VirusHeat Removal Process (remove VirusHeat)
February 9, 2008 – 1:37 amVirusHeat is a new rogue antispyware which issues misleading and exaggerating results. Normally it is installed by Trojan.Win32. More or less, it does degrade performance of computers and generate annoying popups. The easiest way, however, you need to pay to remove it automatically. Manual removal is possible if you know how to do regedit and understand Windows file system.
The following process will help you remove it from your system easily and safely.
VirusHeat Manual Removal Process:
1. Click on the Start Menu button, then click on the Control Panel option, and then Double-click on the Add or Remove Programs icon.
2. Locate VirusHeat and double-click on it to uninstall VirusHeat. Follow the screen step-by-step screen instructions to complete uninstallation of VirusHeat. Do not worry about this if you cannot find it in Add/Remove window. Simply skip to #5.
3. Restart the computer.
4. When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.
5. Close all programs.
6. Search and delete the following infected entries in registry. If you do not know how to edit registry, click here to read more.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusHeat
7. Stop VirusHeat process. If you do not know how to stop a running process, click here to read more.
8. Find and delete the following infected files from your system. Don’t worry if you don’t find these files. Just proceed to next step.
VirusHeat 3.9.exe
wuuawkz.dll
iinqyl.dll
If you do not know how to find it or having difficulties locating the file, click here to read more.
9. Rename the files that you found above to “foundbadfile1.dll” and “foundbadfile2.dll” (if you can not rename this file, then try to restart your computer in safe mode then try to rename this file.) If you don’t know how to start the computer in safe mode, click here to read more.
10. Go to C:\Program Files\ folder and delete the “VirusHeat” folder (if you can’t delete it, reboot your computer to safe mode then delete the folder. Do not worry about it if you can’t find this folder.)
11. Click here to bookmark this page (you will need to comeback to this page after reboot)
(If you are using Firefox click on Ctrl+D on your keyboard to bookmark this page)
12. Restart your computer
13. Go to your computer and delete the “foundbadfile1.dll” and “foundbadfile2.dll” file
14. You have just removed VirusHeat from your computer manually.
(Disclaimers: These instructions are created to help Internet users without any fee. It is free and not guaranteed to work. Please use it at your own risks. We are not responsible for any damages to your computer.)
59 Responses to “VirusHeat Removal Process (remove VirusHeat)”
Thank you very much. This instructions help me to solve this problem.
By Bops on Feb 11, 2008
Thank you so much. I was not able to complete all of these instructions, but what worked was: reboot in safe mode, rename wuuawkz.dll, reboot in safe mode again, then delete the renamed file. So many hours wasted on this… Thanks again.
By Barbara on Feb 11, 2008
hello i’m Romanian and… Virusheat affects a little bit my computer. However i think i succeded removing this VIRUS but… a stupid ICON near the clock in the right remains and i can’t get rid of it! clicking left or right takes me on a site that puts me to download the VIRUSHEAT
Can u help me get rid of this problem please
?
By Desparte OMG on Feb 12, 2008
it really work ,thank a lot of to you : ))
nice day from turkey ,istanbul . . .
By from turkey on Feb 12, 2008
Well I Couldn’t find iinqyl.dll and they still pop up D;
By Lon3rX on Feb 12, 2008
yay, it works for me, thanx for ur help,, I have been searching hi and lo for a solution for the last two days now ,, also found a free programme called RemoveIT Pro v4 - SE, with which i removed all else but wuuawkz.dll,, with ur instructions and help, renamed the file then restarted in safe mode and delelted the file in system 32 folder,,restarted back as usual and wallaah it worked, the annoying warning near the clock disappeared for good,,,
thanx once again and may virusheat rot in hell for causing this much aggro,, lol..
By rkd1973 on Feb 12, 2008
It’s work fine, thank you..
By Jdi on Feb 13, 2008
Hi,
I also still see the icon in the Windows Notification (or system tray) area - bottom right of the screen. A message pops up regularly on system alert. Nothing sofar helped to remove this icon from the system tray, except for hiding the whole system tray with a registry key -> but this I want to avoid.
Any thoughts?
By Wouter on Feb 13, 2008
i got rid of the icon found it as a dll changed it to a txt and and renamed it badfile restarted pc then delted badfile its all gone
By bugmans42 on Feb 14, 2008
i had that system alert in the bottom right of the screen at the clock all the time too, but got it fixed by restarting the computer in safe mode, go to c:\WINDOWS\System32 and renaming a file named “eeioq.dll”, restarting in safe mode again and removing the renamed file. haven’t had a system alert since. Good luck
By Jcl on Feb 15, 2008
oh, and before i removed “eeioq.dll” i removed a folder in C:\Program called “netproject” while in safe mode.
i hope this works for you too, good luck
By Jcl on Feb 15, 2008
Hi,
I could only find the VirusHeat folder in C:\Program Files.
I removed that, but the trayicon is still there? Any solutions?
Thanks,
Yiannis
By Yiannis on Feb 15, 2008
hello i’m Romanian and… Virusheat affects a little bit my computer. However i think i succeded removing this VIRUS but… a stupid ICON near the clock in the right remains and i can’t get rid of it! clicking left or right takes me on a site that puts me to download the VIRUSHEAT
Can u help me get rid of this problem please
?
/Quote
i have the same problem, help please
im not any good with computers so don’t tell me to delete folder dll. or wtf :p
By moo on Feb 19, 2008
omgosh you guys rock
By sara on Feb 21, 2008
thanks..people..it works..peace from Bosnia & Herzegovina..
By Admir_Bosnia on Feb 23, 2008
if u get a virusheat system alert at the clock!
go to c:\WINDOWS\System32 and look for a file named eeioq.dll
or search for it using the search tool.
if u find it look at the step i wrote earlier.
By Jcl on Feb 24, 2008
followed all removal steps. its all gone except for the tray icon. i haven’t found any of the .dll files you guys referred to. each file has been searched for in the system32 folder to no avail. any other solutions?
By aG on Feb 26, 2008
They can’t help. Apparently nobody, even if you pay for good spyware programs, can help with this. Unreal.
By Jas on Feb 27, 2008
So….. you do everything above, fine. Gets rid of the major annoyance. BUT, you still have a flashing icon in the corner. Click it (right click even) and you go straight to the Virus Heat website. BULLSHIT
By Jas on Feb 27, 2008
I did not find “eeioq.dll”, but I did find and remove (by changing the name, rebooting in safe mode, and deleting) a file called “C:\WINDOWS\System32\wbchha.dll”. That got rid of the icon in the system tray.
By JEL on Feb 27, 2008
Yes - excellent! I had found a bad dll file using instructions from another site, but could not unlink or delete the file. Renaming and restarting worked like a charm. To work for more folks, your list of infected dll files from VirusHeat needs to be expanded (my infected dll was wbchha.dll):
iinqyl.dll
wuuawkz.dll
eeioq.dll
wbchha.dll
heuvth.dll
xskmoqx.dll
txdkfh.dll
Thanks!
By Kathleen on Mar 2, 2008
I tried everything listed above. Searched high and low for all the aforementioned files and couldn’t find anything. I found and deleted the Netproject folder, but did not find wbchha.dll nor eeioq.dll. That icon is still there looking at me now… what to do? What to do? Help!
By TheKiD on Mar 3, 2008
hello i’m Fadhil. Virusheat affects a little bit my computer. However i think i succeded removing this VIRUS but… a stupid TRAYICON i can’t get rid of it! clicking left or right takes me on a site that puts me to download the VIRUSHEAT. Can u help me get rid of this problem please?
By fadhil on Mar 4, 2008
uauuu. It so difficult to do it. Guys, may be be every time this file has different name. If you know the exact time when you were infected find which file is modified in the ’system32′ folder. Than you must delete it. I had ‘wksqyc.dll’ or like that. I use the ‘unlocker’ program to delete, so don’t need to restart in ’save mode’. regards from Bulgaria
By Vassil on Mar 4, 2008
Deleting the c:\windows\system32\wbchha.dll file was what worked for me too.
By SuperDave on Mar 4, 2008
couldnt find anything listed above so i assume thats a good thing.. i uninstalled the virusheat through the control panel, and im searching for eeioq wbchhaz iinqyl and wuuawkz as i speak but i cant seem to find any of it but the icon still remains…
By jin on Mar 4, 2008
First of all; thank you all very much for the posts… it really helped!
I looked in system32 and pressed the “sort after last modified” then i could see the recent files that were modified, and then i changed/renamed the file to badfile.txt restarted and deleted the file. it worked perfectly!
Greetings from Denmark
By Nino on Mar 6, 2008
well im still looking to get rid of the icon.. been looking nonstop for quite a while now… ive switched accoutns on the computer and what made sense on the first account changed into a whole chain of gibberish.. ill write here so you can see.
“Q{qvgo”Cngpv#”
]w}-zkc.fo}.jkzkmzki.o,`{clk|.ah.omzgxk.}~wyo|k.o~~bg,ozga`}zfoz.cow.gc~omz.zfk.~k|ha|co`mk.ah.wa{l.mac~czkl
.mbgme.zfk.gma`za.ikz.|gi.ah.{`yo.zkjbaoja`i.o`,{~#za#jozk.o`zg)~wyo|k.}ab{zga
this is exactly what i see. ive narrowed the search down with a few leads because my security is asking me to attach something called C:/programfiles/netproject.sbmdl.dll and im constantly saying no.. however while searching i cant find netproject folder nor sbmdl.dll..
im getting desparate.. email is jsfoamy425@gmail.com im sure there is a manual way to get rid of this thing like you guys.
By jin on Mar 6, 2008
delete the c:\windows\system32\lruvqvw.dll file to get rid the tray icon
By mrX on Mar 6, 2008
I FOUND A WAY TO REMOVE VIRUSHEAT FROM SYSTEM TRAY…
NO NEED
ACTUALLY THIS VIRUS SEEN, ANY ONE OF FOLLOWING NAMES.
VIRUSHEAT.EXE
WBCHHA.DLL
EEIOQ.DLL
HEUVTH.DLL
LRUVQVW.DLL
XSKMOQX.DLL
USUALLY THIS VIRUSHEAT VIRUSES ARE SITTING AT C:\WINDOWS\SYSTEM32\….
TO REMOVE THIS VIRUS FOLLOW THESE STEPS..
1.FIND THE VIRUS FILE. [U CAN FIND IT WITH THE HELP OF SPYHUNTER FREE VERSION. BUT, SPYHUNTER FREE VERSION WONT REMOVE VIRUS]
2.U CANT REMOVE THE VIRUS WHILE IT WAS RUNNING. SO, CORRUPT THE FILE.
3.HOW TO CORRUPT?
3a.RIGHT CLICK THE FILE.
3b.SELECT THE PROPERTIES.
3c.RENAME THE FILE.
3d.RENAME THE FILE EXTENSION NAME[i.e. .TXT]
3e.IN ATTRIBUTES BOX CLICK READ ONLY BOX. AND
ALSO REMOVE THE TICK FROM ARCHIEVE BOX.
THUS, THE .DLL FILE WILL CORRUPT.
4.EVEN NOW, U CAN’T REMOVE THE VIRUS.
BECOZ THAT PROGRAM IS STILL RUNNING. JUST RESTART YOUR COMPUTER.
5.NOW YOU CAN’T SEE THE VIRUSHEAT ICON IN SYSTEM TRAY.
6.NOW U CAN DELETE/SHRED THE FILE.
DONT FORGETTTTT TO EMPTY UR RECYCLE BIN.
By DR.RAM on Mar 8, 2008
Hi there.
I did everything listet above.
But the warnings are still popping up and the fuckin icon is still there.
But! Important! I could not find any DLL listet above! Please help me:
mail: elias.list@gmx.net
msn: elias.lsit@gmx.net
skype: hippie1abc
icq/qip: 379-885-712
By Elias Jonathan List on Mar 9, 2008
delete the c:\windows\system32\lruvqvw.dll file to get rid the tray icon…i did the same it worked…
jus change the extension to.txt nd delete it after estarting..
By rushabh shah on Mar 10, 2008
another file to look for is guadq.dll in the c:/windows/system32 directory. Corrupting the file is a very good way of getting rid of this file. Also, go into the registry and search for the dll to delete the registry entry so that it doesn’t try to start the process again upon reboot.
By tonio s. on Mar 12, 2008
Hi there,
I could not find any *.dll files mention above at \WINDOWS\System32, so the icon is still appeared with the “the system alert”. Although I have erased netproject folder and the virusheat. Then I try another way, searching “*.dll files” mentioned in this site, then searching “netproject” and “virusheat” in the registry. (Using run regedit) Delete all of them and then reboot your computer. After working for more than 8 hours, everything back to normal.
Don Famy - Bandarlampung Indonesia
By Don Famy on Mar 14, 2008
just click on control panel-taskbar and start menus-click customize button by hide inactive icons and select always hide this icon…problem resolved…optical only
By joe on Mar 16, 2008
I had to remove jdxah.dll which is one of the files mentioned at http://www.xp-vista.com/spyware-removal/virusheat-removal-instructions
I was infected with virusheat version 4.3
By alw on Mar 17, 2008
Thank you alw for including the dll that fixed yours. After searching through all the whole thread and trying everything to get rid of the annoying icon the jdxah.dll finally did it.
Thanks
By pbh on Mar 19, 2008
cant get rid of the icon . none of the dll files listed here are in my system 32 box. No modified day I was infected. Help! Please
By adi on Mar 20, 2008
Thanks for the help everybody. I went about it backassward but I think it’s gone. I have Windows XP and used the “Search” feature. I got rid of the virusheat stuff but still had the icon. Searched for “.dll” on the harddrive and modified the search to look for things from today (I got this damn thing earlier today.) It found 3.
kdfapi.dll
kdfhok.dll
lvhjtsa.dll
I was able to delete the first 2 no problem but I had to re-name the 3rd file as mentioned above. Restarted and that flashing bastard was gone!
I hope the person who made this gets a virus of their own. Maybe herpes…
By Tom on Mar 23, 2008
look for a DLL that has no company on its properties, I had the same problem and I couldn’d find the DLL’s mentioned above, just look in the SYSTEM32 folder and rename what you think is suspicious and restart the machine.
By mark yap on Mar 25, 2008
Here’s another version, I removed the systray icon by sorting system32 folder by last modified also, and found sozctue.dll, once renamed, (I just added “badfile” in front of it) the systray icon didn’t come back up. Good Luck, and thanks for all your posts/help.
By JohnD on Mar 30, 2008
Like JohnD did, I also sorted the system32 files by modified date, and found dcggain.dll as the most current modified file, which is one of the culprits of all this mess
By Aay on Apr 4, 2008
“dcggain.dll” was the culprit for me. couldn’t delete it as it was in use. when I renamed it the flashing notifications area icon changed shaped immediately. rebooted, trashed it, icon is now gone.
By Anthony on Apr 4, 2008
To finally get rid of that icon I used Windows Explorer to search all .dll files in Windows\System32 and then sorted them by date modified. “dcggain.dll” showed as the only likely candidate and internet search on that filename showed to to be malicious. I changed the file suffix to “.bad” and have left it to rot. So far so good.
By James on Apr 7, 2008
This stupid product uses a differnt name each time. I searched all of those DLL’s registry file system root kits and nothing…. after some trial and error i found yet another DLL…
dcggain.dll
went to system32
looked at the file modified latest,
renamed it. instantly the icon in the systray changed to blank white icon but still flashing meaning it is memory still, but more importantly i found the dll.
Rebooted, the icon in the sys tray was gone, deleted the renamed file no problems since..
By Matt on Apr 9, 2008
Having trouble deleting dcgain but I am betting that this program creates a different dll file every day to make it hard for us, but easy for them
By Brian on Apr 12, 2008
I was able to finally delete the icon in the system tray by looking for the last modified .dll in system32. The biggest mistake people are making is to look for a specific file name. If you follow this advice you will get rid of the annoying icon. I would also add that it would be a good idea to delete all references in your registry of netproject, which seems related to this. Then delete the folder c:\program files\netproject. Also delete all registry references to virusheat.
By Chuck on Apr 13, 2008
so if it’s infected it will not let u delete it….right?
By Larry on Apr 21, 2008
Another file to look for is bubbj.dll in system32.
By TK5 on Apr 21, 2008
I wasn’t able to find any of the above .dll names, but I sitll had that stupid systray icon. What I did was view \system32 folder according to modified date, disabled the .dll that was dated closest to when the problems started. It worked! Mine was named vualf.dll. Try this
By andelou on Apr 25, 2008
look for zfaiqwr.dll as well
By Nishant on Apr 25, 2008
I have the message in the bottem right where the clock is. i cant read it but, i have followed the instructions but could not find any of the files mentioned. what should i do?
By Hobbson on Apr 26, 2008
I checked the last modified .dll in \system32 by typing the file name into google.com. There was a long list of malware reports on it. I renamed it using .txt (with a a little difficulty) and the ‘System Alert’ disappeared almost instantly.FYI: the file name was “zfaiqwr.dll”.
By Ralph on Apr 27, 2008
Thanks!!! Everybody for your help….
Took long time to get rid of this f**king virusheat alert. I also wanna add here for people who r a bit dump like me. As at first I can,t find the infected .dll file from the name given here. Easiest way goto Search > then select files & folder > type *.dll > click on when modified > u may select past month > start search > among all .dll file what comes under C:\windows\system32 are sus[ecious file > now delete as told by all experts above. Thanks
By Vasu on Apr 29, 2008
cheers guys you are all legends!!!!!
By big c on Apr 30, 2008
Got another one to add to the list: qdsba.dll. Thank you so much, by the way! I’d only gotten so far as still having that fraggin’ icon, until after reading the comments I realized that I need ed to search by “Date Modified.” It was the only .dll file that had been modified in the past week , so once I knew how to look, it was quite simple! THANK YOU!
By Celidah on May 5, 2008
Had the same problem: All obvious VirusHeat, etc. files removed (VirusHeat.exe, netproject folder, etc.) but icon still blinking. Searched for all *.dll’s mentioned here - nothing. Then - absolutely desperate - I did what’s already mentioned here: I looked in C:\Windows\System32 for the most recently changed dll file. There most recent one changed on 4th, may 2008. My symptoms started yesterday 6th, may 2008. Yet I gave it a try and renamed it - Bingo!!! The taskbar icon changed it’s looks immediately. Rebooted - icon’s gone. Don’t delete it yet!!! Do a Start-Regedit and search for this dll as it must have been loaded somewhere in the registry - and yes: it’s there - deleted registry entry, deleted dll file - rebooted once more - CLEAN!!! Good luck everyone with this annoying tray icon! (btw. mine was called rtmipr.dll - so yes it mutes it’s name quite rapidly - so only stick to the change date, not to the name!!)
By scoobievie on May 7, 2008
“dcggain.dll” was the currupt for me. I delete this file from(run>>regedit\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
reboot the PC and the icon go the fuckkkk.Thanks for all.
By Yavor on May 9, 2008
TK5 had to resort to your suggestion and it worked great, mine was rtmipr.dll
Thx everyone.
By Doctor on May 10, 2008