Obvious Signs of Infection

• The first signs of infection include the warning pop-messages informing you of various spyware present on your computer. The performance of your computer and the Internet connection might also slow down significantly. Finally, the virus can either hijack your homepage or constantly redirect you to the following websites: KeyCodec.com, iVideoCodec.com, StrCodec.com, Vccodec.com, Softcodec.com, or WinMediaCodec.com.
  
  

Video ActiveX System Processes

• Once inside your computer the virus will start hidden system processes necessary for its functioning. You can view and stop the processes through the Windows Task Manager by pressing Ctrl+Shift+Esc keys at the same time and then clicking on the Processes tab. If the following processes are present then your computer might be infected: dumpserv.com nvctrl.exe, icthis.exe, ictun.exe, waun.exe, isfmntr.exe, G2-tmp.exe, sbmntr.exe, sbsm.exe, sbun.exe, scit.exe, scm.exe, scu.exe, uninst.exe, G5-tmp.exe, isfun.exe and msmsgs.exe.
  
  

Video ActiveX Registry Entries

• Just like most of other software, legit or not, Video ActiveX creates new registry values that must be removed when deleting this virus off of your computer. However, you must be careful not to delete any other registry entries that might be viable for other programs. The following registry entries have been found associated with Video ActiveX:
  SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  
  SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
  
  SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  
  Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  
  SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  {41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  
  {60dea04c-9817-4309-bfa2-f8a1766c3cd1}
  
  {D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
  
  {B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  
  {ab75cc7d-2751-4144-a278-5462d5a5884c}
  
  {6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  
  SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
  
  Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  
  SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  
  HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
  
  HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
  
  HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT
  
  CurrentVersionWinlogonShell=explorer.exe
  
  msmsgs.exe
  
  HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrent
  SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  
  Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  
  SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
  
  SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  
  Online Add-on
  
  {23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  
  NetProject
  
  {10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  
  Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  
  Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
  
  {a6d478c6-7961-4fe9-be4b-e621dd640112}
  
  Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  
  F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
  
  10C52A42-DB8B-4ade-AA4A-CED6A8282B85
  
  {F2BADA0D-FD61-45EF-A994-64A073FD6613}
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  
  HKEY_CURRENT_USER\Software\Online Add-on
  
  {aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
  
  {2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
  
  c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
  
  E404.e404mgr.1
  
  {69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  
  {c0ca766d-060c-48e1-b536-205e321bd174}
  
  Microsoft\Windows\CurrentVersion\Uninstall\Web Application
  
  Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
  
  Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
  
  Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
  
  Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
  
  Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  
  BA0BACB5-FC95-451E-94D2-4959AB0949D2
  
  F10587E9-0E47-4CBE-84AE-7DD20B8684CC
  
  {747e1fbe-b70f-441d-bbca-6e536c04924a}
  
  {81705D67-3F73-4983-859B-97D0922E5ABE}
  
  7265100a-17e1-41bf-bd08-63b95a25a9c3
  
  {27cb634d-c84e-4c00-9b53-f5523601dbad}
  
  Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
  
  {F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  
  E404.e404mgr
  
  Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  
  {C03FD59D-9104-44B7-929A-9EAA0BA05211}
  
  {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  
  {E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
  
  {F7D09218-46D7-4D3D-9B7F-315204CD0836}
  
  {499B8A53-5949-4625-A8BF-A4D934AFC9DA}
  
  {E63648F7-3933-440E-B4F6-A8584DD7B7EB}
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  
  Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
  
  Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
  
  Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
  
  %UserProfile%\Application Data\Microsoft\Crypto\RSA
  
  %UserProfile%\Application Data\Microsoft\ProtectObjects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
  
  Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  
  Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
  
  

Video ActiveX .DLL Files

• This spyware creates the following DLL files that are also essential for its proper functioning on your computer: dtjby.dll, antzozc.dll, Trojan.Zlob|eulbn.dll, werbetpwg.dll, sysdivx.dll, vipextnog.dll, werbetlrw.dll, vipextgpk.dll, vipextpxm.dll, voipwet.dll, fsehfcu.dll, qhcvdw.dll, findsiteonline.dll, 1201639705.dll, 1201639702.dll, ofcpi.dll, 1202030455.dll, iinqyl.dll, 1198448796.dll, sbmdl.dll, wamdl.dll, 1198448799.dll, 1202567261.dll, 1202650266.dll, 1203140349.dll, 1203634438.dll, 1203846321.dll, hdtip.dll, werbettxf.dll, ictmdl.dll, isfmdl.dll, nczupfw.dll and uimcu.dll.
  
  

Video ActiveX Files

• Once inside your computer system this virus creates the following files: ncompat.tlb, hp[X].tmp, msvol.tlb, RSA, Protect, vnp7s.net, zxserv0.com and dumpserv.com.