How to Repair After a Fake Flash Virus

The Fake Flash virus slows your computer to a crawl.

The Fake Flash virus appears in the form of a pop-up message when you click on a video. The pop-up message states that "You must download the new version of Macromedia Flash Player to play this video." Unfortunately, clicking download will result in the Fake Flash virus downloading onto your computer. This will cause your computer to slow considerably and restart without your consent. Additionally, the Fake Flash virus may change your system settings. Follow the steps in this article to repair your computer after it has become infected with a Fake Flash virus.

Instructions

Stop Malicious Processes

1. Press Ctrl, Shift and Esc or Ctrl, Alt and Delete to open the Windows Task Manager.

2. Click the "Processes" tab.

3. Click "Show Processes From All Users." A list of processes appears under the "Image Name" heading.

4. Stop each of the following malicious processes. To stop a process, click on the process and then click the "End Process" button.

   nvctrl.exe

   msmsgs.exe

   ictun.exe

   icthis.exe

   icmntr.exe

   isfun.exe

   isfmntr.exe

   isfmm.exe

   icun.exe

   G2-tmp.exe

   G5-tmp.exe

   sbmdl.dll

   sbmntr.exe

   sbsm.exe

   sbun.exe

   scit.exe

   scm.exe

   scu.exe

   uninst.exe

   waun.exe

   laf1.exe

   antiviirus.exe

   xbaqktfv.exe

5. Close the Windows Task Manager.

Unregister Malicious DLLs

1. Click "Start" and type "cmd" into the "Search" box.

2. Double click "cmd" in the "Results List." The Command Prompt opens.

3. Type the following commands into the Command Prompt. Press Enter after each command.

   Regscr32 /u dtjby.dll

   Regscr32 /u uimcu.dll

   Regscr32 /u antzozc.dll

   Regscr32 /u jrpkmgh.dll

   Regscr32 /u isfmdl.dll

   Regscr32 /u ictmdl.dll

   Regscr32 /u nczupfw.dll

   Regscr32 /u dfrep.dll

   Regscr32 /u Trojan.Zlob|eulbn.dll

   Regscr32 /u werbetpwg.dll

   Regscr32 /u sysdivx.dll

   Regscr32 /u vipextnog.dll

   Regscr32 /u werbetlrw.dll

   Regscr32 /u vipextgpk.dll

   Regscr32 /u werbettxf.dll

   Regscr32 /u vipextpxm.dll

   Regscr32 /u wowlze.dll

   Regscr32 /u voipwet.dll

   Regscr32 /u hdtip.dll

   Regscr32 /u fsehfcu.dll

   Regscr32 /u 527631.dll

   Regscr32 /u wxdbpfvo.dll

   Regscr32 /u rtmipr.dll

   Regscr32 /u 834668.dll

   Regscr32 /u qvlbodmnlks.dll

   Regscr32 /u gndarmblaor.dll

   Regscr32 /u tdomgafw.dll

   Regscr32 /u wetkadmr.dll

   Regscr32 /u qvlbodmnbof.dll

   Regscr32 /u 158117.dll

   Regscr32 /u gndarmblvpg.dll

   Regscr32 /u fvowketqksn.dll

   Regscr32 /u fvowketqsle.dll

4. Close the Command Prompt.

Delete Malicious Files

1. Click "Start" and then click the "Search" box.

2. Search for and delete each of the following files. To delete a file, right click the file (as it appears in the "Results List") and select "Delete."

   UserProfile\Application Data\Microsoft\Crypto\RSA

   UserProfile\Application Data\Microsoft\Protect

3. Restart your computer.

References

• Faster PC! Clean! Clean!: How to Remove Flash ActiveX Object Error