Manual Removal of Win32.CeeInject Trojan
This trojan first appeared on January 15, 2009.
Other names of Win32.CeeInject Trojan:
This trojan is also known as Trojan-Downloader.Win32.QQHelper.gfg, W32/Pushbot,Trojan-Downloader:W32/QQHelper.XC.
Distribution Level: Unknown
Trojan Manual Removal Instructions
Recommend Removal from Safe Mode:
How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.
End the Following Active Process Before Removal
- %Windows\fxstaller.exe [ 311.296 KByte ] [ Kill the Process, Use Killbox if your Access Denied ]
- %ProgramFiles%\bifrost\server.exe
- %ProgramFiles%\java\msn.exe
- %ProgramFiles%\massenger live\server.exe
- %System%\avs.exe
- %System%\bifrost\server.exe
- %System%\cmd32.exe
- %System%\mldmm.exe
- %System%\msn\system.exe
- %System%\progrmas\server.exe
- %System%\rbjeivpetkbayv.exe
- %System%\scuccccmunafgb.exe
- %System%\service.exe
- %System%\system\windows.exe
- %System%\twext.exe
- %Temp%\ixp000.tmp\act.exe
- %Temp%\ixp000.tmp\burimi.exe
- %Temp%\ixp000.tmp\pa.exe
- %Temp%\ixp000.tmp\pack.exe
- %Temp%\ixp000.tmp\service.exe
- %Temp%\ixp001.tmp\1.exe
- %Temp%\rarsfx0\1.exe
- %Windir%\bifrost\server.exe
- %Windir%\cftmon32.exe
- %Windir%\config\polcmd32.exe
- %Windir%\libsrv32.exe
- %Windir%\service.exe
- %Windir%\shvhost.exe
- %Windir%\sqihost32.exe
- %Windir%\sqlhostt32.exe
- c:\ed.exe
- If you have any of these files in running process from task manger, end the process before removal.
- Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg
- Open it with Regedit.exe [%system32\regedit.exe], then it Confirms Add to registry Yes or No, Confirm Yes, then click Ok.
Written by FireFly on January 15th, 2009 with no comments.
Read more articles on burimi and Cmd32.exe and ixp000.tmp and W32/QQHelper.GFG and fxstaller.exe and Win32.Agent.wvu Trojan-Dropper and removal of trojan and manual removal and W32/Agent.WVU and otherSoftware.















