VirusProtect 3.9 or VirusProtectPro Removal Instructions
November 11th, 2007 | by Alex |VirusProtect or VirusProtectPro Descriptions:
VirusProtect, or VirusProtectPro 3.9, is the latest counterfeit anti-spyware software that endangers the world of computers. VirusProtect 3.9 (or VirusProtectPro) usually installed itself onto your PC without your permission, through Zlob.Trojan, Virus or fake software. VirusProtect 3.9 (or VirusProtectPro) will display fake system alerts or fake security alerts to trick user to buy the paid version of VirusProtect 3.9 (or VirusProtectPro), in order to remove the potential and reported problems. It’s believed that VirusProtect 3.9 (or VirusProtectPro) is a new variant of SpyLocked and SpyCrush.

It is extremely important to remove VirusProtect 3.9 (or VirusProtectPro) from your computer. You can try our recommended SpyHunter* Spyware Detection Utility, which is very intuitive and highly efficient. VirusProtect 3.9 (or VirusProtectPro) can be removed automatically. However, if you are familiar with registry edit and dll files in Windows, we strongly recommend you to try the VirusProtect 3.9 (or VirusProtectPro) manual removal instructions. It might take time and patience, but it is equally effective if you get it right.
As always, we will constantly update the instructions to combat against VirusProtectPro and its variants. Please feel free to post comments if you have any questions or suggestions regarding VirusProtect 3.9 (or VirusProtectPro). This is a great community and I am sure that you would find the answers. Good luck!
Download SpyHunter* Spyware Detection Utility.
Manual Removal Instructions:
Stop VirusProtectPro Processes:
(Learn how to do this)
VirusProtectPro.exe
VirusProtectPro 3.3.exe
VirusProtectPro 3.4.exe
VirusProtectPro 3.5.exe
VirusProtectPro 3.6.exe
VirusProtectPro 3.7.exe
VirusProtect 3.9.exe
Unregister VirusProtectPro DLL Files:
(Learn how to do this)
ayjhc.dll (new)
osdjhjc.dll (new)
iklqcx.dll (new)
vvihh.dll (new)
fwjgtk.dll (new)
fwrkqfl.dll (new)
tiqmcx.dll (new)
zdwii.dll (new)
mivmv.dll (new)
tmxxxh.dll (new)
zkpssqa.dll (new)
ryxrho.dll (new)
vpccw.dll (new)
gusur.dll (new)
ugofuq.dll
gtawclv.dll
vjxwnn.dll
cfqbw.dll
khtbpdl.dll
fdpzgi.dll
fqdqs.dll
xtsyynm.dll
nuqjici.dll
zpeolvh.dll
xnvaogd.dll
lapmvzf.dll
myqlejy.dll
wfcof.dll
surzzh.dll
onljweo.dll
yhjbbzf.dll
cefrjsh.dll
wpchz.dll
vgibz.dll
cqsfk.dll
wzhtjqo.dll
lrnjnzf.dll
zpuwriz.dll
tkrsw.dll
afzdbl.dll
bgwttyl.dll
dyrwls.dll
nexpegp.dll
eigbbb.dll
fshqaln.dll
ktrxe.dll
Find and Delete these VirusProtectPro Files:
(Learn how to do this)
VirusProtect 3.9.exe (new)
VirusProtect 3.9.lnk (new)
VirusProtect 3.9.url (new)
Uninstall VirusProtect 3.9.lnk (new)
VirusProtectPro 3.7.exe
VirusProtectPro 3.7.lnk
VirusProtectPro 3.7.url
Uninstall VirusProtectPro 3.7.lnk
ayjhc.dll (new)
osdjhjc.dll (new)
iklqcx.dll (new)
vvihh.dll (new)
fwjgtk.dll (new)
fwrkqfl.dll (new)
tiqmcx.dll (new)
zdwii.dll (new)
mivmv.dll (new)
tmxxxh.dll (new)
zkpssqa.dll (new)
ryxrho.dll (new)
vpccw.dll (new)
gusur.dll (new)
ugofuq.dll
gtawclv.dll
vjxwnn.dll
cfqbw.dll
khtbpdl.dll
fdpzgi.dll
fqdqs.dll
xtsyynm.dll
VirusProtectPro 3.5.exe
VirusProtectPro 3.5.lnk
VirusProtectPro 3.5.url
Uninstall VirusProtectPro 3.5.lnk
VirusProtectPro.exe
VirusProtectPro 3.3.exe
VirusProtectPro 3.3.lnk
VirusProtectPro 3.3.url
Uninstall VirusProtectPro 3.3.lnk
VirusProtectPro 3.3 Website.lnk
VirusProtectPro 3.4.exe
VirusProtectPro 3.4.lnk
VirusProtectPro 3.4.url
Uninstall VirusProtectPro 3.4.lnk
VirusProtectPro 3.6.exe
VirusProtectPro 3.6.lnk
VirusProtectPro 3.6.url
Uninstall VirusProtectPro 3.6.lnk
nuqjici.dll
zpeolvh.dll
xnvaogd.dll
lapmvzf.dll
myqlejy.dll
wfcof.dll
surzzh.dll
onljweo.dll
yhjbbzf.dll
cefrjsh.dll
wpchz.dll
vgibz.dll
cqsfk.dll
wzhtjqo.dll
lrnjnzf.dll
zpuwriz.dll
tkrsw.dll
afzdbl.dll
bgwttyl.dll
dyrwls.dll
nexpegp.dll
eigbbb.dll
fshqaln.dll
ktrxe.dll
Remove VirusProtectPro Registry Values:
(Learn how to do this)
1D52BB09-465C-4AA4-9FBD-71D1690CAED3
24998748-6E8A-40D1-AA97-E9952EE9ED18
5596A310-2E54-4B75-ADA3-7EE0AD10E228
5C17F7D3-8460-4488-84EB-986A38BEDD2D
71DF187C-DC99-4A35-BDB2-C099821A435D
74DF3F5E-99D7-4F4D-81C3-95201D4CDA88
91478017-FF82-4C5D-9FFF-7801F8D99CCC
287FFE0C-15D0-4BFD-BAA9-0582C6361BBB
45973D31-5CE3-4503-BC81-25E525119C48
46D4D563-1C43-4CEE-AF98-471385F2BC42
9F9C8CF3-EB4A-4851-A4F6-2370F5BC79EE
B1B9C911-CA24-4E1E-9F56-838486218327
C78E49C0-AB82-4C79-A189-F1E34980643B
D2A0598F-FBC4-4721-BC85-F75C0712C100
E7B2831E-A25A-430B-B3E3-3D414F9C4288
EDC652FF-2EA2-4E46-8849-D9041B77B88E
049FECE3-18C7-4023-A1BE-CFAA2C4EE387
Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.3.exe
Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.4.exe
Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.5.exe
Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.6.exe
















92 Responses to “VirusProtect 3.9 or VirusProtectPro Removal Instructions”
By Steve on Jul 1, 2007 | Reply
I wanted to get rid of VirusProtectPro, but can’t seem to find VirusProtectPro.exe. Is it under another name?
By Trom on Jul 2, 2007 | Reply
I seem to have gotten rid of all of the junk, but I keep getting a popup from my taskbar saying I still have a virus and sends me to the VirusProtectPro download sight. What did I mis?
By Bomen on Jul 2, 2007 | Reply
I also haven’t got the process…
By hellboy on Jul 2, 2007 | Reply
Emptied verygooe!
3x!
By Tim on Jul 2, 2007 | Reply
Steve/Trom/Bomen,
1. Try to find all the DLL above
2. unregister all the dll above
3. remane all the dll above
4. delete all the dll above
The popup from the taskbar usually come from the dll.
Hope this will help.
By Tim on Jul 2, 2007 | Reply
Here is another dll that need to be delete: zpeolvh.dll
By Nate on Jul 3, 2007 | Reply
Ok, so I recently found this buggar on my computer, decided to Google it (had no idea where it came from), and found this, thank God!
My cmd prompt wasn’t working the way that it was supposed to work apparently, so I stared leafing through how to delete a .dll file, and stumbled across this:
____________________________________________________
David ARMENIA 4 LIFE Says
HI ALL
I had this sacka yesterday in my pc. I have deleted it today (manually)
download the free removal tool. RUN IT!
It wil find a lot of crap.
Just ckeck where the file or the registery is, then go there and delete it!!!!!!!
Maybe some of you must stop some processes! ckeck for that above in the forum.
If you want to open REGISTERY. Go to RUN. => type: regedit=> Enter
Here you can locat all the stuuf that SPYHUNTER has found and you can delete it manually!!!!
It worked by me and the icon is gone 2!!!
It will take a whyle but if you wanne get ride of it JUST DO IT.
One more thing. There is a .DLL File in SYSTEM 32!!!
This .dll has an other name by differend computers.
First its not possible to delete this .dll but when you do all what is sayed above then restart pc and you can delete the foker.!!
GOOD LUCKKKK!!!!!!!
ARMENIA 4 LIFE
Apr 6th, 2007 at 5:38 pm
____________________________________________________
This man is amazing. I just did exactly what he said, and it’s all gone now
By Chris on Jul 3, 2007 | Reply
Hi there,
I need help now!
I have this demon virus it gives me a pop up box saying two things
“Windows can not start click here to search for a fix”
“Click here to resart windows”
I click and nothing fixes it, the pop up box stops me from doing anything on the deasktop or start menu! I also have the VirusProtectpro 3.3 in the back ground asking me to register or pay $49.95 to fix the problem. I have read this thread yet if i cannot get rid of this blocking pop up then I can go to system restore etc!
What can i do, I have had this new lap top all of three days and this happens. Hope there is hope for my issue please help
By Brian on Jul 3, 2007 | Reply
Chris,
Virus Protect Pro is a rogue antispyware application. The most important thing is to locate and delete the offended dll and it usually stores in system32 folder. What you can try is this: 1) Do a search on dll’s that located under system32 folder. 2) Sorted it by date; 3) Pick the dll’s that dated when your machine got infected. 4) Rename it then reboot your machine. 5) If it works, then deleted the files. Be sure to stop the VirusProtectPro processes first. Otherwise, it might prevent you from operating your PC properly.
After you complete the steps above, you can download Spyhunter to scan your hard drive to ensure it’s free of spyware.
Hope this helps. Good luck!
By Dennis Gaasbeek on Jul 4, 2007 | Reply
Hi Brian,
Thanks for the tip on displaying the DLL files by date. In my case the files nuqjici.dll and zpeolvh.dll did not exist. The DLL file that generated the pop-up message was xnvaogd.dll (identied by just sorting all files by date in the system32 folder and that one was the latest DLL file).
I renamed the file and rebooted. After the restart NOD32 identified the renamed file as malicious and suggested to remove it which of course I did. The program has now been removed completely it seems, fingers crossed!
By Mo on Jul 4, 2007 | Reply
1st, I can’t find VirusProtectPro.exe in the processes or anything with a similar meaning.
2nd, I found the dll file which must be the one that drives the icon by sorting all of the dll by date. But the problem is I could neither delete nor rename it.
Can anyone help, please?
By ram on Jul 5, 2007 | Reply
I seem to have gotten rid of all of the junk, but I keep getting a popup from my taskbar saying I still have a virus and sends me to the VirusProtectPro download sight. What did I mis?
wan i click the icone virusprotectpro site
By Venelin on Jul 5, 2007 | Reply
Thanks a lot for instructions.In my case the name of file was xnvaogd.dll .I renamed it like xnvaogd.doc and delete it so flashed icon on task bar desapear
By Jeff on Jul 6, 2007 | Reply
Hi all:
I got rid of the flashing icon, but now I’m getting an error message on startup that says “Error loading C:\WINDOWS\system32\eehofao.dll” and then below that it says, “The specified module could not be found”
How do I get rid of this??
By Tim on Jul 7, 2007 | Reply
Here’re two new dll’s: lapmvzf.dll and myqlejy.dll
By Mark on Jul 8, 2007 | Reply
I did what was mentioned above……..By changing the fie names to .doc, placing them on the desktop, restarting and then deleting the files appears to have worked.
Priceless advice.
Thank you so much
By Adnan on Jul 8, 2007 | Reply
I did mention above i found the file myqlejy.dll in system 32 folder that was the file which gave fake security alartes on the task bar i change the name of .dll file to .doc place it on disktop and reboot my system and now free from that pop ups. also used spyeware hunter work effieciently. alwyas used zone alram too. it stop anything before installing the files without your permission. thanks to all of u.
By Tim on Jul 9, 2007 | Reply
Here’s a new infected dll for VirusProtectPro: wfcof.dll
By Dianna on Jul 9, 2007 | Reply
Hi guys the information here was extremely usefull. I seem to have gotten all but one thing corrected. I can not get a home page saved. whenever I open an internet browser I still get About Blank, even though I have resaved the link to be my home page. Any suggestions?
By Brian on Jul 12, 2007 | Reply
New VirusProtectPro dll was added to the list of infected files: surzzh.dll
By John on Jul 14, 2007 | Reply
This is crazy! I just spent five hours to reinstall Windows XP, and then, I found this useful instructions. Wish I could’ve done some researches before I started from scratch. Arghhhhhhhhhhhh!!!
By Danny on Jul 14, 2007 | Reply
for those of u still having a prob with the annoying icon, try finding a file named surzzh.dll in system 32 folder.if you have it, right click to properties and change .dll to .doc then when you restart delete the file. just fixed it myself, been working on it almost all day
i hope this helps it seems like that icon has alot of different dll files that could be causing it, the must change the name of it constantly to make it harder to delete
By Tim on Jul 15, 2007 | Reply
Added new dll to the list – onljweo.dll and yhjbbzf.dll
By Tim on Jul 16, 2007 | Reply
Here is another dll from VirusPortectPro, cefrjsh.dll
By Rob on Jul 16, 2007 | Reply
You would not believe how relieved I am to finally get rid of that flashing icon!!
All I can say is “Thank you”. Your help has been much appreciated & it goes without saying that I’ll keep your website stored as one of my favourites – as well as recommending you.
Cheers!!
By Bawapriya on Jul 16, 2007 | Reply
Hi guys..please help me.I could see Virus Protect pro.3.3 has been downloaded in my system & i have something poppingup from my task bar.My comp is infected with Trojan,which will reduce the performance of my computer.I deleted it from my c: and removed from control panel.SO what steps i should follow now
By ChrisC on Jul 17, 2007 | Reply
I’ve managed to get this onto two computers in the last day. It seems to have come in attached to an ActiveX download.
I get all the bogus virus pop-ups and my homepage has been taken over and can’t be changed. Also, it seems to be affecting a lot of programs that just won’t start – including a number of spyware programs. Adaware, Noadware, Norton, Windows Defender all run so slowly and even though they find problems they either haven’t removed them or they haven’t worked.
Both computers are running as slow as lame dogs – it takes for ever for adaware and some other checking programs to do anything. Norton only scanned 800 files in about 3 hours.
With all of this going on, do I have more problems than just VirusProtectPro?
By ChrisC on Jul 17, 2007 | Reply
I forgot to includethe fact that if I try to remove the two programs I can find in control panel software removal, I get a message to say I have to reboot before removing them – that of course does nothing. They just can’t be got rid of from the software list by trying to delete them this way.
By Tim on Jul 17, 2007 | Reply
Added new VirusProtectPro infected dll: wpchz.dll
By Tim on Jul 18, 2007 | Reply
vgibz.dll is the latest dll from Virus Protect Pro.
By xyclops9 on Jul 19, 2007 | Reply
Confirmation: vgibz.dll was found in infected Vista system as a result of VirusProtectPro 3.4 being ingested from a dubious web-site ( not me, my son — honest! )
Rgeargds and thanks for SpyHunter … Graham
By Sandeep on Jul 19, 2007 | Reply
Hi all,
first search the dll file and then open ur system in safe mode and delete that dll file.
I did the same and now there is no message coming in task bar but M still getting pop-ups from Virus Protect pro [:(]
By Tim on Jul 19, 2007 | Reply
psndz.dll is another dll from VirusProtect Pro.
By NiXHound on Jul 20, 2007 | Reply
Hi, i can’t seem to find any of the dll’s prosesses or exe-files.. But still getting the security alert message .. What should I do ?
By Sandeep on Jul 20, 2007 | Reply
Download SpyHunter and run it. It’ll locate all the files then go to registry using “regedit” and delete those files.
There will be a folder namely “Video ActiveX Access” in program files but you can delete it directly so reboot your system in safe mode and delete all the files inside this folder using “del *.*” command.
It worked for me. So guys Gud Luck.
By Tim on Jul 21, 2007 | Reply
cqsfk.dll is the latest dll from Virus Protect Pro.
By Ertugrul B. on Jul 22, 2007 | Reply
I haved tried everything in the symantec and microsoft web sites in order to remove the pop ups of the virusprotectpro virus. Norton was succesful in cleaning the trojans and I double checked each file mentioned on both microsoft and symantec sites. I am left with the pop ups which pop up system alerts ever 2 minutes. Any help in removing them would be much obliged. Thanks
By Andy P. on Jul 22, 2007 | Reply
You guys that are still getting pop up alerts, rename the program that causes it, and end the process with task manager, then delete it. This should stop the pop up alerts; I had the same problem, I didn’t realize renaming the file would make a big difference, hope this helps.
By Ertugrul on Jul 23, 2007 | Reply
Cant find a program but a couple of cookies directed for the web adress of the pop up…Can not rename the cookies.. Deleting the cookies doesnt help…They come back…Symantec requires 100 euros to fix the problem on line..:)
By Liz Diaz on Jul 23, 2007 | Reply
David ARMENIA 4 LIFE ……………..Dude, you are awsome!!!!!
I followed your instructions……and I was able to rid my computer of that “@@#$%$& *%%&$” spyware. Yes, it was a little time consumeing…..about 4-hours. But……IT WORKED!
thanks again.
Liz
By Tim on Jul 23, 2007 | Reply
VirusProtectPro 3.5.exe is the latest vesion of VirusProtectPro.
By Carlos on Jul 23, 2007 | Reply
Dude I got this damn virus 3.5!! It’s getting very annoying now. How can I remove it???
By Tim on Jul 24, 2007 | Reply
wzhtjqo.dll is the latest dll from VirusProtect Pro.
By help please on Jul 24, 2007 | Reply
What’s the difference between downloading the SpyHunter Spyware Detection Utility and removing the virus manually?
By CWilliams on Jul 25, 2007 | Reply
(Tuesday) Vista Home Premium. Got this VirusProtect issue when a ‘missing plug-in – click here to download’ showed up in Firefox when trying to access an mpeg (which I had done before, so why did it suddenly want a plug in?). That should have made me suspicious, but sadly, no.
(Today) I rebooted into safe mode (F8) and restored system to 2 days before infection. Then I restarted, again in safe mode. I found the VirusProtect .exe files, and deleted them. I searched for the specified .dll files and didn’t find any of them. I searched for all .dll later than 22 july 07, and checked every one of them through Google. All were OK, and interestingly enough, most were a Vista upgrade to address a data leak security exploit.
I then checked for the registry keys – again, all negative.
I then held my breath and rebooted into Vista, ‘normal’ mode. So far, everthing seems OK.
Thanks for publishing all the information – even though it was largely negative in my case it was invaluable to be able to check that known problems were not present on my machine.
One point remains a puzzle to me: if I have MacAfee running on this computer, how does an infected ActiveX/plug-in get downloaded and installed?
BTW I maually deleted the two desktop shortcuts to the asafetyproduct website and also emptied the recycle bin before going in to normal mode.
By Jon FitzGibbons on Jul 26, 2007 | Reply
Wonderful program. I was glad to find the spyware. However, upon trying to remove it wants me to buy the full blown $30 version. I really don’t want to have to spend money if I don’t have too. Are there other options for free removal of Virus Protect Pro spyware?
By Angelo on Jul 26, 2007 | Reply
Thanks so much! I followed the instruction and successfully got rid of Virusprotect Pro. Well, it took me only 2 hrs.
By Rob on Jul 27, 2007 | Reply
Here is yet another dll file, zpuwriz.dll. I renamed it in system 32 folder to .doc, saved it to the desktop, rebooted, deleted the file from the desktop and everything is back to normal.
THANKS!!!!!!!!!!!!!!!!!
By Tim on Jul 27, 2007 | Reply
tkrsw.dll is the newest dll from VirusProtectPro.
By Jason on Jul 27, 2007 | Reply
FYI, lrnjnzf.dll is another dll from Virus Protect Pro.
By Jason on Jul 28, 2007 | Reply
afzdbl.dll is another dll from Virus Protect Pro.
By small bear on Jul 28, 2007 | Reply
I believe that I can kill it!
By Tim on Jul 29, 2007 | Reply
bgwttyl.dll this is another dll from virusprotectpro.
By Tim on Jul 30, 2007 | Reply
ugofuq.dll and dyrwls.dll are the latest dll from VirusProtec Pro.
By Jason on Jul 31, 2007 | Reply
gtawclv.dll is another dll from VirusProtectPro.
By Tony on Jul 31, 2007 | Reply
A friend got hit with VirusProtectPro and came to me for help. These instructions made it possible for me to help. Thank you much!
By Zlog Trojan SUCKS! on Aug 2, 2007 | Reply
vjxwnn.dll (renamed to .dll.bad, deleted in safemode)
Hope it helps. Search C:\WINDOWS\system32 by date modified if you know the approx. date you got it. Rename it and safemode delete it.
By Brian on Aug 2, 2007 | Reply
Here’re the new infected dll files:
vjxwnn.dll
khtbpdl.dll
cfqbw.dll
By marshall on Aug 3, 2007 | Reply
well there are many viruses now, do u guys know any programs i can trust to protect my PC
By Andrew on Aug 3, 2007 | Reply
khtbpdl.dll has to be the cause of that persistent task-bar pop-up. I just deleted it and the pop-up is gone. Previously, Spybot got rid of all files with VirusProtectPro in their name and apparently all dll’s except khtbpdl.dll (which was the only survivor showing up in a Start-menu search of “files including dll, modified in the last week”) but the pop-up just kept coming till I did the rename /delete thing.
Thx all who suggested that and the timed search for dll’s.
Funnily enough the “Unregister dll files” process did not work for khtbpdl.dll (error message said “DllUnregister . . . was not found”) – persistent little item, eh? Built-in defences or what? I was SO relieved when it didn’t refuse to delete!
By Ray on Aug 4, 2007 | Reply
Instead of going thru all the trouble of looking for certain files to delete, I just Restored my computer to an earlier date, before I got the VirusProtectpro. It was a whole lot easier.
Ray in Florida.
By Brian on Aug 4, 2007 | Reply
added new dll files:
fdpzgi.dll
gusur.dll
By Rican on Aug 6, 2007 | Reply
Thanx guys for the help..i dun have it no more!!!
Its GONE
By Brian on Aug 7, 2007 | Reply
Added new infected dll files for VirusProtectPro. Make sure you follow the removal instructions above to remove them.
fshqaln.dll
ktrxe.dll
By jazze on Aug 8, 2007 | Reply
Hi Ray,
You mention about restoring your computer to an earlier date. Can you share with me how to do it??
Sorry, I’m not good with computer programs. When my laptop got infected, I just tried to delete the whole “VirusProtectPro” folder under C:Program files without checking up on how to get rid of it properly. But the stupid icon still keeps popping up, and my laptop seems slower now and i get weird error messages abt some exe files not running and having to terminate.
thanks!
By jazze on Aug 8, 2007 | Reply
Help!
1) I’ve deleted the Virusprotectpro folder under Program files.
2) I’ve tried searching for all the .dll files listed but can’t find any.
3) I’ve found the “System Restore” function that Ray mentioned but tried to restore to 2 different dates but was told restore incomplete as “No changes made to the computer”
4) I tried to find any .dll files in System32 folder modified on the day that my laptop got infected and found nothing.
What else can I do?? This pop-up icon is driving me nuts!!
By Brian on Aug 9, 2007 | Reply
Added two infected dll’s for Virus Protect Pro 3.6: nexpegp.dll and eigbbb.dll
By Mike on Aug 10, 2007 | Reply
Found another dll not seen in list – xtsyynm.dll
Used the suggestion to look for dlls added today.
all of the other files – programs, reg keys, etc. were gone, but that little dll seems to have been the problem
gave it an extension of my initials to make it easy to find and restarted my PC – no more annoying popup.
Thanks for all the hints and help.
By B.H. on Aug 12, 2007 | Reply
By the way, make sure that when you sort out the files that you look at the date which the file was last MODIFIED not CREATED. This was my mistake but then i used SpyHunter and it found the file for me which was the wzhtjqo.dll . I renamed it wzhjqo.doc and dragged it onto my desktop, and then i restarted my computer and deleted it. Now my computer is just fine. Thank you all very much!
By Liam on Aug 12, 2007 | Reply
I discovered this early, and tried performing a system recovery to an earlier date. Surprisingly it worked perfectly, and it has worked for trojans I’ve had before. Is it really that easy? I was worried that maybe it just seemed to work and that perhaps the trojans are just hidden, so I reverted the system restore and removed it using the online advice.
Just wondering, does a system restore really fix it?
By casey on Aug 12, 2007 | Reply
does a system restore get rid of virusprotectpro? it did get rid of the flashing tool bar icon ,is that sufficent?
By Brian on Aug 14, 2007 | Reply
added new dll: vpccw.dll
By Andre on Aug 14, 2007 | Reply
Thanks! FINALLY, got rid of that bugger! That manual “attack” worked perfect. Especially the one where you sort .dll, identify, change name, reboot and volá:-)
Lucky us, that there still are good guys out there….
By Jason on Aug 15, 2007 | Reply
ryxrho.dll is the latest dll from VirusProtectPro.
By kara on Aug 16, 2007 | Reply
hey. I have vista and it keeps giving me these pop-ups that reads “Windows Explorer has stopped working” and I’m unable to navigate the drives and documents once it appears. which happens about every 3 seconds. please help!
By James Velten on Aug 17, 2007 | Reply
OK! I have XP so I don’t know if this will work for Vista PCs, but I installed the Spyhunter (freebee) and ran it. Then I ran regedit from “Run” and proceded to delete all the listings that Spyhunter was showing, but I still had the flashing icon in my tray. I did a search of each .dll file that is listed on this site (mine was the first one, thank god). I found it in the C:/windows/system32 folder and renamed the extension to .doc. At this point the icon was flashing but it looked different. After restarting the PC it was gone completely.
Just be patient and start with the first .dll file and if that one doesn’t work search the next one and so on. Good luck and I hope I was some help.
By Les on Aug 18, 2007 | Reply
I just wanted to thank you for publishing this information … I couldn’t have managed without it. I got involved with this problem on an old Window 98 system — I never was much good with systemy stuff, even in the day, and have forgotten much of what I knew.
This pc had only a low-grade infection, just the systray popup … I guess because it wasn’t able to install fully on Win98. What I had to get rid of was C:\WINDOWS\System\tmxxxh.dll … went into safe mode, renamed it tmxxxh.dll.bad, and everything seems fine now.
You now have a place of honour in my bookmarks!!!
By Loiro on Aug 18, 2007 | Reply
Latest DLL is tmxxxh.dll
By JoeA on Aug 19, 2007 | Reply
I am stuck with aon old Windows 2000 machine that I need to clean.
I found the malicious dll – fqdqs.dll, but I am not able to unregister it or even rename it. I get an error saying that Windows is using this file. I tried to bring up Task Manager but I am not seeing any of the VirusProtectPro processes or even other processes that wuld look suspicious.
Yet, the annoying icon in the task bar is flashing and using IR or firefox is nearly impossible. Have downloaded Opera wich workswithout pops ups..
I have run the SpyHunter Scan and I can see the offending bad files but Even in Safe Mode I am unable to rename or delete them.
Any ideas, gurus?
By William on Aug 21, 2007 | Reply
Thanks to all who posted here, help me remove VirusProtectPro. We a big pain in the butt.
my process,
1. Tried manual edits to registry, got some of them
2. Deleted files in videoactivex, or similar name, directory (which was created upon infection
3. Still had blinking shield.
4. Purchaased SpyHunter, ran and caught remaining VirusProtectPro registry entries (that I had missed) (also found a bunch of other junk, cookies, and a reg entry)
5. Still had blinking shield
6. followed insructions here, found .dll by looking at date time created, not exact time of infection (off a few hours)
7. Renamed xxx.dll to remove_xxx.dll
8. Rebooted and worked.
Thanks to all, apreciated.
(PS, I have not unregistered the .dll, only renamed in the system32 directory. Am I ok, or do I still need to unregister?)
By Alex on Aug 23, 2007 | Reply
okay this F***er has just got on my computer. could someone please explain to me what to do. i have very little experience with computers so could you explain it *as if to a child*
By Tom on Aug 24, 2007 | Reply
if I download SPYHUNTER will it locate and remove this from my computer?
By Ed on Aug 25, 2007 | Reply
People who write this virus should be put in jail! This is a devil to get out.
For me, SPYBOT found and killed a lot of the stuff -but not all. I used SPYHUNTER to locate the registry entries. Then, I manually searched them out and deleted them by using REGEDIT. However, the annoying pop-up was still there. By searching all my .dll’s and checking the modified date, I found one for today in the SYSTEM32 directory. It was called Zdii.dll. I renamed it, moved it to the desktop, then deleted it – BINGO! No more pesky pop-up. And the computer starts fine.
Lucky for me it was only 3-4 hours. I feel bad for the folks who are not computer experts.
Good Luck
By Jake on Aug 31, 2007 | Reply
I’m having the same problem as Kara. I’m on Windows Vista Home Basic 32-bit, I caught the virus in an ActiveX installer, and now every 3 seconds a Windows Problem Report pops up saying “Windows Explorer has stopped working” and proceeds to restart windows explorer, closing all open windows explorer windows making it impossible to navigate any drives, control panels, or documents. Help anyone?
By Charlie on Aug 31, 2007 | Reply
I have removed all the above-mentioned files and have searched for all the .dll files, which none I can find so I assume they were removed by Spybot, Adware, SpywareBlaster and WinEnhance Clean Registry.
Yet, the warning popup on the bottom right still appears. So, when I turn on the computer I right click the Task Bar, click “Customize” the Notification area and select Hide Always next to the warning icon which has “no title” (I have Windows XP).
Does anyone have a permanent solution?
There are no .dll files modified or created on the date of the infection in System32, but there are files modified at that time in the Viewpoint Media Player folder in the Program Files folder. I can’t delete that folder because AxMetaStream_0305000D.dll is being used. How do I get rid of this .dll and Viewpoint? Could this be causing my trouble with the popup warning icon on the Taskbar? And what is Viewpoint?
By dracos on Sep 1, 2007 | Reply
i used spyhunter and it found 4 virusprotectpro instances in the registry which i removed but the icon was still there. i managed to track it back to c:\windows\system32\vvihh.dll (the only .dll file created in the last few days) i could not unregister the file and it was still in use while in safe mode. was able to delete in safe mode with command prompt. thankgod, that thing is annoying as hell
By George on Sep 2, 2007 | Reply
PLEASE HELP!
I’ve done everything that is suggested here and installed all the programs and deleted all the bad registry files and managed to contain the problem a bit but the VirusProtect icon is still in my task bar. I searched for all the .dll files written above and found nothing.
But I found a file called “__c00EAAE8.dat” in the system32 folder which is from the exact date and time that VirusProtect attacked my computer but is not a .dll file.
I’ve tried to rename it and delete it, even in safe mode, but it said the file is being used by another program (and the only active program in safe mode was that damn VirusProtect!).
HijackThis writes about it -
O20 – AppInit_DLLs: C:\WINDOWS\System32\__c00EAAE8.dat
Is there a program or a way to rename an active file or somthing?
By hem on Sep 2, 2007 | Reply
my window explorer has stopped working because of virusprotectpro how can i remove
By TNT on Sep 7, 2007 | Reply
My task bar icon was driven by c:\windows\system32\iklqcx.dll, I sorted by date, renamed the file with a .doc extension, moved it to the desktop, restarted the computer, the icon disappeared, deleted the file, good to go. Also I did find a VirusProtectPro .exe file in folder named “Prefetch”, deleted that bugger also, so far no problems. I wonder how this thing is getting so imbedded in some systems and not others?
By Adrian on Sep 7, 2007 | Reply
Try NoAdware v3.0 (older version, but good)
TYPE Registry Key
ACTION Deleted
VALUE HKEY_CLASSES_ROOT\clsid\{d449eb58-55af-4695-b216-895d546aed89}
TYPE Registry Key
ACTION Deleted
VALUE HKEY_CLASSES_ROOT\interface\{446761d5-3ac9-40cc-9dcd-cde23e2ce31a}
TYPE Registry Key
ACTION Deleted
VALUE HKEY_CLASSES_ROOT\typelib\{b7db519e-7131-47b1-a9f5-da8d061c2611}
TYPE Registry Key
ACTION Deleted
VALUE HKEY_CLASSES_ROOT\CLSID\{46f5a8b0-0b73-48c5-9e40-3c443a43c161}
TYPE Registry Key
ACTION Deleted
VALUE HKEY_CLASSES_ROOT\CLSID\{46f5a8b0-0b73-48c5-9e40-3c443a43c161}\InProcServer32
TYPE Registry Key
ACTION Deleted
VALUE HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{46f5a8b0-0b73-48c5-9e40-3c443a43c161}
TYPE Registry Key
ACTION Deleted
VALUE HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{46f5a8b0-0b73-48c5-9e40-3c443a43c161}\InProcServer32
TYPE Registry Value
ACTION Deleted
VALUE HKEY_CLASSES_ROOT\magnet\URL Protocol
TYPE Registry Value
ACTION Deleted
VALUE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{46f5a8b0-0b73-48c5-9e40-3c443a43c161}
TYPE File
ACTION Marked for Deletion
NAME muvdjo.dll
PATH F:\WINDOWS\system32
TYPE Cookie
ACTION Deleted
VALUE virusprotectpro
Good Look!
By bluberry on Oct 8, 2007 | Reply
For hem, Jake, Kara, and others with “Vista” that VirusProtectPro 3.7 has disabled Windows Explorer!
The following worked for me..Start your computer in “Safe Mode” (Tap your “F8″ key before Windows starts loading, and use your up arrow key to select “Safe Mode” and press “Enter”}
NOTE..The “Nag” that Explore.exe has been stopped will still pop up every few seconds, but you can keep closing the dialog box by clicking on the “X” in the upper right corner.
You will have time to open “Internet Explorer” between the nags, and once you get Internet Explorer opened, you can actually still use it behind the nag screen. Type “C:\” (without the quotes) in the address bar and press “Enter” (It worked for me best when I kept closing the nag)
Now you should see the contents of your “C” drive in explorer fashion…simply click on your “Windows” folder, and then your “System32″ folder. Now scroll down past the folders displayed here to find the FILE named “ddllup.dll” (Keep closing the “Explorer Nag as it pops up).
Highlight the ddllup.dll file (Make sure it is the ONLY FILE HIGHLIGHTED) and press the “Delete” key on your keyboard…VIOLA…your nag has been killed, and you have your “Windows Explorer” function-ability restored. (ddllup.dll is responsible for “unregistering” your “explorer.exe”.
Now you can access your computer, and follow the advice of the FINE people in these forums
I personally downloaded the “Free-SpyHunter-Scanner” (Links supplied in these forums). My scan is not completed as I type this, but any and all further info for complete removal of this “GARBAGE” is to be found in these excellent forums…THANK YOU ALL FOR YOUR TIPS AND EXPERTISE!! bluberry
By bluberry on Oct 8, 2007 | Reply
For hem, Jake, Kara, and others with “Vista” that VirusProtectPro 3.7 has disabled Windows Explorer!
The following worked for me..Start your computer in “Safe Mode” (Tap your “F8″ key before Windows starts loading, and use your up arrow key to select “Safe Mode” and press “Enter”}
NOTE..The “Nag” that Explore.exe has been stopped will still pop up every few seconds, but you can keep closing the dialog box by clicking on the “X” in the upper right corner.
You will have time to open “Internet Explorer” between the nags, and once you get Internet Explorer opened, you can actually still use it behind the nag screen. Type “C:\” (without the quotes) in the address bar and press “Enter” (It worked for me best when I kept closing the nag)
Now you should see the contents of your “C” drive in explorer fashion…simply click on your “Windows” folder, and then your “System32″ folder. Now scroll down past the folders displayed here to find the FILE named “ddllup.dll” (Keep closing the “Explorer Nag as it pops up).
Highlight the ddllup.dll file (Make sure it is the ONLY FILE HIGHLIGHTED) and press the “Delete” key on your keyboard…VIOLA…your nag has been killed, and you have your “Windows Explorer” function-ability restored. (ddllup.dll is responsible for “unregistering” your “explorer.exe”.
Now you can access your computer, and follow the advice of the FINE people in these forums
I personally downloaded the “Free-SpyHunter-Scanner” (Links supplied in these forums). My scan is not completed as I type this, but any and all further info for complete removal of this “GARBAGE” is to be found in these excellent forums…THANK YOU ALL FOR YOUR TIPS AND EXPERTISE!! GOOD LUCK…bluberry