneah Backdoor Removal
TrojanDownloader.Win32.Xuma.gen Trojan Removal instruction
System33 Trojan Information
LetsCool BHO Symptoms

Davis malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Davis;
[Eset]Davis virus;
[McAfee]Univ/j;
[Panda]Davis;
[Computer Associates]Davis

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Davis:

An up-to-date copy of ExterminateIt should detect and prevent infection from Davis.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Davis manually.

To completely manually remove Davis malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Davis.

1. Use Task Manager to terminate the Davis process.
2. Delete the original Davis file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing SillyDL.846240! Downloader
Pigeon.AUU Trojan Symptoms
Remove Pigeon.BBV Trojan

Downloader.AE.cfg malware description and removal detail
Categories:Trojan,Downloader
Also known as:

[Kaspersky]TrojanDownloader.Win32.Apher.b;
[Eset]Win32/TrojanDownloader.Apher.B trojan;
[McAfee]Downloader-AE.cfg;
[F-Prot]security risk or a "backdoor" program;
[Panda]Trj/W32.Apher,Trojan Horse.LC;
[Computer Associates]Win32/Apher.b.Downloader.Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Downloader.AE.cfg:

An up-to-date copy of ExterminateIt should detect and prevent infection from Downloader.AE.cfg.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Downloader.AE.cfg manually.

To completely manually remove Downloader.AE.cfg malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Downloader.AE.cfg.

1. Use Task Manager to terminate the Downloader.AE.cfg process.
2. Delete the original Downloader.AE.cfg file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Ishowbao BHO Removal
Removing Brain Trojan
Niblenyo Trojan Removal instruction

Blastit malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Panda]Trojan Horse.LC;
[Computer Associates]Win32/Blastit.C!Trojan,Win32/Blastit.B!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Blastit:

An up-to-date copy of ExterminateIt should detect and prevent infection from Blastit.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Blastit manually.

To completely manually remove Blastit malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Blastit.

1. Use Task Manager to terminate the Blastit process.
2. Delete the original Blastit file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Holzpferd RAT Information

Sysm malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Sysman.249;
[Panda]Sysman.249.Drp

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Sysm:

An up-to-date copy of ExterminateIt should detect and prevent infection from Sysm.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Sysm manually.

To completely manually remove Sysm malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sysm.

1. Use Task Manager to terminate the Sysm process.
2. Delete the original Sysm file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
VBS.WinHTA Trojan Removal
CWS.Sys Hijacker Information
Removing Domywork Hostile Code
Remove Anomailer Hacker Tool

Norio malware description and removal detail
Categories:Trojan,Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Norio:

An up-to-date copy of ExterminateIt should detect and prevent infection from Norio.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Norio manually.

To completely manually remove Norio malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Norio.

1. Use Task Manager to terminate the Norio process.
2. Delete the original Norio file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing Mysden Trojan
Win32.Mediar Trojan Information
Removing Bancos.GUY Trojan

Small.cam malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Small.cam:

An up-to-date copy of ExterminateIt should detect and prevent infection from Small.cam.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Small.cam manually.

To completely manually remove Small.cam malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Small.cam.

1. Use Task Manager to terminate the Small.cam process.
2. Delete the original Small.cam file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
NetDevil.Logger Backdoor Removal
Win32.MSN.Acid Trojan Cleaner
Remove EverAd Adware
Removing Rustock Trojan
SillyDl.CXT Trojan Cleaner

Pigeon.AWR malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AWR:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AWR.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AWR manually.

To completely manually remove Pigeon.AWR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWR.

1. Use Task Manager to terminate the Pigeon.AWR process.
2. Delete the original Pigeon.AWR file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Malware Browser Helper Object BHO Removal instruction
Bancos.HMO Trojan Removal instruction

Pigeon.EDW malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EDW:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EDW.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.EDW manually.

To completely manually remove Pigeon.EDW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EDW.

1. Use Task Manager to terminate the Pigeon.EDW process.
2. Delete the original Pigeon.EDW file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

malware description and removal detail

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing :

An up-to-date copy of ExterminateIt should detect and prevent infection from .

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove manually.

To completely manually remove malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with .

1. Use Task Manager to terminate the process.
2. Delete the original file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Bancos.HFW malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.HFW:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.HFW.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.HFW manually.

To completely manually remove Bancos.HFW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HFW.

1. Use Task Manager to terminate the Bancos.HFW process.
2. Delete the original Bancos.HFW file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

TrojanDownloader.win32.VB.br malware description and removal detail
Categories:Trojan,Downloader
Also known as:

[Kaspersky]Trojan-Downloader.Win32.VB.br;
[Panda]Trj/Downloader.BD

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing TrojanDownloader.win32.VB.br:

An up-to-date copy of ExterminateIt should detect and prevent infection from TrojanDownloader.win32.VB.br.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove TrojanDownloader.win32.VB.br manually.

To completely manually remove TrojanDownloader.win32.VB.br malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.win32.VB.br.

1. Use Task Manager to terminate the TrojanDownloader.win32.VB.br process.
2. Delete the original TrojanDownloader.win32.VB.br file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Agobot.config malware description and removal detail
Categories:Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Agobot.config:

An up-to-date copy of ExterminateIt should detect and prevent infection from Agobot.config.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Agobot.config manually.

To completely manually remove Agobot.config malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Agobot.config.

1. Use Task Manager to terminate the Agobot.config process.
2. Delete the original Agobot.config file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Voice malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.Psyber;
[McAfee]BackDoor-AAN;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program,Bck/Psyber;
[Computer Associates]Backdoor/Psyber,Win32.Psyber

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Voice:

An up-to-date copy of ExterminateIt should detect and prevent infection from Voice.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Voice manually.

To completely manually remove Voice malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Voice.

1. Use Task Manager to terminate the Voice process.
2. Delete the original Voice file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Remotecmd malware description and removal detail
Categories:RAT

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Remotecmd:

An up-to-date copy of ExterminateIt should detect and prevent infection from Remotecmd.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Remotecmd manually.

To completely manually remove Remotecmd malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Remotecmd.

1. Use Task Manager to terminate the Remotecmd process.
2. Delete the original Remotecmd file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Becower malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan-Spy.Win32.Sters.ag,Trojan-Spy.Win32.Sters.ao;
[McAfee]Spy-Agent.bh.dll,PWS-Snap;
[Other]Win32/Becower.G,Infostealer,Win32/Becower.F,TrojanSpy:Win32/Sters,TSPY_STERS.AO,Dimpy.win32VBsy

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Becower:

Registry Keys:
HKEY_CLASSES_ROOT\ib15_27.cbrowserhelper
HKEY_CLASSES_ROOT\clsid\{1e6ce4cd-161b-4847-b8bf-e2ef72299d69}
HKEY_CLASSES_ROOT\interface\{8da33762-bbdc-4b80-9094-999cfbba8bd9}
HKEY_CLASSES_ROOT\interface\{cbc44498-2149-4879-b0e2-880609e306ab}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{1e6ce4cd-161b-4847-b8bf-e2ef72299d69}

Removing Becower:

An up-to-date copy of ExterminateIt should detect and prevent infection from Becower.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Becower manually.

To completely manually remove Becower malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Becower.

1. Use Task Manager to terminate the Becower process.
2. Delete the original Becower file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

SennaSpy malware description and removal detail
Categories:Trojan,Spyware
Also known as:

[Kaspersky]Constructor.SennaSpy.301;
[McAfee]SennaSpy.kit;
[F-Prot]virus construction tool;
[Panda]Const/Senna.Spy.30,Const/SennaSpy.10,Const/SennaSpy.301

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SennaSpy:

An up-to-date copy of ExterminateIt should detect and prevent infection from SennaSpy.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SennaSpy manually.

To completely manually remove SennaSpy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SennaSpy.

1. Use Task Manager to terminate the SennaSpy process.
2. Delete the original SennaSpy file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
PSW.Silly Trojan Information

Backdoor.Lithium.DLL malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.Lithium.10.b5;
[Eset]Win32/Lithium.10.plugin trojan;
[Computer Associates]Win32.Lithium.10.plugin

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Backdoor.Lithium.DLL:

An up-to-date copy of ExterminateIt should detect and prevent infection from Backdoor.Lithium.DLL.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Backdoor.Lithium.DLL manually.

To completely manually remove Backdoor.Lithium.DLL malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.Lithium.DLL.

1. Use Task Manager to terminate the Backdoor.Lithium.DLL process.
2. Delete the original Backdoor.Lithium.DLL file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Dadobra.eu Downloader Symptoms

Generic Trojan malware description and removal detail
Categories:Trojan
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\e1duf7.exe
[%SYSTEM%]\f90oqq.exe
[%WINDOWS%]\didalibA.exe
[%WINDOWS%]\knwcmbxA.exe
[%WINDOWS%]\nqphygoA.exe
[%WINDOWS%]\obxscfjA.exe
[%WINDOWS%]\plite731.exe
[%WINDOWS%]\sctybquA.exe
[%WINDOWS%]\tlvltniA.exe
[%WINDOWS%]\wcraqwmA.exe
[%WINDOWS%]\wtedmmqA.exe
[%SYSTEM%]\e1duf7.exe
[%SYSTEM%]\f90oqq.exe
[%WINDOWS%]\didalibA.exe
[%WINDOWS%]\knwcmbxA.exe
[%WINDOWS%]\nqphygoA.exe
[%WINDOWS%]\obxscfjA.exe
[%WINDOWS%]\plite731.exe
[%WINDOWS%]\sctybquA.exe
[%WINDOWS%]\tlvltniA.exe
[%WINDOWS%]\wcraqwmA.exe
[%WINDOWS%]\wtedmmqA.exe

In order to ensure that the Generic Trojan is launched automatically each time the system is booted, the Generic Trojan adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\e1duf7.exe
[%SYSTEM%]\f90oqq.exe
[%WINDOWS%]\didalibA.exe
[%WINDOWS%]\knwcmbxA.exe
[%WINDOWS%]\nqphygoA.exe
[%WINDOWS%]\obxscfjA.exe
[%WINDOWS%]\plite731.exe
[%WINDOWS%]\sctybquA.exe
[%WINDOWS%]\tlvltniA.exe
[%WINDOWS%]\wcraqwmA.exe
[%WINDOWS%]\wtedmmqA.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista