Title: Video ActiveX Object

Type: Malware

Remove Video ActiveX Object. Removal instructions

Severity scale:

(62 / 100)

Video ActiveX Object is a backdoor trojan that masquerades itself as a video codec, but in fact is a malicious parasite that promotes such threats as VirusHeat, Files Secure 2.2, or VirusProtect Pro to remove such fake threats as Networm-i.Virus@fp, Trojan-Spy.Win32@mx and others.

Related files: ncompat.tlb, hp[X].tmp, msvol.tlb, vnp7s.net, zxserv0.com, dumpserv.com

Video ActiveX Object properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Video ActiveX Object removal:

remover for Video ActiveX Object

SpyHunter is recommended remover to uninstall Video ActiveX Object. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Video ActiveX Object using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Video ActiveX Object (2010-06-20 04:44:08)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Video ActiveX Object (2010-06-20 04:44:08)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Video ActiveX Object (2010-06-20 04:44:08)

XoftSpySE Anti Spyware

download | review

Video ActiveX Object manual removal:

FORUM:
Discuss Video ActiveX Object in
spyware removal forum

Kill processes:
dumpserv.com nvctrl.exe icthis.exe ictun.exe waun.exe isfmntr.exe G2-tmp.exe sbmntr.exe sbsm.exe sbun.exe scit.exe scm.exe scu.exe uninst.exe G5-tmp.exe isfun.exe msmsgs.exe

HELP:
how to kill malicious processes

Delete registry values:
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
{ab75cc7d-2751-4144-a278-5462d5a5884c}
{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Online Add-on
{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
NetProject
{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
{a6d478c6-7961-4fe9-be4b-e621dd640112}
Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
10C52A42-DB8B-4ade-AA4A-CED6A8282B85
{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
HKEY_CURRENT_USER\Software\Online Add-on
{aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
{2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
E404.e404mgr.1
{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
{c0ca766d-060c-48e1-b536-205e321bd174}
Microsoft\Windows\CurrentVersion\Uninstall\Web Application
Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
Microsoft\Windows\CurrentVersion\policies\explorer\run\some
BA0BACB5-FC95-451E-94D2-4959AB0949D2
F10587E9-0E47-4CBE-84AE-7DD20B8684CC
{747e1fbe-b70f-441d-bbca-6e536c04924a}
{81705D67-3F73-4983-859B-97D0922E5ABE}
7265100a-17e1-41bf-bd08-63b95a25a9c3
{27cb634d-c84e-4c00-9b53-f5523601dbad}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
E404.e404mgr
Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{C03FD59D-9104-44B7-929A-9EAA0BA05211}
{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
{E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
{F7D09218-46D7-4D3D-9B7F-315204CD0836}
{499B8A53-5949-4625-A8BF-A4D934AFC9DA}
{E63648F7-3933-440E-B4F6-A8584DD7B7EB}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
%UserProfile%\Application Data\Microsoft\Crypto\RSA
%UserProfile%\Application Data\Microsoft\ProtectObjects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}

HELP:
how to remove registry entries

Unregister DLLs:
dtjby.dll antzozc.dll Trojan.Zlob|eulbn.dll werbetpwg.dll sysdivx.dll vipextnog.dll werbetlrw.dll vipextgpk.dll vipextpxm.dll voipwet.dll fsehfcu.dll qhcvdw.dll findsiteonline.dll 1201639705.dll 1201639702.dll ofcpi.dll 1202030455.dll iinqyl.dll 1198448796.dll sbmdl.dll wamdl.dll 1198448799.dll 1202567261.dll 1202650266.dll 1203140349.dll 1203634438.dll 1203846321.dll hdtip.dll werbettxf.dll ictmdl.dll isfmdl.dll nczupfw.dll uimcu.dll

HELP:
how to unregister malicious DLLs

Delete files:
ncompat.tlb hp[X].tmp msvol.tlb vnp7s.net zxserv0.com dumpserv.com

HELP:
how to remove harmful files

Information added: 2008-04-16 02:20:34
Information updated: 2010-06-20 02:06:53

Additional resources related to Video ActiveX Object:

Attention: If you know or you have a website or page about Video ActiveX Object removal, feel free to add a link to this list: add url

more resources

<Guest>

I cannot understand

Reply »

2010 06 20

Post Comment:

Attention: Use this form only if you have additional information about Video ActiveX Object parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Related discussions:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.