Severity scale:  
  (52/100)

Foamer. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - - | Type: Worms

Foamer is a computer worm that spreads through network

Foamer virus image
Foamer is a program that seeds various files to Windows Registry directory.

Foamer is a virus that infiltrates your PC for malicious purposes. This program attempts to connect the user to www42.websam88xq2y so it can download various files. This data can contain malicious codes or malware. This program is classified as a worm[1] because it can disable Task Manager and Windows Registry Editor by exploiting security vulnerabilities in the system. Foamer virus is a self-replicating program and the main danger is the ability to deliver a destructive payload. These programs can infect files or even install dangerous parasites and steal victims' information. 

Name Foamer
Type Computer worm
Also known as Moaphie; Foamer.A; Moaphie.A
Main dangers Can change Windows Registry keys, spread malware, open backdoors
Distribution Spam emails
Strategy Creates several copies of files in the Windows system directory
Elimination You can use Reimage to get rid of Foamer virus

Foamer virus is also known under the names of Foamer.A and Moaphie.A. Usually, it does not display any signs of infection. Although, it can interfere with other programs and prevent them from running. Here is the list of software and system applications which are blocked by this computer worm:

  • AVG;
  • Command Prompt;
  • Control Panel;
  • Folder Options;
  • HijackThis;
  • Internet Options;
  • Internet Properties;
  • McAfee;
  • Norton;
  • Registry Editor;
  • System Configuration Utility;
  • System Properties;
  • System Restore.

Also, when the user tries to open CMD shell, Foamer worm displays an error message and closes the window. This virus also disables Run of the Start menu, Task Manager, Windows Registry Editor, the context menu (that opens up after right-clicking on the mouse). It also changes Internet browser start page to hxxp://www42.web8xq2y/index.html website where you can download more infected files or updates of the program.

The message displayed in CMD command window by Foamer virus:

THE WORLD-WIDE DONT ACCEPT COMMAND PROMPT!!!! 

You should remove Foamer virus because it might place its copies to perform further damage to the PC: 

  • SVCHOST.EXE and WINNT.EXE in the Windows directory;
  • EXPLORER.EXE in the Windows system directory;
  • MOAPHIE.EXE in the root directory of all the system drives;
  • creates the file AUTORUN.INF in various folders. 

According to researchers[2], the best solution for Foamer removal could be Reimage because the malicious program can block other anti-virus applications. This professional anti-malware tool can scan your whole system and detect possible threats as well as repair virus damage.

Spam email attachments contain virus-filled files

Viruses often arrive embedded into letters or their attachments. Macro-virus[3] filled and safe-looking Word files can help to distribute computer worms. The minute user opens the email or downloads that attachment, virus silently finds its way to the system. A victim cannot notice anything until virus performs system changes. 

Also, worms can widely spread by exploiting operating system and software security vulnerabilities. These parasites can spread on their own by replicating the code. There is a possibility that these programs spread as other cyber infections during insecure downloads. You should be cautious and avoid any suspicious software providers or purchases. 

Get rid of Foamer worm and restore PC security 

To remove Foamer virus, you should rely on proper tools like Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware. These anti-malware programs can scan your system and detect threats that are causing poor system performance. Worms infiltrate your system stealthily so they can hide in various places. This makes termination time-consuming.

Foamer virus removal can be done if you have patience and trustworthy tools. After the elimination, do not forget to double-check and scan your system repeatedly. This will ensure that this cyber threat won't reappear after you get rid of it.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Foamer you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Foamer. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.
Press mentions on Reimage

Foamer manual removal:

Kill processes:
explorer.exe,moaphie.exe,svchost.exe,winnt.exe

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunshell

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsvchost

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwinnt

HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStart Page=[site address]

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRun=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoViewContextMenu=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsPoliciesExplorer=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsPoliciesSystem=1

HKEY_LOCAL_MACHINESOFTWAREMoaphieSig

Delete files:
explorer.exe,moaphie.exe,svchost.exe,winnt.exe

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Gabriel E. Hall
About the company Esolutions

References