http://www.411-spyware.com/remove-virusheat 411-Spyware.com Sun, 22 Nov 2009 20:58:11 -0600 http://wordpress.org/?v=2.8.5 hourly 1 http://www.411-spyware.com/remove-virusheat/comment-page-1#comment-26137 chris Fri, 09 May 2008 06:30:23 +0000 http://www.411-spyware.com/remove-virusheat#comment-26137 Ok. This is how I fixed a computer infected with VirusHeat (VH). 1) I ran many anti-spyware programs - starting with AVG’s free version. This took care of everything except the blinking tray icon and IE loading the VH website. 2) I found a program that enables users to see what “threads” are running under an EXE file, more specifically, the explorer.exe. I used the GeekSquad MRI, but you can also use something like “Process Explorer.” Just Google it. I then noticed there was only one file that was not signed my microsoft, it was called: rtmipr.dll. It was in the windows\system32\ directory, and a file size of ~13kb. This file name was not listed under any other guides for removing VH, so I hope this helps solve the mystery file issue. 3) Download a program called “Unlocker,” this will allow you to kill the thread. Once you kill the thread, delete the file promptly. This worked for me, I hope it works for you. Good luck. Oh, and if it does work or you have a question, you may email me at: chris@ab-wd.com. Cheers! Ok. This is how I fixed a computer infected with VirusHeat (VH). 1) I ran many anti-spyware programs – starting with AVG’s free version. This took care of everything except the blinking tray icon and IE loading the VH website. 2) I found a program that enables users to see what “threads” are running under an EXE file, more specifically, the explorer.exe. I used the GeekSquad MRI, but you can also use something like “Process Explorer.” Just Google it. I then noticed there was only one file that was not signed my microsoft, it was called: rtmipr.dll. It was in the windows\system32\ directory, and a file size of ~13kb. This file name was not listed under any other guides for removing VH, so I hope this helps solve the mystery file issue. 3) Download a program called “Unlocker,” this will allow you to kill the thread. Once you kill the thread, delete the file promptly. This worked for me, I hope it works for you. Good luck. Oh, and if it does work or you have a question, you may email me at: chris@ab-wd.com. Cheers!

]]> http://www.411-spyware.com/remove-virusheat/comment-page-1#comment-24353 Chris, at 411 Spyware Fri, 18 Apr 2008 22:24:55 +0000 http://www.411-spyware.com/remove-virusheat#comment-24353 Thanks, Len. Updated the post with your VirusHeat DLL. Thanks, Len. Updated the post with your VirusHeat DLL.

]]> http://www.411-spyware.com/remove-virusheat/comment-page-1#comment-24336 Len Henson Fri, 18 Apr 2008 12:29:38 +0000 http://www.411-spyware.com/remove-virusheat#comment-24336 Additional dll called "BUBBJ.DLL" in system32 folder now identified as part of "VirusHeat 4" by Nod32 ver 3.0. Additional dll called “BUBBJ.DLL” in system32 folder now identified as part of “VirusHeat 4″ by Nod32 ver 3.0.

]]> http://www.411-spyware.com/remove-virusheat/comment-page-1#comment-23879 Shirley Smith Thu, 03 Apr 2008 00:18:37 +0000 http://www.411-spyware.com/remove-virusheat#comment-23879 how often should I check for virus Heat infection. how often should I check for virus Heat infection.

]]> http://www.411-spyware.com/remove-virusheat/comment-page-1#comment-23878 Shirley Smith Thu, 03 Apr 2008 00:10:31 +0000 http://www.411-spyware.com/remove-virusheat#comment-23878 Virus Heat and Spyware has been very information for me and fixed the the problems that I were having. Virus Heat and Spyware has been very information for me and fixed the the problems that I were having.

]]>