Remove Havedo. Description and removal instructions

Title: Havedo
Type: Trojans	Severity scale: (53 / 100)

Havedo is a trojan that attempts to corrupt Microsoft Visual FoxPro databases or other related data. Once executed, it overwrites default command prompt tool cmd.exe located in the system directory (C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32) with a fake copy, installs its files into the main Windows folder (C:\Windows or C:\Winnt) and registers itself in the registry as a browser helper object. Havedo modifies essential system settings to hide its files. It spreads in infected executables via removable disks. Havedo runs on every system startup and secretly works in background.

FORUM:
Discuss Havedo in
spyware removal forum

Havedo properties:
• Hides from the user
• Stays resident in background

Automatic Havedo removal:

remover for Havedo

Havedo manual removal:

Kill processes:
cmd.exe, project.pjx.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\Software\Microsoft\Havedo
HKEY_LOCAL_MACHINE\Software\Classes\iexplorex.IEHelper\CLSID\(Default)={37125E31-AD55-4F7B-BF6F-A17A20953945}
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37125E31-AD55-4F7B-BF6F-A17A20953945}\InprocServer32\(Default)=%Windir%\iexplorex.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue=0

HELP:
how to remove registry entries

Delete files:
cmd.exe, project.pjx.exe, iexplorex.dll, cmd.lnd

HELP:
how to remove harmful files

Other programs to remove Havedo:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 07/07/05
Information updated: 07/07/05

Additional resources related to Havedo:

Attention: If you know or you have a website or page about Havedo removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Havedo parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.