Click on screenshot to zoom
Danger level 10
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

VirusHeat

VirusHeat is a fake antivirus program that displays exaggerated notifications regarding your system’s security. It is a new version of VirusBurst, VirusProject and VirusProtectPro. All of these rogue antispyware applications are parts of Smitfraud family. Other than that VirusHeat behaves like an ordinary fake AV program, by trying to convince users that system is full of errors and they need to purchase a full version of the application. It first appeared back in February 2008.

Despite the fact that VirusHeat looks and behaves like a genuine antivirus program, no user should ever purchase a full version of this application. The rogue enters your system with intension to steal your money and if you pay for the full version of the program, you will reveal sensitive financial information to a third party. With your credit card information in their hands, the people behind VirusHeat will be able to access your bank account and steal your money. Therefore, do ignore the messages that say you have downloaded a malicious video. Even when VirusHeat launches their website, do not click “Yes”.

Users have to realize that all messages delivered by VirusHeat are not real. The infection might claim that you are infected with Trojan.Hotword, WinFixer.Adware and other 159 threats. Even though these names are not made up, VirusHeat does not have an ability to detect malware, because it IS malicious application itself. No matter how many times you close it, the rogue will pop back into action again, because it is configured to run automatically with every Windows start.

What is more, VirusHeat is closely related to Trojan Zlob, so if you have this fake AV in your system, it is very likely that you are infected with Trojan Zlob and other malicious programs as well. Therefore, you are highly advised to perform a full system scan with SpyHunter free scanner as soon as possible and see what infections you must delete. In order to remove VirusHeat and other related threats, invest in a reliable antimalware tool and perform an automatic malware removal. Protect your system and your own money from such intruders like VirusHeat by safeguarding your PC with a legitimate computer security program.

Download Spyware Removal Tool to Remove* VirusHeat
  • Quick & tested solution for VirusHeat removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove VirusHeat

Files associated with VirusHeat infection:

qdsba.dll
xskmoqx.dll
heuvth.dll
wbchha.dll
VirusHeat 4.3 Website.lnk
Uninstall VirusHeat 4.3.lnk
VirusHeat 4.3.lnk
VirusHeat 4.3.url
VirusHeat 4.3.exe
txdkfh.dll
eeioq.dll
VirusHeat 3.9.url
VirusHeat 3.9 Website.lnk
Uninstall VirusHeat 3.9.lnk
VirusHeat 3.9.lnk
uninst.exe
VirusHeat 3.9.exe

VirusHeat DLL's to remove:

qdsba.dll
wcscqa.dll
xskmoqx.dll
heuvth.dll
wbchha.dll
txdkfh.dll
eeioq.dll

VirusHeat processes to kill:

VirusHeat 4.4.exe
VirusHeat 4.3.exe
uninst.exe
VirusHeat 3.9.exe

Remove VirusHeat registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {699fabf8-1087-491f-b57c-80a68929d82b}
Microsoft\Windows\CurrentVersion\App Paths\VirusHeat 3.9.exe 3.9
Microsoft\Windows\CurrentVersion\App Paths\VirusHeat 4.3.exe 4.3
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {d9f6ce57-0718-4bd1-916f-5fb1f86911c2}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler{917f93bf-6714-4e11-8982-59db2e0f88fc}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler{f0d4f88e-e1f8-460f-a41c-6cfb7f73af79}
Microsoft\Windows\CurrentVersion\Run\VirusHeat 3.9
Microsoft\Windows\CurrentVersion\Run\VirusHeat 4.3
Microsoft\Windows\CurrentVersion\Uninstall\VirusHeat 3.9
Microsoft\Windows\CurrentVersion\Uninstall\VirusHeat 4.3
Security Centre
VirusHeat 3.9
VirusHeat 4.3
WINDOWS\CURRENTVERSION\RUN\VirusHeat 4.4
{0979850F-6C3E-4294-B225-B3D3C4A6F2A1}
{0EC085A8-9818-43B7-B975-EC7555EDA4D2}
{1A74C41C-0837-4FBE-BA50-621EB70F01CE}
{1BB2DA5F-B78F-44EA-BDA1-771CBE1DEC68}
{25297614-1B76-4C2C-82C6-62738AA0E8F0}
{2A4E73C5-BA3C-4391-B7E5-FFE8D3BD6245}
{37F89457-1208-4670-9245-58C62BD6D870}
{44A923CA-F430-4F85-9F84-5153ECDB882E}
{45477032-ABD0-454D-9CE4-EA34C10322F8}
{4E6E21EC-9D72-4164-8A53-74786A467872}
{631E9E48-B066-43DA-92AC-6DADF61B173B}
{65C1361C-E696-4AF0-9E21-81910193F352}
{69E34747-0B27-4B30-AE20-1023BF29E246}
{77DCE805-C8CE-48AA-A47F-BFA6CC7704B3}
{79BE5B3B-80B2-4B77-A042-EFC90F6E0DE7}
{7C0EC6BF-81B9-4FE0-9447-4ED29A36BF5D}
{7EBB34CF-1728-4136-A968-48F231DAD1B4}
{88DAA291-B413-4C46-B378-3BE66F65369E}
{8D42769F-07D8-494D-AAB4-AA1652C541FA}
{917f93bf-6714-4e11-8982-59db2e0f88fc}
{936A2F4A-53F8-4D2F-92AA-2F9DE889841C}
{A1922071-390C-418D-916D-91209E95D286}
{A1F8CD95-CFB3-43D1-A956-63441CC058C1}
{A63B46AD-96A7-4A2C-BD8F-8CD097E1593A}
{A65F98DD-2360-468C-B76E-B1B84C0D547C}
{AE2AEED0-BE1B-4BA2-826E-20D1991081B8}
{AFCC3FA7-82A9-42D5-A405-78711E97A5D6}
{CBD02E9B-37EF-47D2-96B0-3ABBB2EB92BF}
{CC05A4A3-7B28-488F-AB02-6AAEDB86ACCF}
{CFAFA83C-855B-4E3D-92B9-A587995B675A}
{D7F73787-6206-4BBA-BDC0-7CFA9940DBCB}
{d9f6ce57-0718-4bd1-916f-5fb1f86911c2}
{E770F739-2968-4ED9-A63C-DC1938DC82A2}
{E80114AA-6653-4952-9E97-5F1DC63BEE0F}
{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}
{F9109A2A-432B-4ADD-A6FA-06BA22DCD2D9}
{FCA3958A-8D38-4D14-8B81-CCD7F68A8A01}
Disclaimer

Comments

  1. Universal Anti-Virus Apr 17, 2011

    Oh my god this is very danger.That's people trick's the loser's.

  2. Promaster Jun 5, 2017

    Spyhunter doesnt work

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.