Blaxe manual removal:
Kill processes:
directx.exe, messenger plus! - setup.exe, update.exe, winbat.exe, wzextract.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\DirectX=%Windir%\directx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\DirectX=%Windir%\directx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinZip\Shell\Open\Command\(Default)=[path to wzextract.exe]
HKEY_CURRENT_USER\Software\Grokster\LocalContent\dir0=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\Grokster\LocalContent\dir1=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\Grokster\LocalContent\dir2=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\iMesh\Client\LocalContent\dir0=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\iMesh\Client\LocalContent\dir1=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\iMesh\Client\LocalContent\dir2=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\KaZaA\LocalContent\dir0=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\KaZaA\LocalContent\dir1=012345:%Windir%\kernell
HKEY_CURRENT_USER\Software\KaZaA\LocalContent\dir2=012345:%Windir%\kernell
Delete files:directx.exe, messenger plus! - setup.exe, update.exe, winbat.exe, wzextract.exe, ftp.bat, windll32.dll
Delete directories:C:\Windows\kernell
C:\Winnt\kernell
Misc:The update.exe executable usually installs the Spybot worm.
Exact file location:
directx.exe, winbat.exe - C:\Windows or C:\Winnt
messenger plus! - setup.exe - C:\Windows\Temp or C:\Winnt\Temp
wzextract.exe - WinZip installation directory
ftp.bat, windll32.dll - C:
Post Comment:
Attention: Use this form only if you have additional information about Blaxe parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.