Click on screenshot to zoom
Danger level 8
Type: Worms
Common infection symptoms:
  • Shows commercial adverts
  • Normal system programs crash immediatelly
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Worm.AutoRun.eav

Worm.AutoRun.eav is a worm which may be downloaded unknowingly by a user when visiting malicious Web sites. This worm tends to modify the user’s registry entry so as to enable its automatic execution at every system startup. Worm.AutoRun.eav will drop copies of itself in all removable drives. Worm.AutoRun.eav also drops an AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed. It also updates itself from certain website. Worm.AutoRun.eav is renegade software that was designed to display false and exaggerated results, as a means to coerce a user into purchasing the full version software. Should a user actually download and install Worm.AutoRun.eav, then the program will start every time the computer is rebooted. Once started, it will scan the computer and state that the system can run more efficiently if the user purchases Worm.AutoRun.eav and lets it optimize the computer. In fact, it has been shown that by just having Worm.AutoRun.eav running on a computer can ensure the computer functions slower and run less efficiently. Worm.AutoRun.eav is installed under deceptive pretences, and it will infiltrate the user’s PC without their approval or knowledge. Worm.AutoRun.eav is particularly damaging to a computer system, once it has fully embedded itself within the PC’s system, therefore it is given a high priority security risk status by many computer analysts.

Download Spyware Removal Tool to Remove* Worm.AutoRun.eav
  • Quick & tested solution for Worm.AutoRun.eav removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Worm.AutoRun.eav

Files associated with Worm.AutoRun.eav infection:

wpbjd.exe
win32.exe
1823.exe
wmpnetwkv9r1.dll
stpass.exe
UniKey.exe
sp.DLL
iturbo.exe
Startup.exe
cftuon.exe
WinSysApp.exe
WinAlert.exe
netsvcs32.exe
test.exe
_ex-68.exe
TNODUP.exe
Ikariam Hack.exe
60DA8.exe
YPfdbKQmYWnOqAL.exe
tMfQnhnjewmTtoH.exe
oKGUvxjzUCiQ4v.exe
lvvm.exe
AB6.exe
7FC.exe
xmlprw32.dll
wondershare.ppt2dvd.pro.6.1.7-MPT.exe
WinDefender.exe
thpm4230316309100063979.tmp
tdx.sys
netbt.sys
MPKView.exe
LhZ47ZN0LkjNp8.exe
gGoRaLwOHp2vcb.exe
fUOfWDexaNHOBg.exe
dfsc.sys
cdrom.sys
bmhost.exe
winggom.exe
wcdplayer.dll
steam.exe
MCFrance_setup.exe
AE947CD1124.exe
kl.exe
sms.exe
SafeDrvll.exe
your name as ringing tone.exe
winusbsmgr.exe
Torchlight.exe
regdrv3.exe
questbrowse169.exe
packobjparse.exe
Neetplwiz.exe
jsodj.exe
inetsw32.dll
fd9ljzev.exe
E510.exe
DailyBibleGuideAuto.exe
casttipv2.exe
Aggr3.exe.exe
2K11Ã=Ȧ+µ¦¦ðÌ©-ã¸.exe
windows_update.exe
questscan145.exe
mdhcp32.dll
ecleaner.exe
wcynsvc.exe
ysbjnkdnroctft.dll
StartupSlowFix.exe
wdt.exe
tasker.exe
MSASCul.exe
java.exe
CORYBJUvgosSXeG.exe
50E0.exe
IDM.exe
Windows32Shield.exe
server.exe
queryscan133.exe
1878.dll
PrintScreenPro.exe
EliStarA.exe
1378.dll
rk.exe
wupyupwctt.exe
vsbntlo.exe
s1.exe
hidprov.exe
facebook.exe
aston.exe
F842.tmp
taipingtianguov1.1.exe
Recycle.Bin.exe
winlogin.exe
nvdisp.exe
KB920872.dll
Chouf-This.exe
vbcs.exe
conhost.exe
Explore.exe
radmin_2.2.exe
msime82.exe
usrsvc.exe
takman.exe
questresult128.exe
wmupd.exe
scanquery129.exe
resultbrowse157.exe
questdns157.exe
questbrowse145.exe
questbrowse143.exe
chkntion.dll
aeevts.exe
ndi.exe
wuauclt.exe
yteryx.exe
igfxtray.exe
igfxbp32.exe
xthvfge.dat
sysam.exe
rundll32 .exe
glovext.dll
eidbkzw.dll
eerxnideomksvirtfpux.dll
AdVantage.exe
hhgwiamd.dll
afido.exe
uvvnx03.dll
JavaUpdatecdr.cpl
yt8a.exe
slideshow.scr
WUpdateAgent.exe
M3MEDINT.EXE
My Web Search Installer(0004af80).exe
m3HighIn.exe
g14iLivid_Setup.exe
SlimFTPd.exe
mkyvyuo.sys
gamexl.exe
explorer.exe:userini.exe
jutched.exe
AnimatedDesktop.exe
msible.dll
codeclib.exe
Microsoft Office PowerPoint 2007.exe
GD.exe
setup.exe
recycle.exe
odloadf1C.dll
mskufed3d.dll
CrackDown.exe
avgtray.exe
autoclk.exe
SFCsrvc.pif
HPWizard.exe
jwkd.exe
agedc.exe
gabpath.exe
wd21552.dll
deWMV1.dll
vsssadmin.exe
spllwow64.exe
hcRlcTgraZ.exe
ultrafx.exe
SetupRun.exe
defender.exe
WarRock.exe
Setup-5.051.exe
securitymanager.exe
oOxKcTW6P.exe
GameMon.des
fgmhduxuerb.exe
6twpfP84As.exe
wins.exe
winfixer.exe
u1006.org.exe
syitm.exe
swchost.exe
Singularity Trainer.exe
SI796_289.exe
SI4b1_231.exe
qsrvq.exe
kbdgrvi.dll
ffe.dll
6to4ex.dll
svrwsc.exe
winspymaster.exe
comsrvr.exe
winjpg.jpg
wing.exe
svchos.exe
remove.exe
AUTOCONVE.EXE
csrcs.exe
windows.exe
x41.exe
wscntfy.exe
SE2011.exe
recyclebin.exe
cpwr.exe
ComboFix.exe
AdobeUpdate.exe
servicess.exe
teoraarate.dll
Skynet Iranoffline v2.3.exe
listener.exe
Sytvsm.exe
zaking.exe
0573500384.exe
027965933.exe
youm_3.dll
javawhelper.dll
ieakeng32.dll
hitblniaffm.exe
d3dim32.dlld8qvq1s32.dllnz083rpp32.dllwm2bx32.dllpy1guijtnmf0d32.dll
arking.exe
acrobatflashhplayer.exe
8rjzl32.dll
Polygon Love 2 V1.1 Launcher v2 Full loli.exe
yoos.b
wuaucldt.exe
FastUv32.dll
6to4v32.dll
4801640.dll
14582312.dll
crazya.exe
webcam.exe
VideoEnhancerSetup.exe
SmitfraudFix.exe
klifoko.sys
ctbr.dll
McaUpdate.exe
Flash_Disinfector.exe
domain.exe
VirusRemoval_PERO.vbs
UjBright_Antivirus.vbs
tumauini.vbs
solution.vbs
RJN_Burner.vbs
moz.vbs
killVBS.vbs
d.vbs
astig.vbs
AdobeCS4.vbs
ACERS-SYPE-COMET-SOFEE-ACES.vbs
999.vbs
SysAnti.exe
SafeDrvsss.exe
SafeDrvee.exe
SafeDrv.exe
nodqq.exe
csrsc.exe
autorun.inf
win32osf.exe
XP-6A3A0D20.EXE
ohydy.exe
winlog.exe
ahr.exe
sWx.exe
Application Datasvchost.exe
winlogon.exe
cftu.exe
XP-84978424.EXE
M7K1H3A6.vbs
XP-DCB3C72C.EXE
UbiRg.exe
XP-2D39A46D.EXE
rundll56.exe
XP-C6BBD855.EXE
XP-822A840F.EXE
XP-38B8CEBE.EXE
XP-8FF03DFF.EXE
XP-8F09BDB0.EXE
rundli32.exe
sysdiag64.exe
userinit.exe
XP-364C086F.EXE
XP-5C37B42E.EXE
XP-C748D768.EXE
XP-17010165.EXE
XP-042EC9AF.EXE
XP-A252657D.EXE
XP-D41D8CD9.EXE
XP-C8889B57.EXE
XP-AA54AD69.EXE
XP-6BB4378C.EXE
XP-E7D6DD34.EXE
XP-3451AFB8.EXE
XP-F09415CE.EXE
XP-12B7E2EE.EXE
XP-12C950AE.EXE
XP-85A6D8DD.EXE
XP-904B231F.EXE
XP-F180A41E.EXE
XP-2B689D56.EXE
XP-21470116.EXE
XP-5ADC2FB8.EXE
XP-CE0B6B01.EXE
XP-0EF5525C.EXE
XP-CE734A3C.EXE
XP-F3603667.EXE
XP-F787D259.EXE
XP-4D887B29.EXE
XP-C8C16F42.EXE
XP-6CF365E3.EXE
XP-87B203C2.EXE
XP-172566D2.EXE
XP-DDA58EAE.EXE
XP-337B8E53.EXE
XP-5ED4BC61.EXE
XP-E044478C.EXE
XP-D754771A.EXE
XP-3E5A95DF.EXE
XP-590822A9.EXE
XP-CF959062.EXE
XP-09A09F1E.EXE
iexplorer.exe
system.exe
lsass.exe
JACKsmall.exe
CSRSS.exe
services.exe
WindowsLive.exe
8EBE6FCF.DLL
cvasds0.dll
herss.exe
6FB219.EXE
83B2C82D.DLL
tsay.exe
userini.exe
kislab.exe
fffddeabacfda.dll
windowsmp.exe
explorcr.exe
init.exe
guangd.exe
aebfcbddecdfffeca.dll
scvhost.exe
vshost32.exe
smss.exe
KEYBOARD.exe
fuwuqi.exe
Win24DLL.exe
afaadacbadddc.dll
kvtrwkcc.exe
fool1.dll
SVCHOST32.EXE
scrss.exe
Thumbs.exe
svchots.exe
SilentSoftech.exe
winsys.exe
Syswin.exe
BEA23C.EXE
XP-30ABA011.EXE
qbbtqcy.exe
XP-71F06FE8.EXE
XP-EA1E4442.EXE
GuelmimG.bat
Mixa.exe
MAgent.exe
cftmon.exe
ipilrws.exe
systtray.exe
cftmom.exe
cmd.exe
explorer.exe
SVCHOST.exe
Msmsgs.exe
cvlu.exe
E05A84.EXE
XP-27EE4BE0.EXE
FlashGuard.exe
msupdt.exe
Imgtask.exe
ntdetect.com
xxz[1].exe
spools.exe

Worm.AutoRun.eav DLL's to remove:

wmpnetwkv9r1.dll
sp.DLL
8EBE6FCF.DLL
83B2C82D.DLL
xmlprw32.dll
wcdplayer.dll
inetsw32.dll
mdhcp32.dll
ysbjnkdnroctft.dll
1878.dll
1378.dll
KB920872.dll
chkntion.dll
glovext.dll
eidbkzw.dll
eerxnideomksvirtfpux.dll
hhgwiamd.dll
uvvnx03.dll
msible.dll
odloadf1C.dll
mskufed3d.dll
wd21552.dll
deWMV1.dll
kbdgrvi.dll
ffe.dll
6to4ex.dll
teoraarate.dll
youm_3.dll
javawhelper.dll
ieakeng32.dll
d3dim32.dlld8qvq1s32.dllnz083rpp32.dllwm2bx32.dllpy1guijtnmf0d32.dll
8rjzl32.dll
FastUv32.dll
6to4v32.dll
4801640.dll
14582312.dll
ctbr.dll
cvasds0.dll
fffddeabacfda.dll
aebfcbddecdfffeca.dll
afaadacbadddc.dll
fool1.dll

Worm.AutoRun.eav processes to kill:

wpbjd.exe
win32.exe
1823.exe
stpass.exe
M3MEDINT.EXE
AUTOCONVE.EXE
BEA23C.EXE
XP-30ABA011.EXE
XP-6A3A0D20.EXE
XP-71F06FE8.EXE
XP-EA1E4442.EXE
XP-27EE4BE0.EXE
XP-84978424.EXE
XP-DCB3C72C.EXE
XP-2D39A46D.EXE
XP-C6BBD855.EXE
XP-822A840F.EXE
XP-38B8CEBE.EXE
XP-8FF03DFF.EXE
XP-8F09BDB0.EXE
XP-364C086F.EXE
XP-5C37B42E.EXE
XP-C748D768.EXE
XP-17010165.EXE
XP-042EC9AF.EXE
XP-A252657D.EXE
XP-D41D8CD9.EXE
XP-C8889B57.EXE
XP-AA54AD69.EXE
XP-6BB4378C.EXE
XP-E7D6DD34.EXE
XP-3451AFB8.EXE
XP-F09415CE.EXE
XP-12B7E2EE.EXE
XP-12C950AE.EXE
XP-85A6D8DD.EXE
XP-904B231F.EXE
XP-F180A41E.EXE
XP-2B689D56.EXE
XP-21470116.EXE
XP-5ADC2FB8.EXE
XP-CE0B6B01.EXE
XP-0EF5525C.EXE
XP-CE734A3C.EXE
XP-F3603667.EXE
XP-F787D259.EXE
XP-4D887B29.EXE
XP-C8C16F42.EXE
XP-6CF365E3.EXE
XP-87B203C2.EXE
XP-172566D2.EXE
XP-DDA58EAE.EXE
XP-337B8E53.EXE
XP-5ED4BC61.EXE
XP-E044478C.EXE
XP-D754771A.EXE
XP-3E5A95DF.EXE
XP-590822A9.EXE
XP-CF959062.EXE
XP-09A09F1E.EXE
6FB219.EXE
SVCHOST32.EXE
E05A84.EXE
UniKey.exe
iturbo.exe
Startup.exe
cftuon.exe
WinSysApp.exe
WinAlert.exe
netsvcs32.exe
test.exe
_ex-68.exe
TNODUP.exe
Ikariam Hack.exe
60DA8.exe
YPfdbKQmYWnOqAL.exe
tMfQnhnjewmTtoH.exe
oKGUvxjzUCiQ4v.exe
lvvm.exe
AB6.exe
7FC.exe
wondershare.ppt2dvd.pro.6.1.7-MPT.exe
WinDefender.exe
MPKView.exe
LhZ47ZN0LkjNp8.exe
gGoRaLwOHp2vcb.exe
fUOfWDexaNHOBg.exe
bmhost.exe
winggom.exe
steam.exe
MCFrance_setup.exe
AE947CD1124.exe
kl.exe
sms.exe
SafeDrvll.exe
your name as ringing tone.exe
winusbsmgr.exe
Torchlight.exe
regdrv3.exe
questbrowse169.exe
packobjparse.exe
Neetplwiz.exe
jsodj.exe
fd9ljzev.exe
E510.exe
DailyBibleGuideAuto.exe
casttipv2.exe
Aggr3.exe.exe
2K11Ã=Ȧ+µ¦¦ðÌ©-ã¸.exe
windows_update.exe
questscan145.exe
ecleaner.exe
wcynsvc.exe
StartupSlowFix.exe
wdt.exe
tasker.exe
MSASCul.exe
java.exe
CORYBJUvgosSXeG.exe
50E0.exe
IDM.exe
Windows32Shield.exe
server.exe
queryscan133.exe
PrintScreenPro.exe
EliStarA.exe
rk.exe
wupyupwctt.exe
vsbntlo.exe
s1.exe
hidprov.exe
facebook.exe
aston.exe
taipingtianguov1.1.exe
Recycle.Bin.exe
winlogin.exe
nvdisp.exe
Chouf-This.exe
vbcs.exe
conhost.exe
Explore.exe
radmin_2.2.exe
msime82.exe
usrsvc.exe
takman.exe
questresult128.exe
wmupd.exe
scanquery129.exe
resultbrowse157.exe
questdns157.exe
questbrowse145.exe
questbrowse143.exe
aeevts.exe
ndi.exe
wuauclt.exe
yteryx.exe
igfxtray.exe
igfxbp32.exe
sysam.exe
rundll32 .exe
AdVantage.exe
afido.exe
yt8a.exe
WUpdateAgent.exe
My Web Search Installer(0004af80).exe
m3HighIn.exe
g14iLivid_Setup.exe
SlimFTPd.exe
gamexl.exe
explorer.exe:userini.exe
jutched.exe
AnimatedDesktop.exe
codeclib.exe
Microsoft Office PowerPoint 2007.exe
GD.exe
setup.exe
recycle.exe
CrackDown.exe
avgtray.exe
autoclk.exe
HPWizard.exe
jwkd.exe
agedc.exe
gabpath.exe
vsssadmin.exe
spllwow64.exe
hcRlcTgraZ.exe
ultrafx.exe
SetupRun.exe
defender.exe
WarRock.exe
Setup-5.051.exe
securitymanager.exe
oOxKcTW6P.exe
fgmhduxuerb.exe
6twpfP84As.exe
wins.exe
winfixer.exe
u1006.org.exe
syitm.exe
swchost.exe
Singularity Trainer.exe
SI796_289.exe
SI4b1_231.exe
qsrvq.exe
svrwsc.exe
winspymaster.exe
comsrvr.exe
wing.exe
svchos.exe
remove.exe
csrcs.exe
windows.exe
x41.exe
wscntfy.exe
SE2011.exe
recyclebin.exe
cpwr.exe
ComboFix.exe
AdobeUpdate.exe
servicess.exe
Skynet Iranoffline v2.3.exe
listener.exe
Sytvsm.exe
zaking.exe
0573500384.exe
027965933.exe
hitblniaffm.exe
arking.exe
acrobatflashhplayer.exe
Polygon Love 2 V1.1 Launcher v2 Full loli.exe
wuaucldt.exe
crazya.exe
webcam.exe
VideoEnhancerSetup.exe
SmitfraudFix.exe
McaUpdate.exe
Flash_Disinfector.exe
domain.exe
SysAnti.exe
SafeDrvsss.exe
SafeDrvee.exe
SafeDrv.exe
nodqq.exe
csrsc.exe
SearchSettingsProtection.exe
win32osf.exe
ohydy.exe
winlog.exe
ahr.exe
sWx.exe
Application Datasvchost.exe
winlogon.exe
cftu.exe
UbiRg.exe
rundll56.exe
rundli32.exe
sysdiag64.exe
userinit.exe
iexplorer.exe
system.exe
lsass.exe
JACKsmall.exe
CSRSS.exe
services.exe
WindowsLive.exe
herss.exe
tsay.exe
userini.exe
kislab.exe
windowsmp.exe
explorcr.exe
init.exe
guangd.exe
scvhost.exe
vshost32.exe
smss.exe
KEYBOARD.exe
fuwuqi.exe
Win24DLL.exe
kvtrwkcc.exe
scrss.exe
Thumbs.exe
svchots.exe
SilentSoftech.exe
winsys.exe
Syswin.exe
qbbtqcy.exe
Mixa.exe
MAgent.exe
cftmon.exe
ipilrws.exe
systtray.exe
cftmom.exe
cmd.exe
explorer.exe
SVCHOST.exe
Msmsgs.exe
cvlu.exe
FlashGuard.exe
msupdt.exe
Imgtask.exe
xxz[1].exe
spools.exe

Remove Worm.AutoRun.eav registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\USERINIT\ userinit
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ImgTask
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Msmsgs
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ FlashGuard
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ XP-27EE4BE0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ E05A84
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ App
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ntuser
RUNNING PROGRAM\explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Win32 Console
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ cftmom
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ RunJava2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ egrrgdk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.