Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Slow Computer

Spamhaus Virus

Spamhaus Virus is a ransomware infection which is about to corrupt as many computers as possible. The threat locks down the computer so that you cannot use the machine as usual. Instead of the desktop, you will find a bogus warning claiming that you have no access to the PC because it has been detected that you have been spreading malware. Later on, in the middle of the fake alert, the more concrete information on the reasons why the computer is not longer operable is presented.

Here is how Spamhaus Virus puts it:

Our spamhause agent has conducted a full check of your system and found following violations:

  • You are distributor of pornography and porno materials, regularly watch porno sites with child pornography and zoophilia.
  • You possess unlicensed software and pirate audio and video records.

Such  false accusations are not surprising as the vast majority of the ransomware scams having been detected recently claim that the user of the computer is involved in the activities related to pornography and the use of copyrighted or pirated material. The same scare tactics are employed by such threats as FBI Virus, EC3 Virus and many others. In order to convince the user that he or she must pay the money, cyber criminals presents the warning as if it originated from some legal enforcement agency.

As a result, you should pay no attention to the credentials of Spamhaus. The criminals have appropriated the design of spamhaus.org to make you think that the organization accuses you of using prohibited material. Spamhaus has various databases, one of which is XBL Advisory which is also presented in the warning. We recommend you ignore the entities presented as Spamhaus is not related to the threat you have on the PC.

Spamhaus Virus is a scam which is supposed to force you to pay 300 U.S. dollars via MoneyPak which you should not do. If you were to look at other ransomware warning, you would see that MoneyPak is one the services used in the messages for money transactions.

Thinking of how to get rid of Spamhaus Virus? The easiest way to do so is by implementing SpyHunter which is a safe and reliable spyware removal tool which can remove the ransomware infection with ease. Below you will find our step-by-step installation instructions which will help you install the software properly.

Spamhaus Virus Removal

Windows XP

  1. Restart the computer.
  2. Wait for the BIOS startup screen to load and start tapping the F8 key.
  3. Use the arrow keys to highlight Safe Mode with Networking.
  4. Press Enter.
  5. Click Yes.
  6. Open the Start menu.
  7. Launch Run.
  8. Type msconfig and click OK.
  9. Open the Startup tab.
  10. Click Disable All and then Apply.
  11. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  12. Restart the PC.
  13. Install the application and remove Spamhaus Virus.

Windows 8

  1. Press the Windows key to access Start screen.
  2. Click the Internet Explorer tile.
  3. Access our website and download our spyware removal tool.
  4. Install the application and scan the PC.

Windows Vista and Windows 7

  1. Restart the PC.
  2. Wait for the BIOS startup screen to load and immediately start tapping the F8 key.
  3. Using the arrow keys, select Safe Mode with Networking and press Enter.
  4. Open the browser and type http://www.pcthreat.com/download-sph to download SpyHunter.
  5. Run the installer and terminate the infection.
Download Spyware Removal Tool to Remove* Spamhaus Virus
  • Quick & tested solution for Spamhaus Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Spamhaus Virus

Files associated with Spamhaus Virus infection:

Q3d38543.exe
iner.exe
videotwisterSA.exe
aPr0hY9.exe
xmlfilter.exe
zqmkrehUkpoKfsafsaZg.exe
yaiiwockc.dll
mplayer2.exe
TimeDateMUICallback.exe
pmstcdjwz.exe
oygqyunapnp.exe
2084473.dll
00qbipeq.exe
%CommonProgramFiles%
pYunY8m4VL3qLc.exe
xaZYOVJW.exe
rvcbcyks.exe
ACEIEAddOn.dll
%LOCALAPPDATA%\Temp
msshell.exe
msn.exe
wjthvwjb.dss
obvwo.exe
wpbt0.dll
50E1.exe
rool0_pk.exe
%ALLUSERSPROFILE%
xctqakcqbeo.dll
bf8h8d02hf.exe
DLL321.dll
secproc_isv.exe
wlsidten.exe
systemcpl.exe
dyjdl.exe
msavfit.exe
idiokbbrv.exe
VaultSysUi.exe
%SystemDrive%\????????????
Firewallservice.exe
WINDED6.exe
Other.res
SyncHostps.exe
%WINDIR%\system32
MusicCollector.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
Updating.exe
taskhost.exe.exe
NTServiceManager.exe
Piranha.exe
msnmsgrr.exe
securitywindrv.exe
gcrwcoak.exe
dqnbdq7.dss
sqlncli.exe
%APPDATA%\Task Scheduler
questscan.dll
comeo.exe
C87C.exe
%ALLUSERSPROFILE%\Application Data
p1.exe
ssntvs.exe
acuvzomo.exe
UpdatePriv.exe
魔法桌面第三方主题破解补丁V1.1.exe
jsdhlexdqkllnbcxgai.bfg
n.
puozlkmyj.dll
audipbrd.exe
%TEMP%
dtkmujvo.exe
JfCqQ5JC.exe
96dddda4.dll
b34btbztdb0vavaw.exe
wahneaqa.exe
skype.dat
crack.exe
UpgradeHelper.exe
ubvhynpxh.exe
svchost.exe
%WINDIR%\Temp
uenovfiu.exe
%APPDATA%\updates
87b2cb3916261d5c807bf44262755cb0.exe
najeoxtt.exe
install_0_msi.exe
ieudator.dll
00b5d693.exe
administration.exe
Task Scheduler.exe
xlqbteeb.exe
%LOCALAPPDATA%\lollipop
msdtmsrd.exe
scvhost.exe
%UserProfile%
ctfmon.exe
3511172082012Build.exe
bvhylsviw.exe
m2PythonLoader.exe
ifgxpers.exe
DA0B.exe
WinSyncMetastore.exe
csrsss.exe
wlsidten.dll
%AppData%
OmaSG21e.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
bzsbkotiu.exe
ex3b.dll
setex.exe
%APPDATA%\system
wgsdgsdgdsgsd.exe
brenasa.exe
Nbt.exe
hwj3ba6j.dss

Spamhaus Virus DLL's to remove:

wlsidten.dll
puozlkmyj.dll
DLL321.dll
questscan.dll
xctqakcqbeo.dll
96dddda4.dll
ieudator.dll
yaiiwockc.dll
ACEIEAddOn.dll
wpbt0.dll
2084473.dll
ex3b.dll

Spamhaus Virus processes to kill:

zqmkrehUkpoKfsafsaZg.exe
3511172082012Build.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
comeo.exe
魔法桌面第三方主题破解补丁V1.1.exe
b34btbztdb0vavaw.exe
audipbrd.exe
SyncHostps.exe
Nbt.exe
ubvhynpxh.exe
securitywindrv.exe
bzsbkotiu.exe
VaultSysUi.exe
dyjdl.exe
NTServiceManager.exe
DA0B.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
oygqyunapnp.exe
bf8h8d02hf.exe
00b5d693.exe
Task Scheduler.exe
pmstcdjwz.exe
crack.exe
uenovfiu.exe
87b2cb3916261d5c807bf44262755cb0.exe
MusicCollector.exe
idiokbbrv.exe
msdtmsrd.exe
rool0_pk.exe
videotwisterSA.exe
gcrwcoak.exe
ssntvs.exe
systemcpl.exe
csrsss.exe
wlsidten.exe
00qbipeq.exe
Piranha.exe
taskhost.exe.exe
ifgxpers.exe
TimeDateMUICallback.exe
JfCqQ5JC.exe
msn.exe
UpgradeHelper.exe
obvwo.exe
install_0_msi.exe
xaZYOVJW.exe
WINDED6.exe
aPr0hY9.exe
Q3d38543.exe
C87C.exe
rvcbcyks.exe
msnmsgrr.exe
50E1.exe
secproc_isv.exe
Firewallservice.exe
najeoxtt.exe
m2PythonLoader.exe
UpdatePriv.exe
svchost.exe
xmlfilter.exe
administration.exe
dtkmujvo.exe
acuvzomo.exe
OmaSG21e.exe
brenasa.exe
scvhost.exe
mplayer2.exe
WinSyncMetastore.exe
xlqbteeb.exe
Updating.exe
ctfmon.exe
msshell.exe
bvhylsviw.exe
setex.exe
sqlncli.exe
wahneaqa.exe
p1.exe
pYunY8m4VL3qLc.exe
msavfit.exe
wgsdgsdgdsgsd.exe
iner.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.