Click on screenshot to zoom
Danger level 10
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

VirusHeat

VirusHeat is a fake antivirus program that displays exaggerated notifications regarding your system’s security. It is a new version of VirusBurst, VirusProject and VirusProtectPro. All of these rogue antispyware applications are parts of Smitfraud family. Other than that VirusHeat behaves like an ordinary fake AV program, by trying to convince users that system is full of errors and they need to purchase a full version of the application. It first appeared back in February 2008.

Despite the fact that VirusHeat looks and behaves like a genuine antivirus program, no user should ever purchase a full version of this application. The rogue enters your system with intension to steal your money and if you pay for the full version of the program, you will reveal sensitive financial information to a third party. With your credit card information in their hands, the people behind VirusHeat will be able to access your bank account and steal your money. Therefore, do ignore the messages that say you have downloaded a malicious video. Even when VirusHeat launches their website, do not click “Yes”.

Users have to realize that all messages delivered by VirusHeat are not real. The infection might claim that you are infected with Trojan.Hotword, WinFixer.Adware and other 159 threats. Even though these names are not made up, VirusHeat does not have an ability to detect malware, because it IS malicious application itself. No matter how many times you close it, the rogue will pop back into action again, because it is configured to run automatically with every Windows start.

What is more, VirusHeat is closely related to Trojan Zlob, so if you have this fake AV in your system, it is very likely that you are infected with Trojan Zlob and other malicious programs as well. Therefore, you are highly advised to perform a full system scan with SpyHunter free scanner as soon as possible and see what infections you must delete. In order to remove VirusHeat and other related threats, invest in a reliable antimalware tool and perform an automatic malware removal. Protect your system and your own money from such intruders like VirusHeat by safeguarding your PC with a legitimate computer security program.

Download Spyware Removal Tool to Remove* VirusHeat
  • Quick & tested solution for VirusHeat removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove VirusHeat

Files associated with VirusHeat infection:

br15.exe
VirusHeat 3.9.lnk
%ProgramFiles%\VirusHeat 4.3
%ProgramFiles%\VirusHeat 3.9
kknwg.dll
VirusHeat 4.3.url
wcscqa.dll
%ProgramFiles%\VirusHeat 4.4
bubbj.dll
VirusHeat 3.9.exe
wbchha.dll
VirusHeat 3.9 Website.lnk
rkaxfza.dll
VirusHeat 4.4.lnk
xskmoqx.dll
guadq.dll
qdsba.dll
xskmoqx.dll
heuvth.dll
wbchha.dll
VirusHeat 4.3 Website.lnk
Uninstall VirusHeat 4.3.lnk
VirusHeat 4.3.lnk
VirusHeat 4.3.url
VirusHeat 4.3.exe
txdkfh.dll
eeioq.dll
VirusHeat 3.9.url
VirusHeat 3.9 Website.lnk
Uninstall VirusHeat 3.9.lnk
VirusHeat 3.9.lnk
uninst.exe
VirusHeat 3.9.exe
rkvdr.dll
vualf.dll
baoohy.dll
VirusHeat 4.3 Website.lnk
eeioq.dll
Uninstall VirusHeat 4.3.lnk
lvhjtsa.dll
VirusHeat 3.9.url
VirusHeat 4.3.exe
wuuawkz.dll
Uninstall VirusHeat 4.4.lnk
heuvth.dll
qdsba.dll
lruvqvw.dll
txdkfh.dll
VirusHeat 4.3.lnk
Uninstall VirusHeat 3.9.lnk
VirusHeat 4.4.url
wamdl.dll
jdxah.dll
VirusHeat 4.4.exe
sozctue.dll
zfaiqwr.dll
VirusHeat 4.4 Website.lnk

VirusHeat DLL's to remove:

rkaxfza.dll
zfaiqwr.dll
txdkfh.dll
heuvth.dll
baoohy.dll
wcscqa.dll
jdxah.dll
vualf.dll
qdsba.dll
rkvdr.dll
bubbj.dll
guadq.dll
wuuawkz.dll
eeioq.dll
wamdl.dll
lvhjtsa.dll
sozctue.dll
xskmoqx.dll
wbchha.dll
lruvqvw.dll
qdsba.dll
wcscqa.dll
xskmoqx.dll
heuvth.dll
wbchha.dll
txdkfh.dll
eeioq.dll
kknwg.dll

VirusHeat processes to kill:

br15.exe
VirusHeat 3.9.exe
VirusHeat 4.3.exe
VirusHeat 4.4.exe
VirusHeat 4.4.exe
VirusHeat 4.3.exe
uninst.exe
VirusHeat 3.9.exe

Remove VirusHeat registry entries:

VirusHeat 3.9
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {af73a174-ea1b-4f0b-b0b1-fe1486a6719c}
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {b0fdc513-46b9-46fc-8e70-d575ee546dae}
VirusHeat 4.4
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {db763ed8-100a-481b-8913-50a2f41dcdc3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {d4c51fa4-9192-4a9a-8d2a-a0690c92f171}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {747e1fbe-b70f-441d-bbca-6e536c04924a}
{0979850F-6C3E-4294-B225-B3D3C4A6F2A1}
{1BB2DA5F-B78F-44EA-BDA1-771CBE1DEC68}
{2A4E73C5-BA3C-4391-B7E5-FFE8D3BD6245}
{44A923CA-F430-4F85-9F84-5153ECDB882E}
{4E6E21EC-9D72-4164-8A53-74786A467872}
{631E9E48-B066-43DA-92AC-6DADF61B173B}
{65C1361C-E696-4AF0-9E21-81910193F352}
{77DCE805-C8CE-48AA-A47F-BFA6CC7704B3}
{8D42769F-07D8-494D-AAB4-AA1652C541FA}
{A1922071-390C-418D-916D-91209E95D286}
{A1F8CD95-CFB3-43D1-A956-63441CC058C1}
{A63B46AD-96A7-4A2C-BD8F-8CD097E1593A}
{A65F98DD-2360-468C-B76E-B1B84C0D547C}
{AE2AEED0-BE1B-4BA2-826E-20D1991081B8}
{D7F73787-6206-4BBA-BDC0-7CFA9940DBCB}
{E770F739-2968-4ED9-A63C-DC1938DC82A2}
{CFAFA83C-855B-4E3D-92B9-A587995B675A}
Microsoft\Windows\CurrentVersion\App Paths\VirusHeat 3.9.exe 3.9
Microsoft\Windows\CurrentVersion\Uninstall\VirusHeat 3.9
VirusHeat 3.9
Microsoft\Windows\CurrentVersion\Run\VirusHeat 3.9
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler{917f93bf-6714-4e11-8982-59db2e0f88fc}
{917f93b
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {eb9f614b-ea44-40d0-8829-542e4f254739}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {d9f6ce57-0718-4bd1-916f-5fb1f86911c2}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser {DB9FBA9D-AB1B-4CC6-9745-F3B549D64E40}
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {12a31567-9883-4cc0-a684-ad5804394d69}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {699fabf8-1087-491f-b57c-80a68929d82b}
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {f43bfc6c-47cc-4798-8798-a0721b8ed7ab}
VirusHeat
VirusHeat 4.3
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {a0efe2fe-7249-4403-a00b-8be108617c75}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {917f93bf-6714-4e11-8982-59db2e0f88fc}
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {65bbf06c-ea06-4818-92a3-f3550d0e1004}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {f0d4f88e-e1f8-460f-a41c-6cfb7f73af79}
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {d70e9b0f-aabc-4066-8176-c6de84d92fa1}
Software\Microsoft\Internet Explorer\Toolbar {DB9FBA9D-AB1B-4CC6-9745-F3B549D64E40}
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {7d7bd0c4-4913-4933-b870-7388a7bffb82}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {9d19a1a9-3cdf-4f15-a5ca-ea3905febded}
Software\Microsoft\Internet Explorer\URLSearchHooks {f43bfc6c-47cc-4798-8798-a0721b8ed7ab}
Disclaimer

Comments

  1. Universal Anti-Virus Apr 17, 2011

    Oh my god this is very danger.That's people trick's the loser's.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.