How to remove Waledac
Wednesday, April 8th, 2009 at 3:44 amHome » Backdoor, Trojan » Waledac
Waledac description
Trojan.Waledac is designed to download and install other malwares secretly. It usually installs keyloggers, adware or other trojans. Waledac is also dangerous because of another malicious feature. This trojan works as a backdoor; it allows remote access to the data and programs on the infected machine.
Trojan.Waledac may come bundled with other malwares. The most common way of infection is fake holiday e-cards. Waledac usually infects a pc when user clicks a link provided on spam message. Waledac is distributed by the Conficker.E worm too. Click here to remove the Conficker.E infection.
How to manually remove Waledac
To remove Waledac spyware you must block Waledac sites, stop and remove processes, unregister DLL files, search and delete all other Waledac files and registry utility. Follow the Waledac detection and removal instructions below.
The most typical software removal method is to remove Waledac by using "Add or Remove Programs" service. However there may be hidden Waledac files, running processes and registries in your computer, so Waledac may recreate all other files after reboot.
Waledac manual removal instructions
Block Waledac sites:
bestchristmascard.com
blackchristmascard.com
cardnewyear.com
cheapdecember.com
christmaslightsnow.com
decemberchristmas.com
directchristmasgift.com
freechristmassite.com
freechristmasworld.com
freedecember.com
funnychristmasguide.com
holidayxmas.com
itsfatherchristmas.com
justchristmasgift.com
livechristmascard.com
livechristmasgift.com
mirabellaclub.com
mirabellaonline.com
newlifeyearsite.com
newmediayearguide.com
newyearcardcompany.com
newyearcardfree.com
newyearcardonline.com
newyearcardservice.com
superchristmasday.com
superchristmaslights.com
superyearcard.com
themirabelladirect.com
themirabellahome.com
whitewhitechristmas.com
yourchristmaslights.com
yourdecember.com
youryearcard.com
Read more how to block Waledac sites
Stop and remove Waledac processes:
new26[1].exe
adv111[1].exe
gr[2].exe
new23[1].exe
Test.exe
load[1].exe
ntos.exe
free_scan.exe
sysguardn.exe
1[1].exe
StartApp.exe
ert51791.exe
card[1].exe
softjopa[1].exe
pc.exe
agent.exe
tem8.tmp.exe
winlogin.exe
Hyves_Browser_Instalation.exe
Hyves_Browser.exe
~tmpa.exe
loader[1].exe
Read more how to kill Waledac processes
Locate and delete Waledac registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D032570A-5F63-4812-A094-87D007C23012}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\agent.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Hyves Browser
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Privacy components
Read more how to delete Waledac registry entries
Download RegistryBooster 2010 to scan errors caused by Waledac
Search and unregister Waledac DLL libraries:
Omahonafazeq.dll
usp10.dll
oqarib.dll
SSEngine.dll
swapdm.dll
sp.dll
Read more how to unregister Waledac DLL files
Detect and delete other Waledac files:
new26[1].exe
adv111[1].exe
gr[2].exe
new23[1].exe
Test.exe
load[1].exe
ntos.exe
free_scan.exe
sysguardn.exe
1[1].exe
StartApp.exe
ert51791.exe
card[1].exe
softjopa[1].exe
pc.exe
agent.exe
tem8.tmp.exe
winlogin.exe
Hyves_Browser_Instalation.exe
Hyves_Browser.exe
~tmpa.exe
loader[1].exe
Omahonafazeq.dll
usp10.dll
oqarib.dll
SSEngine.dll
swapdm.dll
sp.dll
We strongly recommend you to use spyware remover to track Waledac and automaticaly remove Waledac processes, registries and files as well as other spyware threats.


Waledac