VirusHeat Removal Guide
Do you know what VirusHeat is?
DESCRIPTION
VirusHeat is a rogue anti-spyware program fresh out of the market of popular rogue anti-spyware programs on the Web. VirusHeat is sure to “heat” up your computer with misleading spyware results, browser hijacks, redirects to unreliable websites and further exposure to other malware threats.
VirusHeat is another version of Virusprotect and VirProtect programs that installs through a Trojan called Zlob. Zlob infects a user’s system through the download of fake audio and video codecs usually found on porn websites.
VirusHeat is designed to display system warning messages stating that your system has detected a number of active spyware applications. VirusHeat offers users to purchase a full version of the program to remove the detected spyware infections. VirusHeat only reports exaggerated scan results to push the user to pull out his/her credit number and spend money on a product that doesn’t promise what it alleges to deliver.
In non-techie terms: Spyware parasites are updated often with different names and versions. In the case of VirusHeat it is a variant of VirProtect, Virusprotect, VirusProtect Pro and VirusProtect 3.8. usually this group of infections originate from an actual Trojan such as Zlob.Trojan. It is always a good practice to verify the correct spelling version of any download program.
Watch ‘Rogue Anti-Spyware Program VirusHeat Attacks Computer’ Video
Turn your speakers ON and press PLAY to listen to the ‘Rogue Anti-Spyware Program VirusHeat Attacks Computer’ video.
VirusHeat Automatic Removal Instructions
This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.
- Download and save SmitFraudFix to your desktop.
- Restart your computer in Safe Mode (how to do safe mode). Once the
desktop appears, double click on the SmitfraudFix.exe on your desktop. - After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
press Enter to delete infect files. - SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
- Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
- SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter. - Reboot your computer to complete the cleaning process.
- After reboot, a Notepad screen may appear containing a log of all the files
removed from your computer. If it doesn’t appear, a file will be created called
rapport.txt in the root of your drive, (Local Disk C:). - Restart your computer in Safe Mode (how to do safe mode).
- Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
click Yes to confirm that you want all the items to go to the Recycle Bin. - Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
you want all the items to go to the Recycle Bin. - Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.
VirusHeat Manual Removal Instructions
This manual removal method is for techie computer users. VirusHeat manual removal may be difficult and time consuming to remove. There’s no guarantee that VirusHeat will be removed completely. So read the VirusHeat removal steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.
- Uninstall VirusHeat Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall VirusHeat if found. - To stop VirusHeat processes (view process removal steps)
Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
Search and stop these VirusHeat processes:
VirusHeat 3.9.exe
VirusHeat 4.4.exe
For each unwanted process, right-click on it and then select “End task”. - To Unregister VirusHeat DLLs (view DLL removal steps)
Search and unregister these VirusHeat DLLs:
bubbj.dll
baoohy.dll
heuvth.dll
wbchha.dll
wuuawkz.dll
qdsba.dll
rkvdr.dll
wcscqa.dll
lruvqvw.dll
eeioq.dll
vualf.dll
lvhjtsa.dll
xskmoqx.dll
txdkfh.dll
iinqyl.dll
To locate the VirusHeat DLL path, go to Start > Search > All Files or Folders. Type VirusHeat and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
Once you have the VirusHeat DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister). - To unregister VirusHeat registry keys (view registry keys removal steps)
Go to Start > Run > type regedit > press OK.
Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
Search and delete these VirusHeat registry keys: - If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
- Remove VirusHeat Directories.
To find VirusHeat directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.Search and delete the following VirusHeat directories:
%ProgramFiles%\VirusHeat 4.3
%ProgramFiles%\VirusHeat 4.4
%ProgramFiles%\VirusHeat 3.9
Right-click on the VirusHeat folder and select Delete.
A message will appear saying ‘Are you sure you want to remove the folder VirusHeat and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting VirusHeat could make some programs not work. Are you sure you want to do this?’, click Yes. - To remove VirusHeat icons on your Desktop, drag and drop them to the Recycle Bin.
You’ve completed the VirusHeat manual removal instructions!
I hope this article has helped you solve your VirusHeat problems. If you want to contribute to this article, post your comment below.
Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that VirusHeat will be completely removed from your computer. Seek professional help if your computer continues to experience problems.
Did You Find this Article Helpful?
Subscribe to Spyware Techie for more!
Or get latest articles to your via email:
gee. thx. since this is so new, my security tools wouldn’t remove virusheat. but smitfraudfix got rid of this trash.
Thanks.
I downloaded the SmithfraudFix tool and now this stupid wuuawkz.dll is clean now.
thankyou.
It is actually better to install the software you are pretty sure in. Especially if we are talking about security software. Personally I have never heard about Virus Heat as about anti-spyware, but have heard about such kind of programs it factially is(i.e. those that pretend being anti-viruses while being viruses…) For protection I recommend using these:
Firewall : Zone Alarm Pro(http://www.zonealarm.com)
Anti-Keylogger: Privacy Keyboard(http://www.anti-keylogger.com)
Anti-Virus: Norton Anti-Virus 2008(http://www.symantec.com/)
Anti-Spyware: Spy Catcher(http://www.tenebril.com/)
It took me a plenty of time to find the software that will be compatible with each other, will have a good reputation and will work perfectly. Haven’t got any problems with my PC after their installation.
Looks like it worked and removed it, Thanks A Lot
Great post Wild Stallion.
I just spent 4 hours fixing my girlfriends computer after she tried downloading porn!
And I though I would be the culprit.. ;o)
I LOVE YOu! lol
Thanks. Was VERY frustrated as neither Spybot or my Avast antivirus could fix it (yet). Did it the manual way and it worked like a charm. Thanks again
Thanks so much for the removal tool. I used the VirusHeat Automatic Removal Instructions and it worked like a charm. That VirusHeat is a nasty one!
This got rid of the virus, but the Zlob trojan horse remains. Any ideas?
To be honest, I didn’t think it was going to work. But it did. (I used the “automatic” method). Thanks a million! Now if only we could track down the cretins behind this scam and figure out an appropriate punishment …
great. yet again the smitfraudfix program works.
thanks.
The SmitFraudFix worked perfcet. Just started in safemode, clicked the icon and chose 2. Everything went fast, and didnt need any further steps. Back to the tunes! Thank you.
I went through the non-techie procedure 5 times. I still have Virusheat harassing me from the taskbar, the Virusheat Security Toolbar 7.1, and puresafetyhere.com/ keeps replacing eopac.nypl.org as my home page.
I redownloaded SmitFraidFix several times to make sure I had the updated version, but still no success. I couldn’t find a local settings folder in my Documents and Settings folder, but aside form that, I did everything more than once. I removed the file with add and remove programs, found it still in the program files folder, deleted it there, deeleted all the temp files. Nothing seems to be working. I don’t want to pay SpyHunter to remove the junk because Wikipedia says SpyHunter gets very poor reviews.
Any auggestions?
Just wanted to say thanks for helping me get rid of this sneaky little bugger, had me worried when Spybot found it, but stopped responding before fixing it, thanks again, if you weren’t more than likely a guy, I could kiss you :P Cheers!!
Even voor de nederlandstalige onder ons. Dit werkt! Gewoon de automatische werkwijze volgen.
It works great, thanks from the Netherlands.
Smitfraudfix is awesome, no messing, and sooooooo easy! forget everything else! use this!!!!
nice tool, thank;s alot.all mya antispyware didn’t do,SmitFraudFix did!
Wow man i just got this virus today.. I was getting scared. I got to the point where it kept shutting down, restarting etc. but after a few tries of the software i downloaded, it eventually worked. Thanks a bunch man. If more people / friends / family get the same thing i’ll send them to here. Aswell as it being very good information, it was easy to follow!
Thanks again.
I could not believe that I fell for the Virus Heat virus. What a pain. Haven’t seen this type of virus in a long time.
I tried the manual method of removal without luck. Out of desperation I download the smitfraudfix program although I was not sure if it wasn’t more spyware or not. Anyways, I had nothing to lose.
It worked. Thank you. I should have used the program at the start of my problem.
SmitFraudFix worked in removing the VirusHeat, but my system keeps crashing/ rebooting every 4 to 6 minutes. Spyware Shield scan alleged that I had 6 trojans and 10 hotkeys hammering my systems. I got all of these treats
from a yahoo/ google search. Will try the recommended trojan-remover.com to see if this helps any. The Internet is full of everyone recommending one spyware remover over the other brands. Confusing for me.
Thanks DocMay
Smitfraudfix kicks ass, sorted out my problems twice :-)
GREAT
your automatic removal worked perfectly !
you saved me !
thank a lot
i wasn’t very sure about this because other sites that i went to were just giant hypocrites about removing virus heat. but it worked out great. took a while to figure out, but still great.
thanks!
This really works great, thanks buddy
Thank you soooo much! this is the first thing that has actually got rid of this virusheat rubbish! thank you thank you thank you!
Superb!
This anti-spyware program really works. I wonder why my old and trustworthy utilities never really catch zlob spywares!
Worked like a treat ty
Great saved me a bunch of time and frustration man! thanks for providing the information and thanks to guy who wrote smitfraudfix program. I removed the spyware from virusheat using the non manual process - again saved time!
Thank you SO much. I’m not sure how virus heat got on my computer but this fixed the problem!
I think I did something wrong. I did steps 1 thru 5. When I rebooted the computer I did it in regular (not safe) mode. When I clicked on SmitFraud it went back to the first page. What did I do wrong? Was I supposed to reboot it with that pop up I got about putting it in regular mode?
worked for me, my son got this crap from youtube…don’t have it anymore
VERY Cool!
Used the Automatic Removal option, restarted in Safe Mode,
worked like a charm!
You ROCK.
Much, much thanks!
-Mike
Excellent solution. I wasn’t sure how reliable this site or solution was. But after reading all the reviews, thought it was worth a gamble - it paid off. Definitely works. I did it through the SmithFraud way as well..
That Smitfraudfix is well wicked blaad.
Thank you…your automatic removal software worked perfectly and removed virusheat. Other commercial spyware tools didn’t seem to do anything!!
this method actually worked. where nearly every anti spyware program i used failed after several tries this method worked so quickly that stupid icon on my system tray is gone finally. thanks for sharing this method