Remove Joex. Description and removal instructions

Title: Joex
Type: Trojans	Severity scale: (47 / 100)

Joex is a trojan that changes Internet Explorer default start page to a web site on the joyiex.com domain, disables the Windows Task Manager and modifies certain system settings. The parasite has the ability to update itself via the Internet. Once executed, Joex creates viral files and modifies the registry, so that it runs on every Windows startup and every time the user opens a text file.

FORUM:
Discuss Joex in
spyware removal forum

Joex properties:
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Joex removal:

remover for Joex

Joex manual removal:

Kill processes:
svohost.exe, ctfnom.exe, lsasa.exe, commamd.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ctfnom.exe=%Windir%\svohost.exe
HKEY_CLASSES_ROOT\txtfile\shell\open\command=%System%\lsasa.exe %1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell=explorer.exe commamd.exe
HKEY_CURRENT_USER\Software\Policies\Internet Explorer\ControlPanel\HomePage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr=1

HELP:
how to remove registry entries

Delete files:
svohost.exe, ctfnom.exe, lsasa.exe, commamd.exe

HELP:
how to remove harmful files

Misc:
Exact file location:
svohost.exe, ctfnom.exe - C:\Windows or C:\Winnt
lsasa.exe,commamd.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32

Other programs to remove Joex:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 04/08/05
Information updated: 06/09/05

Additional resources related to Joex:

Attention: If you know or you have a website or page about Joex removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Joex parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.