Image
Ads by Clickxchange

VirusHeat Removal Process (remove VirusHeat)

February 9, 2008 – 1:37 am
Image
Ads by Clickxchange

VirusHeat is a new rogue antispyware which issues misleading and exaggerating results. Normally it is installed by Trojan.Win32. More or less, it does degrade performance of computers and generate annoying popups. The easiest way, however, you need to pay to remove it automatically. Manual removal is possible if you know how to do regedit and understand Windows file system.

The following process will help you remove it from your system easily and safely.

VirusHeat Manual Removal Process:

1. Click on the Start Menu button, then click on the Control Panel option, and then Double-click on the Add or Remove Programs icon.

2. Locate VirusHeat and double-click on it to uninstall VirusHeat. Follow the screen step-by-step screen instructions to complete uninstallation of VirusHeat. Do not worry about this if you cannot find it in Add/Remove window. Simply skip to #5.

3. Restart the computer.

4. When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.

5. Close all programs.

6. Search and delete the following infected entries in registry. If you do not know how to edit registry, click here to read more.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusHeat

7. Stop VirusHeat process. If you do not know how to stop a running process, click here to read more.

8. Find and delete the following infected files from your system. Don’t worry if you don’t find these files. Just proceed to next step.

VirusHeat 3.9.exe
wuuawkz.dll
iinqyl.dll

If you do not know how to find it or having difficulties locating the file, click here to read more.

9. Rename the files that you found above to “foundbadfile1.dll” and “foundbadfile2.dll” (if you can not rename this file, then try to restart your computer in safe mode then try to rename this file.) If you don’t know how to start the computer in safe mode, click here to read more.

10. Go to C:\Program Files\ folder and delete the “VirusHeat” folder (if you can’t delete it, reboot your computer to safe mode then delete the folder. Do not worry about it if you can’t find this folder.)

11. Click here to bookmark this page (you will need to comeback to this page after reboot)
(If you are using Firefox click on Ctrl+D on your keyboard to bookmark this page)

12. Restart your computer

13. Go to your computer and delete the “foundbadfile1.dll” and “foundbadfile2.dll” file

14. You have just removed VirusHeat from your computer manually.

(Disclaimers: These instructions are created to help Internet users without any fee. It is free and not guaranteed to work. Please use it at your own risks. We are not responsible for any damages to your computer.)

  1. 59 Responses to “VirusHeat Removal Process (remove VirusHeat)”

  2. Thank you very much. This instructions help me to solve this problem.

    By Bops on Feb 11, 2008

  3. Thank you so much. I was not able to complete all of these instructions, but what worked was: reboot in safe mode, rename wuuawkz.dll, reboot in safe mode again, then delete the renamed file. So many hours wasted on this… Thanks again.

    By Barbara on Feb 11, 2008

  4. hello i’m Romanian and… Virusheat affects a little bit my computer. However i think i succeded removing this VIRUS but… a stupid ICON near the clock in the right remains and i can’t get rid of it! clicking left or right takes me on a site that puts me to download the VIRUSHEAT :| Can u help me get rid of this problem please :( ?

    By Desparte OMG on Feb 12, 2008

  5. it really work ,thank a lot of to you : ))

    nice day from turkey ,istanbul . . .

    By from turkey on Feb 12, 2008

  6. Well I Couldn’t find iinqyl.dll and they still pop up D;

    By Lon3rX on Feb 12, 2008

  7. yay, it works for me, thanx for ur help,, I have been searching hi and lo for a solution for the last two days now ,, also found a free programme called RemoveIT Pro v4 - SE, with which i removed all else but wuuawkz.dll,, with ur instructions and help, renamed the file then restarted in safe mode and delelted the file in system 32 folder,,restarted back as usual and wallaah it worked, the annoying warning near the clock disappeared for good,,,

    thanx once again and may virusheat rot in hell for causing this much aggro,, lol..

    By rkd1973 on Feb 12, 2008

  8. It’s work fine, thank you.. :D

    By Jdi on Feb 13, 2008

  9. Hi,

    I also still see the icon in the Windows Notification (or system tray) area - bottom right of the screen. A message pops up regularly on system alert. Nothing sofar helped to remove this icon from the system tray, except for hiding the whole system tray with a registry key -> but this I want to avoid.
    Any thoughts?

    By Wouter on Feb 13, 2008

  10. i got rid of the icon found it as a dll changed it to a txt and and renamed it badfile restarted pc then delted badfile its all gone

    By bugmans42 on Feb 14, 2008

  11. i had that system alert in the bottom right of the screen at the clock all the time too, but got it fixed by restarting the computer in safe mode, go to c:\WINDOWS\System32 and renaming a file named “eeioq.dll”, restarting in safe mode again and removing the renamed file. haven’t had a system alert since. Good luck

    By Jcl on Feb 15, 2008

  12. oh, and before i removed “eeioq.dll” i removed a folder in C:\Program called “netproject” while in safe mode.

    i hope this works for you too, good luck

    By Jcl on Feb 15, 2008

  13. Hi,

    I could only find the VirusHeat folder in C:\Program Files.

    I removed that, but the trayicon is still there? Any solutions?

    Thanks,
    Yiannis

    By Yiannis on Feb 15, 2008

  14. hello i’m Romanian and… Virusheat affects a little bit my computer. However i think i succeded removing this VIRUS but… a stupid ICON near the clock in the right remains and i can’t get rid of it! clicking left or right takes me on a site that puts me to download the VIRUSHEAT :| Can u help me get rid of this problem please :( ?
    /Quote

    i have the same problem, help please :( im not any good with computers so don’t tell me to delete folder dll. or wtf :p

    By moo on Feb 19, 2008

  15. omgosh you guys rock :)

    By sara on Feb 21, 2008

  16. thanks..people..it works..peace from Bosnia & Herzegovina..

    By Admir_Bosnia on Feb 23, 2008

  17. if u get a virusheat system alert at the clock!

    go to c:\WINDOWS\System32 and look for a file named eeioq.dll
    or search for it using the search tool.
    if u find it look at the step i wrote earlier.

    By Jcl on Feb 24, 2008

  18. followed all removal steps. its all gone except for the tray icon. i haven’t found any of the .dll files you guys referred to. each file has been searched for in the system32 folder to no avail. any other solutions?

    By aG on Feb 26, 2008

  19. They can’t help. Apparently nobody, even if you pay for good spyware programs, can help with this. Unreal.

    By Jas on Feb 27, 2008

  20. So….. you do everything above, fine. Gets rid of the major annoyance. BUT, you still have a flashing icon in the corner. Click it (right click even) and you go straight to the Virus Heat website. BULLSHIT

    By Jas on Feb 27, 2008

  21. I did not find “eeioq.dll”, but I did find and remove (by changing the name, rebooting in safe mode, and deleting) a file called “C:\WINDOWS\System32\wbchha.dll”. That got rid of the icon in the system tray.

    By JEL on Feb 27, 2008

  22. Yes - excellent! I had found a bad dll file using instructions from another site, but could not unlink or delete the file. Renaming and restarting worked like a charm. To work for more folks, your list of infected dll files from VirusHeat needs to be expanded (my infected dll was wbchha.dll):
    iinqyl.dll
    wuuawkz.dll
    eeioq.dll
    wbchha.dll
    heuvth.dll
    xskmoqx.dll
    txdkfh.dll

    Thanks!

    By Kathleen on Mar 2, 2008

  23. I tried everything listed above. Searched high and low for all the aforementioned files and couldn’t find anything. I found and deleted the Netproject folder, but did not find wbchha.dll nor eeioq.dll. That icon is still there looking at me now… what to do? What to do? Help!

    By TheKiD on Mar 3, 2008

  24. hello i’m Fadhil. Virusheat affects a little bit my computer. However i think i succeded removing this VIRUS but… a stupid TRAYICON i can’t get rid of it! clicking left or right takes me on a site that puts me to download the VIRUSHEAT. Can u help me get rid of this problem please?

    By fadhil on Mar 4, 2008

  25. uauuu. It so difficult to do it. Guys, may be be every time this file has different name. If you know the exact time when you were infected find which file is modified in the ’system32′ folder. Than you must delete it. I had ‘wksqyc.dll’ or like that. I use the ‘unlocker’ program to delete, so don’t need to restart in ’save mode’. regards from Bulgaria

    By Vassil on Mar 4, 2008

  26. Deleting the c:\windows\system32\wbchha.dll file was what worked for me too.

    By SuperDave on Mar 4, 2008

  27. couldnt find anything listed above so i assume thats a good thing.. i uninstalled the virusheat through the control panel, and im searching for eeioq wbchhaz iinqyl and wuuawkz as i speak but i cant seem to find any of it but the icon still remains…

    By jin on Mar 4, 2008

  28. First of all; thank you all very much for the posts… it really helped!
    I looked in system32 and pressed the “sort after last modified” then i could see the recent files that were modified, and then i changed/renamed the file to badfile.txt restarted and deleted the file. it worked perfectly!

    Greetings from Denmark

    By Nino on Mar 6, 2008

  29. well im still looking to get rid of the icon.. been looking nonstop for quite a while now… ive switched accoutns on the computer and what made sense on the first account changed into a whole chain of gibberish.. ill write here so you can see.
    “Q{qvgo”Cngpv#”
    ]w}-zkc.fo}.jkzkmzki.o,`{clk|.ah.omzgxk.}~wyo|k.o~~bg,ozga`}zfoz.cow.gc~omz.zfk.~k|ha|co`mk.ah.wa{l.mac~czkl
    .mbgme.zfk.gma`za.ikz.|gi.ah.{`yo.zkjbaoja`i.o`,{~#za#jozk.o`zg)~wyo|k.}ab{zga

    this is exactly what i see. ive narrowed the search down with a few leads because my security is asking me to attach something called C:/programfiles/netproject.sbmdl.dll and im constantly saying no.. however while searching i cant find netproject folder nor sbmdl.dll..

    im getting desparate.. email is jsfoamy425@gmail.com im sure there is a manual way to get rid of this thing like you guys.

    By jin on Mar 6, 2008

  30. delete the c:\windows\system32\lruvqvw.dll file to get rid the tray icon

    By mrX on Mar 6, 2008

  31. I FOUND A WAY TO REMOVE VIRUSHEAT FROM SYSTEM TRAY…
    NO NEED
    ACTUALLY THIS VIRUS SEEN, ANY ONE OF FOLLOWING NAMES.
    VIRUSHEAT.EXE
    WBCHHA.DLL
    EEIOQ.DLL
    HEUVTH.DLL
    LRUVQVW.DLL
    XSKMOQX.DLL
    USUALLY THIS VIRUSHEAT VIRUSES ARE SITTING AT C:\WINDOWS\SYSTEM32\….
    TO REMOVE THIS VIRUS FOLLOW THESE STEPS..

    1.FIND THE VIRUS FILE. [U CAN FIND IT WITH THE HELP OF SPYHUNTER FREE VERSION. BUT, SPYHUNTER FREE VERSION WONT REMOVE VIRUS]

    2.U CANT REMOVE THE VIRUS WHILE IT WAS RUNNING. SO, CORRUPT THE FILE.

    3.HOW TO CORRUPT?

    3a.RIGHT CLICK THE FILE.
    3b.SELECT THE PROPERTIES.
    3c.RENAME THE FILE.
    3d.RENAME THE FILE EXTENSION NAME[i.e. .TXT]
    3e.IN ATTRIBUTES BOX CLICK READ ONLY BOX. AND
    ALSO REMOVE THE TICK FROM ARCHIEVE BOX.
    THUS, THE .DLL FILE WILL CORRUPT.
    4.EVEN NOW, U CAN’T REMOVE THE VIRUS.
    BECOZ THAT PROGRAM IS STILL RUNNING. JUST RESTART YOUR COMPUTER.
    5.NOW YOU CAN’T SEE THE VIRUSHEAT ICON IN SYSTEM TRAY.
    6.NOW U CAN DELETE/SHRED THE FILE.
    DONT FORGETTTTT TO EMPTY UR RECYCLE BIN.

    By DR.RAM on Mar 8, 2008

  32. Hi there.
    I did everything listet above.
    But the warnings are still popping up and the fuckin icon is still there.
    But! Important! I could not find any DLL listet above! Please help me:
    mail: elias.list@gmx.net
    msn: elias.lsit@gmx.net
    skype: hippie1abc
    icq/qip: 379-885-712

    By Elias Jonathan List on Mar 9, 2008

  33. delete the c:\windows\system32\lruvqvw.dll file to get rid the tray icon…i did the same it worked…
    jus change the extension to.txt nd delete it after estarting..

    By rushabh shah on Mar 10, 2008

  34. another file to look for is guadq.dll in the c:/windows/system32 directory. Corrupting the file is a very good way of getting rid of this file. Also, go into the registry and search for the dll to delete the registry entry so that it doesn’t try to start the process again upon reboot.

    By tonio s. on Mar 12, 2008

  35. Hi there,
    I could not find any *.dll files mention above at \WINDOWS\System32, so the icon is still appeared with the “the system alert”. Although I have erased netproject folder and the virusheat. Then I try another way, searching “*.dll files” mentioned in this site, then searching “netproject” and “virusheat” in the registry. (Using run regedit) Delete all of them and then reboot your computer. After working for more than 8 hours, everything back to normal.
    Don Famy - Bandarlampung Indonesia

    By Don Famy on Mar 14, 2008

  36. just click on control panel-taskbar and start menus-click customize button by hide inactive icons and select always hide this icon…problem resolved…optical only

    By joe on Mar 16, 2008

  37. I had to remove jdxah.dll which is one of the files mentioned at http://www.xp-vista.com/spyware-removal/virusheat-removal-instructions

    I was infected with virusheat version 4.3

    By alw on Mar 17, 2008

  38. Thank you alw for including the dll that fixed yours. After searching through all the whole thread and trying everything to get rid of the annoying icon the jdxah.dll finally did it.

    Thanks

    By pbh on Mar 19, 2008

  39. cant get rid of the icon . none of the dll files listed here are in my system 32 box. No modified day I was infected. Help! Please

    By adi on Mar 20, 2008

  40. Thanks for the help everybody. I went about it backassward but I think it’s gone. I have Windows XP and used the “Search” feature. I got rid of the virusheat stuff but still had the icon. Searched for “.dll” on the harddrive and modified the search to look for things from today (I got this damn thing earlier today.) It found 3.

    kdfapi.dll
    kdfhok.dll
    lvhjtsa.dll

    I was able to delete the first 2 no problem but I had to re-name the 3rd file as mentioned above. Restarted and that flashing bastard was gone!

    I hope the person who made this gets a virus of their own. Maybe herpes…

    By Tom on Mar 23, 2008

  41. look for a DLL that has no company on its properties, I had the same problem and I couldn’d find the DLL’s mentioned above, just look in the SYSTEM32 folder and rename what you think is suspicious and restart the machine.

    By mark yap on Mar 25, 2008

  42. Here’s another version, I removed the systray icon by sorting system32 folder by last modified also, and found sozctue.dll, once renamed, (I just added “badfile” in front of it) the systray icon didn’t come back up. Good Luck, and thanks for all your posts/help.

    By JohnD on Mar 30, 2008

  43. Like JohnD did, I also sorted the system32 files by modified date, and found dcggain.dll as the most current modified file, which is one of the culprits of all this mess :P

    By Aay on Apr 4, 2008

  44. “dcggain.dll” was the culprit for me. couldn’t delete it as it was in use. when I renamed it the flashing notifications area icon changed shaped immediately. rebooted, trashed it, icon is now gone.

    By Anthony on Apr 4, 2008

  45. To finally get rid of that icon I used Windows Explorer to search all .dll files in Windows\System32 and then sorted them by date modified. “dcggain.dll” showed as the only likely candidate and internet search on that filename showed to to be malicious. I changed the file suffix to “.bad” and have left it to rot. So far so good.

    By James on Apr 7, 2008

  46. This stupid product uses a differnt name each time. I searched all of those DLL’s registry file system root kits and nothing…. after some trial and error i found yet another DLL…

    dcggain.dll

    went to system32
    looked at the file modified latest,
    renamed it. instantly the icon in the systray changed to blank white icon but still flashing meaning it is memory still, but more importantly i found the dll.
    Rebooted, the icon in the sys tray was gone, deleted the renamed file no problems since..

    By Matt on Apr 9, 2008

  47. Having trouble deleting dcgain but I am betting that this program creates a different dll file every day to make it hard for us, but easy for them

    By Brian on Apr 12, 2008

  48. I was able to finally delete the icon in the system tray by looking for the last modified .dll in system32. The biggest mistake people are making is to look for a specific file name. If you follow this advice you will get rid of the annoying icon. I would also add that it would be a good idea to delete all references in your registry of netproject, which seems related to this. Then delete the folder c:\program files\netproject. Also delete all registry references to virusheat.

    By Chuck on Apr 13, 2008

  49. so if it’s infected it will not let u delete it….right?

    By Larry on Apr 21, 2008

  50. Another file to look for is bubbj.dll in system32.

    By TK5 on Apr 21, 2008

  51. I wasn’t able to find any of the above .dll names, but I sitll had that stupid systray icon. What I did was view \system32 folder according to modified date, disabled the .dll that was dated closest to when the problems started. It worked! Mine was named vualf.dll. Try this

    By andelou on Apr 25, 2008

  52. look for zfaiqwr.dll as well

    By Nishant on Apr 25, 2008

  53. I have the message in the bottem right where the clock is. i cant read it but, i have followed the instructions but could not find any of the files mentioned. what should i do?

    By Hobbson on Apr 26, 2008

  54. I checked the last modified .dll in \system32 by typing the file name into google.com. There was a long list of malware reports on it. I renamed it using .txt (with a a little difficulty) and the ‘System Alert’ disappeared almost instantly.FYI: the file name was “zfaiqwr.dll”.

    By Ralph on Apr 27, 2008

  55. Thanks!!! Everybody for your help….
    Took long time to get rid of this f**king virusheat alert. I also wanna add here for people who r a bit dump like me. As at first I can,t find the infected .dll file from the name given here. Easiest way goto Search > then select files & folder > type *.dll > click on when modified > u may select past month > start search > among all .dll file what comes under C:\windows\system32 are sus[ecious file > now delete as told by all experts above. Thanks

    By Vasu on Apr 29, 2008

  56. cheers guys you are all legends!!!!!

    By big c on Apr 30, 2008

  57. Got another one to add to the list: qdsba.dll. Thank you so much, by the way! I’d only gotten so far as still having that fraggin’ icon, until after reading the comments I realized that I need ed to search by “Date Modified.” It was the only .dll file that had been modified in the past week , so once I knew how to look, it was quite simple! THANK YOU!

    By Celidah on May 5, 2008

  58. Had the same problem: All obvious VirusHeat, etc. files removed (VirusHeat.exe, netproject folder, etc.) but icon still blinking. Searched for all *.dll’s mentioned here - nothing. Then - absolutely desperate - I did what’s already mentioned here: I looked in C:\Windows\System32 for the most recently changed dll file. There most recent one changed on 4th, may 2008. My symptoms started yesterday 6th, may 2008. Yet I gave it a try and renamed it - Bingo!!! The taskbar icon changed it’s looks immediately. Rebooted - icon’s gone. Don’t delete it yet!!! Do a Start-Regedit and search for this dll as it must have been loaded somewhere in the registry - and yes: it’s there - deleted registry entry, deleted dll file - rebooted once more - CLEAN!!! Good luck everyone with this annoying tray icon! (btw. mine was called rtmipr.dll - so yes it mutes it’s name quite rapidly - so only stick to the change date, not to the name!!)

    By scoobievie on May 7, 2008

  59. “dcggain.dll” was the currupt for me. I delete this file from(run>>regedit\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    reboot the PC and the icon go the fuckkkk.Thanks for all.

    By Yavor on May 9, 2008

  60. TK5 had to resort to your suggestion and it worked great, mine was rtmipr.dll

    Thx everyone.

    By Doctor on May 10, 2008

Post a Comment

*
To prove you're a person (not a spam script), type the security word shown in the picture.
Anti-Spam Image