VirusHeat antispyware is a virus. How to remove Virus Heat

Virus Heat is a rogue spyware which masquerades as an anti-spyware program.

Many similar Viruses/Spyware exist which act like they are some antivirus and force you to download.

---

VirusHeat Manual Removal Instructions

To learn the VirusHeat manual removal process, read the step-by-step instructions provided on this section.

Use Caution! Please read the instructions below carefully. Manual removal of VirusHeat is a delicate procedure. Proceed at your own risk.

Make sure you backup your system and close all open Internet Explorer windows before you manually remove VirusHeat.

To manually remove VirusHeat, follow these removal steps:

Step #1: How to Kill VirusHeat files using Process Explorer.

• 1a. How to Kill VirusHeat processes.
  1. Download and install Process Explorer.

  2. Open Process Explorer.

  3. Locate the VirusHeat processes listed below.

  4. To kill an VirusHeat process, right-click the VirusHeat process and choose the option “Kill Process Tree”.

  5. Kill the following VirusHeat processes:
     VirusHeat 3.9.exe
     
• 1b. How to Kill VirusHeat DLL files.
  1. Right-click the Explorer.exe process and choose the option “Properties”.

  2. Click on the “Threads” Tab, locate and highlight the VirusHeat DLL files listed below.

  3. To kill VirusHeat DLL files, click the “Kill” button.

  4. Kill the following VirusHeat DLL files:
     wuuawkz.dll
     iinqyl.dll
     

• Step #3: How to Delete VirusHeat Directories.
  1. To locate VirusHeat directories, go to “Start” > “My Computer” > “Local Disk (C:)” > “Program Files” > “Show the contents of this folder”.

  2. Search and delete the VirusHeat directories listed below.

  3. Right-click on the VirusHeat folder and select “Delete”. option.

  4. When the message box appears saying “Are you sure you want to remove the folder [FOLDERNAME] and move all its contents to the Recycle Bin?”, click the “Yes” button.

  5. When the message box appears saying “Renaming, moving or deleting [FOLDERNAME] could make some programs not work. Are you sure you want to do this?”, click the “Yes” button.

  6. Search and delete the following VirusHeat directories:

     VirusHeat

• Step #4: How to Search and Delete C:\WINDOWS\System32\iinqyl.dll.
  1. Go back to “Local Disk (C:)” > “Windows” > “System32″ > “Show the contents of this folder”.

  2. Search for iinqyl.dll.

  3. Right-click on the iinqyl.dll file and select the “Delete” option.

• Step #5: How to Restore Original Default Home Page.
  1. Go to “Start” > “Control Panel” > “Internet Options”.

  2. Click on the General Tab > click the Use Default button under Home Page.

  3. Click “Apply” and then click the “OK” button.

  4. Open a Web browser to verify that your default homepage has been restored.

Step #6: How to Remove the VirusHeat Icons.

1. If the VirusHeat icons still remain on your Desktop, you can drag and drop them to the “Recycle Bin”.

2. Reboot your computer to make sure all changes made for the removal of VirusHeat are complete. If your computer still has issues, you should scan your computer for VirusHeat with a spyware scanner.

---

---

Do not believe any of the fake information posted on their website :

Don't compromise your security! Protect yourself with VirusHeat!(In fact, you completely destroy your computer's security by installing this)

VirusHeat is the latest and the most technologically advanced application on the Internet for detection and removal of potentially undesired items. VirusHeat simply guarantees removal of all spyware and related harmful infections from your PC with supported live service.

• Recommended by experts and editors around the world as one of the best Anti-Spyware.
• Frequent advanced updates ensure that you are always protected.
• Detects, removes and blocks all types of Spyware and Adware threats.
• Easiest to use with intelligent protection system.
• FREE customer support for all users.
• 100% Money Back Guarantee.

Detects, removes and blocks all types of Spyware.

Did you know that numerous programs tested against VirusHeat detected only small fraction of Spyware and completely removed an even smaller amount? Also most of them were unable to effectively block Spyware in real time from being installed on users PC in the first place.

VirusHeat has the most advanced update feature that continually improves its Spyware fighting capabilities on daily basis. As Spyware gets more complex to avoid detection by AntiSpyware programs VirusHeat responds with new technology to stay one step ahead.

Easiest to Use

VirusHeat is advanced technology designed specially for people, not experts. It is automatically configured out of the box to give you optimal protection with limited interaction so all you need to do is install it for immediate and ongoing protection.

VirusHeat's advanced ActiveGuard technology only alerts users on a true Spyware detection. This is significant because you should not be interrupted by cryptic questions every time you install software, add a site to your favorites or change your PC settings. Such messages can be confusing and lead to undesirable outcomes such as inoperable programs, lost favorites or even Spyware being allowed to install on the system. We've done the research so you don't have to.

The Danger

• Authorities State That Over 95% Of PC Systems Worldwide Are Infected With All Forms Of Virus activity.
• Malware On Your PC are Undetectable For Regular Firewalls And Antiviruses.
• These malicious programs are downloaded to an unsuspecting user's computer and are used to retrieve sensitive data.
• Spyware, Adware and other Viruses are the world's leading threats to your computer's security today.

VirusHeat was designed for one purpose, to remove viruses and potentially unwanted computer applications from your system.

That was the end of the fake absolutely preposterous information provided on their utterly fake website. Don't fall for their tricks. Many advanced manual techniques have to be used to remove such Just in case you are infected with this virus, see the removal instructions at the top.

Did any of you get a virus that said :
http://www.fundazone.com/2007/06/how-to-remove-use-internet-explorer-you-dope-i-dnt-hate-mozilla-but-use-ier-or-else-svchostexe-heap41a-virus/


"ORKUT IS BANNED,Orkut is banned you fool`,The administrators didnt write this program guess who did??`r`r MUHAHAHA!!"

"USE INTERNET EXPLORER YOU DOPE,I DNT HATE MOZILLA BUT USE IE `r OR ELSE…”

It is a virus that blocks orkut, youtube and firefox. Don't worry

Here is the cure to remove that virus

http://www.fundazone.com/2007/06/how-to-remove-use-internet-explorer-you-dope-i-dnt-hate-mozilla-but-use-ier-or-else-svchostexe-heap41a-virus/

“USE INTERNET EXPLORER YOU DOPE,I DNT HATE MOZILLA BUT USE IE `r OR ELSE…”

Another virus which wants to waste my time. I didn’t think hackers would write a virus to attack firefox. Anyway, I used Internet Explorer (IE means Internet Explorer) and typed in www.orkut.com

Yet another message “ORKUT IS BANNED,Orkut is banned you fool`,The administrators didnt write this program guess who did??`r`r MUHAHAHA!!”

What about www.youtube.com ? That is banned too !!!

It’s just a worm, a virus or a trojan or whatever malicious hacker or craker program or script it is. Wrtitten is VBScript programming labguage by a crazy rascal who deserves to rot in his/her grave for disabling Firefox of all softwares !

How to remove the Orkut and Firefox and Youtube banning virus ?

Simple.

• First press Control-Alt-Delete (Ctrl-Alt-Del is called the three finger exercise in Windows)

• There Click Processes , then click User Name to arrange according to users.

• Now, look for svchost.exe run by User name “user” or “admin” or “your computer name” There will be two of them. Right click and end both the svchost.exe processes where the User Name is NOT “SYSTEM” or “NETWORK SERVICE” or “LOCAL SERVICE” Only where the user name is “USER” or “ADMIN” or “ADMINISTRATOR” or “your name”
• Next Click Start > Run > Type cmd in the box and press enter (Just get the Command Prompt of DOS - C:\windows\system32\cmd.exe)
• There in the black Command Line, type “ cd \ ” and press Enter
• It has to change to C:\>
• Next, type attrib -s -r -h heap41a /s /d and press Enter
• Then Open C: on My computer and delete the folder heap41a ie C:\heap41a
• Then remove C:\heap41a\svchost.exe shortcut from C:\Documents and Settings\USER\Start Menu\Programs\Startup (Or Start > All Programs >Startup)
• That’s all
• Then clean the pen drive

PFW.pif virus or worm or trojan pfw.exe

PFW.pif was a hidden file I first saw in a pen drive (also variously called flash drive to thumb drive to thumbnail drive)

Anyway the hidden file is labelled as an MSDOS shortcut but it is a trojan or worm or virus or whatever.

How does PFW .pif spread ?
It has an autorun.inf file also in the root folder of the pen drive.

How do you remove it ...

If you have AVG free edition 7.5 installed and have the latest virus definitions, it is more than enough.

I'm not sure about Norton but if it is not updated, I guarantee that it will NOT catch this virus.

Manually remove the virus if you can !

1. Right click and Open Pen Drive (Autoplay will run the virus - Don't double click)
   
2. Delete Pfw.pif and autorun.inf from the pen drive
   
3. Press Alt-Ctrl-Del End PFW.pif
   
4. Tools> Folder options> View hidden files
5. Delete C:\windows\system32\pfw.exe (it's a hidden file)
   
6. Registry Go to > HKCU>Sofrware>Microsoft>Windows>Current version>Explorer>Mountpoints2>(crazy names)>Shell>
   
1. Make backup of registry
2. Delete the Subkeys Shell which have Autoplay as default value (I'll explain this in detail later)
3. http://www.johndasfundas.blogspot.com