Comments on: VirusHeat

By: chris

chris — Fri, 09 May 2008 06:30:23 +0000

Ok. This is how I fixed a computer infected with VirusHeat (VH). 1) I ran many anti-spyware programs - starting with AVG’s free version. This took care of everything except the blinking tray icon and IE loading the VH website. 2) I found a program that enables users to see what “threads” are running under an EXE file, more specifically, the explorer.exe. I used the GeekSquad MRI, but you can also use something like “Process Explorer.” Just Google it. I then noticed there was only one file that was not signed my microsoft, it was called: rtmipr.dll. It was in the windows\system32\ directory, and a file size of ~13kb. This file name was not listed under any other guides for removing VH, so I hope this helps solve the mystery file issue. 3) Download a program called “Unlocker,” this will allow you to kill the thread. Once you kill the thread, delete the file promptly. This worked for me, I hope it works for you. Good luck. Oh, and if it does work or you have a question, you may email me at: chris@ab-wd.com. Cheers!

By: Chris, at 411 Spyware

Chris, at 411 Spyware — Fri, 18 Apr 2008 22:24:55 +0000

Thanks, Len. Updated the post with your VirusHeat DLL.

By: Len Henson

Len Henson — Fri, 18 Apr 2008 12:29:38 +0000

Additional dll called “BUBBJ.DLL” in system32 folder now identified as part of “VirusHeat 4″ by Nod32 ver 3.0.

By: Shirley Smith

Shirley Smith — Thu, 03 Apr 2008 00:18:37 +0000

how often should I check for virus Heat infection.

By: Shirley Smith

Shirley Smith — Thu, 03 Apr 2008 00:10:31 +0000

Virus Heat and Spyware has been very information for me and fixed the the problems that I were having.