Remove Fivesec. Description and removal instructions

Title: Fivesec
Type: Trojans	Severity scale: (55 / 100)

Fivesec is a trojan that turns the compromised computer into a spam relay. Once executed, the parasite secretly installs itself to the system. It injects malicious code into legitimate processes in order to hide its presence and activity. Then the trojan downloads available updates and the list of spam recipients. After a while, Fivesec starts sending out spam e-mails from the compromised computer using own mail engine. The parasite is able to bypass the Windows Firewall. It runs on every Windows startup.

FORUM:
Discuss Fivesec in
spyware removal forum

Fivesec properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Fivesec removal:

remover for Fivesec

Fivesec manual removal:

Kill processes:
spoolsvv.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spoolsvv

HELP:
how to remove registry entries

Delete files:
spoolsvv.exe, comdlj32.dll

HELP:
how to remove harmful files

Misc:
Exact file location:
comdlj32.dll - C:\Windows or C:\Winnt
spoolsvv.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32

Other programs to remove Fivesec:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 02/06/06
Information updated: 25/09/06

Additional resources related to Fivesec:

Attention: If you know or you have a website or page about Fivesec removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Fivesec parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Comments from visitors:

1. by Guest. 2006-09-25 02:09:09

after removal, the files reappear:
spoolsvv.exe
comdlj32.dll

what program/process is reinstalling them?

if the source program/process cannot not be identified, it is suggested
that dummy files of the same name be created and made 'read only'