Remove VirusBurst. Description and removal instructions

 
Title: VirusBurst
Also known as: VirusBurster, Virus Burst, Virus Burster
Type: Trojans
Severity scale:VirusBurst severity is 80  (80 / 100)
 
VirusBurst (also known as VirusBurster) is a trojan that displays an icon in the system tray. This icon shows a message, which says that the compromised computer is infected with dangerous spyware parasites and asks the user to download and install a removal program, which actually is VirusBurst, the same named corrupt illegally distributed spyware remover. Once the user clicks on that message, the trojan opens a web site distributing VirusBurst. It may also try to download the application. The trojan is able to change the Internet Explorer default home page and redirect the web browser to malicious web sites. VirusBurst automatically runs on every Windows startup.


Related files: virusburst.exe, eowygj.dll, vb.ini, duxzj.dll, gtpbx.dll, xtgwjrm.dll, oqabf.dll, wuwbxp.dll, qxfgcg.dll, syycum.dll, titiau.dll, zphnok.dll, httge.dll, gqagksr.dll, dpfwu.dll, ficqv.dll, tazth.dll, VirusBurster, Dqlt

VirusBurst properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic VirusBurst removal:

remover for VirusBurst

VirusBurst manual removal:

Kill processes:
virusburst.exe virusburster.exe pi2pl.exe uaw5wah6a.exe vypqj.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\VirusBurst
HKEY_CLASSES_ROOT\TypeLib\{728E63B0-5165-4E98-9C83-EF987EEB66C9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{728E63B0-5165-4E98-9C83-EF987EEB66C9}
HKEY_LOCAL_MACHINE\SOFTWARE\VirusBurst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusBurst
BDF4E4DF-B6BB-4ECE-8CD9-1880DEC7B82F
Software\Microsoft\Internet Explorer\URLSearchHooks\F4D48922-3FC5-6535-E7FD-136403D24E92
F4D48922-3FC5-6535-E7FD-136403D24E92
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\9d635a36-6b3c-4146-8625-f3aaf507bbf8
9d635a36-6b3c-4146-8625-f3aaf507bbf8


Unregister DLLs:
dpfwu.dll, duxzj.dll, eowygj.dll, ficqv.dll, gtpbx.dll, httge.dll, oqabf.dll, gqagksr.dll, qxfgcg.dll, syycum.dll, tazth.dll, titiau.dll, wuwbxp.dll, xtgwjrm.dll, zphnok.dll, lqe2z.dll vcehaeb.dll

Delete files:
virusburst.exe, dpfwu.dll, duxzj.dll, eowygj.dll, ficqv.dll, gtpbx.dll, httge.dll, oqabf.dll, gqagksr.dll, qxfgcg.dll, syycum.dll, tazth.dll, titiau.dll, wuwbxp.dll, xtgwjrm.dll, zphnok.dll, vb.ini VirusBurster Dqlt
Delete directories:
C:\Program Files\VirusBurst

Other programs to remove VirusBurst:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 01/09/06
Information updated: 11/01/08

Additional resources related to VirusBurst:

Attention: If you know or you have a website or page about VirusBurst removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about VirusBurst parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Guest. 2006-09-19 12:09:14
Removal instructions updated.

2. by Guest. 2006-09-19 12:09:27
No longer relevant. Virus burst has changed the way it works. I have a friend PC I'm trying to fix and it no longer loads this way - or perhaps the friend has an older version of this junk.

3. by Guest. 2006-09-07 13:09:30
try bleepingcomputer.com - they have a fix that works

4. by Guest. 2006-09-07 11:09:11
Guest 2006-09-06 19.09.19 ia absolutely right I found no DLL, reg entries or running process either. To be fair, the computer seems to be running ok and I fixed cyberlog.x with a program called Smitfraud, so my home page is no longer hijacked. To reduce the annoyance factor, I set critical message to always hide best I can do so far.

5. by Guest. 2006-09-06 19:09:19
This removal process does not work. I didn't find anything on my system except the Program FilesVirusburst folder containing ignore.lst, vb.ini and virusburst.exe. No DLL, no registry entries, no running process. I removed the three files and the folder, rebooted and the bogus system errors are still there.

There must be something else there that you haven't found yet.

I am now getting more and more lurid warning messages every few minutes about how infected my PC is.

How does Microsoft justify an operating system that lets anyone to run anything whenever they like without getting permission from the Adminsuitrator of the system??


Related news:
Similar parasites:
Related discussions: