kcyxgelvmh..vbs VBS Removal Instructions (Solved)

Symptoms of  kcyxgelvmh..vbs script. for windows 7, windows 8
if you find instruction in Hijack this log
C:\Users\USER_NAME\AppData\Local\Temp\kcyxgelvmh..vbs or
HKCU\..\Run: [kcyxgelvmh] wscript.exe //B “C:\Users\HPPC~1\AppData\Local\Temp\kcyxgelvmh..vbs”
you are unable to right click to select something from it because it quickly close down.
kcyxgelvmh..vbs automatically hide original files and folders from usb pen-drive and make
there shortcuts (links .lnk). Also when clicked to shortcuts it regenerate its instance and then access to your files
it means that kcyxgelvmh..vbs is confirmed on your machine.
Removal of C:\Users\USER_NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kcyxgelvmh..vbs
1- Close Process by Removing wscript.exe from task-manager to end it’s task.
2- Remove file located at C:\Users\USER_NAME\AppData\Local\Temp\kcyxgelvmh..vbs
3- Remove file located at C:\Users\USER_NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kcyxgelvmh..vbs
Now update your antivirus Thats it kcyxgelvmh..vbs is removed from your system
use this tool after script removed from memory to unhide whole usb in fastest way goto this post http://it-souls.com/2008/07/freeware-usb-floopy-cdrom-tool/


Posted in : Support
Tags: , , , , ,

Comments are closed.