Remove Malware and Viruses

NT.Shareme malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]JS.ShareNT;
[Panda]AX/EvilNT.Shareme;
[Computer Associates]JScript/HTADropper!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing NT.Shareme:

An up-to-date copy of ExterminateIt should detect and prevent infection from NT.Shareme.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove NT.Shareme manually.

To completely manually remove NT.Shareme malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with NT.Shareme.

1. Use Task Manager to terminate the NT.Shareme process.
2. Delete the original NT.Shareme file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
AI Trojan Information
Small.cy Trojan Symptoms
Puerto.Oculto RAT Cleaner
Random.Text DoS Removal

BAT.Code malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]BAT.Code.a,BAT.Code.b,BAT.Combat.737;
[Eset]Bat.Wavefunc.Code virus,BAT/Code.169.B virus,BAT/Combat.737 virus;
[Panda]BAT/Code.169,BAT/Combat.737;
[Computer Associates]Bat/Code.169.D,Bat/Code.630,Bat/Combat

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing BAT.Code:

An up-to-date copy of ExterminateIt should detect and prevent infection from BAT.Code.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove BAT.Code manually.

To completely manually remove BAT.Code malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BAT.Code.

1. Use Task Manager to terminate the BAT.Code process.
2. Delete the original BAT.Code file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.EYK Trojan Cleaner
W2K.Stream Trojan Cleaner

PSW.Lmir.fe malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Kaspersky]Trojan.PSW.Lmir.gen;
[Panda]Trojan Horse

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PSW.Lmir.fe:

An up-to-date copy of ExterminateIt should detect and prevent infection from PSW.Lmir.fe.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove PSW.Lmir.fe manually.

To completely manually remove PSW.Lmir.fe malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.Lmir.fe.

1. Use Task Manager to terminate the PSW.Lmir.fe process.
2. Delete the original PSW.Lmir.fe file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.AWJV Trojan Removal
Removing SillyDl.DCG Trojan
Flip.mp Trojan Symptoms

Ehg.mccormick.hitbox malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Ehg.mccormick.hitbox:

An up-to-date copy of ExterminateIt should detect and prevent infection from Ehg.mccormick.hitbox.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Ehg.mccormick.hitbox manually.

To completely manually remove Ehg.mccormick.hitbox malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ehg.mccormick.hitbox.

1. Use Task Manager to terminate the Ehg.mccormick.hitbox process.
2. Delete the original Ehg.mccormick.hitbox file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.DZA Trojan Symptoms
Asshole Trojan Cleaner
Spotcom Trojan Removal
Bancos.IEG Trojan Cleaner

Pigeon.AVUT malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AVUT:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AVUT.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AVUT manually.

To completely manually remove Pigeon.AVUT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVUT.

1. Use Task Manager to terminate the Pigeon.AVUT process.
2. Delete the original Pigeon.AVUT file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing Remote.Denial.of.Service.against.Be DoS
Anti.Pascal Trojan Removal instruction
RemotanZ.Clone Backdoor Removal instruction
AdvancedMailer Hacker Tool Removal

AX malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing AX:

An up-to-date copy of ExterminateIt should detect and prevent infection from AX.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove AX manually.

To completely manually remove AX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AX.

1. Use Task Manager to terminate the AX process.
2. Delete the original AX file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Dementia Trojan Removal
Removing MultiBot.Pro Backdoor
Removing Pigeon.ANF Trojan
SiteHistory BHO Removal
Win32.HackTool.Upadmin Trojan Information

Bancos.FWI malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.FWI:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.FWI.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.FWI manually.

To completely manually remove Bancos.FWI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.FWI.

1. Use Task Manager to terminate the Bancos.FWI process.
2. Delete the original Bancos.FWI file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing Internet.Marketing.Pro Toolbar
Bancos.GLM Trojan Removal
IstBar.is Toolbar Removal instruction
Remove Win32.WebDav Trojan
Caswinder Trojan Information

Donn.B!downloader malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Donn.B!downloader:

An up-to-date copy of ExterminateIt should detect and prevent infection from Donn.B!downloader.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Donn.B!downloader manually.

To completely manually remove Donn.B!downloader malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Donn.B!downloader.

1. Use Task Manager to terminate the Donn.B!downloader process.
2. Delete the original Donn.B!downloader file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing Remote.Operations.Readme RAT
Foto.Red.Spy Backdoor Symptoms
Plex Trojan Removal instruction
RetAd.PU Trojan Cleaner
Rector Trojan Removal

Web.Rebates malware description and removal detail
Categories:Adware
Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\jkill.exe
[%PROFILE_TEMP%]\temp.fr????\webrebates.dll
[%PROFILE_TEMP%]\temp.fr????\websrebates\websrebates\weblrebates.dat
[%PROFILE_TEMP%]\temp.fr????\websrebates\websrebates\webprebates.dat
[%PROFILE_TEMP%]\temp.fr????\websrebates\websrebates\websrebates.dat
[%PROFILE_TEMP%]\webrebates.exe
[%PROGRAM_FILES%]\WebRebates4\w11150.exe
[%PROGRAM_FILES%]\WebRebates4\webrebates.dll
[%PROGRAM_FILES%]\WebRebates4\webrebates.exe
[%PROGRAM_FILES%]\WebRebates4\webrebates2.dll
[%WINDOWS%]\Temp\webrebates.exe
[%PROFILE_TEMP%]\jkill.exe
[%PROFILE_TEMP%]\temp.fr????\webrebates.dll
[%PROFILE_TEMP%]\temp.fr????\websrebates\websrebates\weblrebates.dat
[%PROFILE_TEMP%]\temp.fr????\websrebates\websrebates\webprebates.dat
[%PROFILE_TEMP%]\temp.fr????\websrebates\websrebates\websrebates.dat
[%PROFILE_TEMP%]\webrebates.exe
[%PROGRAM_FILES%]\WebRebates4\w11150.exe
[%PROGRAM_FILES%]\WebRebates4\webrebates.dll
[%PROGRAM_FILES%]\WebRebates4\webrebates.exe
[%PROGRAM_FILES%]\WebRebates4\webrebates2.dll
[%WINDOWS%]\Temp\webrebates.exe

In order to ensure that the Web.Rebates is launched automatically each time the system is booted, the Web.Rebates adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%PROFILE_TEMP%]\jkill.exe
[%PROFILE_TEMP%]\webrebates.exe
[%PROGRAM_FILES%]\WebRebates4\w11150.exe
[%PROGRAM_FILES%]\WebRebates4\webrebates.exe
[%WINDOWS%]\Temp\webrebates.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista