How to Repair an Access Virus

The Access virus can run up your Internet bill.

The Access virus, also called Instant Access, is a virus that uses your modem to dial premium rate phone numbers. In addition to costing you money, the Access virus downloads and generates unsolicited pop-up advertisements, slows your computer and decreases available memory. Most people acquire the Access virus after visiting a malicious website. Note that the steps to remove the Access virus presented in this article apply to the Windows 7 and Vista operating systems.

Instructions

Kill Processes

1. Press "Ctrl" + "Shift" + "Escape" to open the Task Manager.

2. Click on the "Processes" tab of the Task Manager and then click on "Show Processes From All Users."

3. Right-click on "exedialer.exe" (located under the "Image Name" heading) and select "End Process."

4. Right-click on "instant access.exe" (located under the "Image Name" heading) and select "End Process."

5. Close the Task Manager.

Delete Registry Values

1. Click on the "Start" menu and type "regedit" into the "Search" line and press "Enter." The Registry Editor opens.

2. Delete each of the following registry values from the left pane of the Registry Editor. To delete a registry value, right-click on it and select "Delete." Note that deleting the wrong registry value can cause system-wide errors.

   HKEY_USERS\.DEFAULT\Software\EGDHTML

   HKEY_CLASSES_ROOT\EGCOMLIB2.EGComLibrary2

   HKEY_CLASSES_ROOT\EGCOMLIB2.EGComLibrary2.1

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGDHTML.EGDialHTML

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGDHTML.EGDialHTML.1

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGDialObject.EGDial

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGDialObject.EGDial.1

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGHTMLDialer.HTMLDialer

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGHTMLDialer.HTMLDialer.1

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ABE804B-4D3A-41BF-A172-304627874B45}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{94742E3F-D9A1-4780-9A87-2FFA43655DA2}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A02780C3-7F77-4E28-855B-28890F3CF37A}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B843DA96-2B2D-447E-90AB-B92929AA11AF}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2F668A6D-2EC7-4E3A-A485-819E210738D6}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62BFAEC2-82A5-4117-A98B-FEA89413D924}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{81C2F7F3-F930-455E-9AA5-0876D387C787}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{7699AEF9-F83A-44FA-B374-AA02CEDF247D}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{83F0D6AA-CD15-46B5-AA4E-BDB506B4AE53}

3. Close the Registry Editor.

Delete Files and Directories

1. Click on the "Start" menu and then click on the "Search" line.

2. Search for and delete each of the following files and directories. To delete a file or directory, right-click on the file and select "Delete."

   exedialer.exe

   instant access.exe

   egcomlib2.dll

   egdhtml_[XVS].dll

   egdial.dll

   mseggrpid.dll

   C:\Program Files\Instant Access

3. Restart your computer.

References

• 2-Spyware: Remove Instant Access