BCWVZWBH.EXE - Dangerous
BCWVZWBH.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
BCWVZWBH.EXE is Trojan/Backdoor.
Kill the process BCWVZWBH.EXE and remove BCWVZWBH.EXE from Windows startup.
Related files:
c:\Inetpub\wwwroot\kkvwbsrw.exe
%ProgramFiles%\Common Files\System\ado\tsektjkj.exe
%ProgramFiles%\NetMeeting\rsewzjqn.exe
c:\tvsknrse.exe
%Windir%\pchealth\helpctr\System\CompatCtr\hrtbebze.exe
%Windir%\pchealth\helpctr\System\CompatCtr\jbnxjtkn.exe
%Windir%\pchealth\helpctr\System\CompatCtr\tnslrrhk.exe
%Windir%\pchealth\helpctr\System\CompatCtr\zlhqrlbx.exe
%Windir%\pchealth\helpctr\System\DVDUpgrd\shrrtjet.exe
%Windir%\pchealth\helpctr\System\ErrMsg\vlvxqrek.exe
%Windir%\pchealth\helpctr\System\errors\jcjjlqnq.exe
%Windir%\pchealth\helpctr\System\NetDiag\hsjqschn.exe
%Windir%\pchealth\helpctr\System\NetDiag\xrvxszvs.exe
%Windir%\pchealth\helpctr\System\panels\nntlskwn.exe
%Windir%\pchealth\helpctr\System\panels\sncncweb.exe
%Windir%\pchealth\helpctr\System\rc\qbrblthb.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Common\hxrshqsj.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Common\rwcjrqhw.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Common\seshhtth.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\ekjvhbcn.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\jjennetl.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\knenvxlj.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\ttzvrbzr.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\wbjbjelb.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\zqwkjbbt.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\bbsbrlee.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\kbzzlwlr.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\rbntkevt.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\shnkjjbh.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ccthwjlr.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ctjxljxh.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ezslqrbz.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\neqvzkeh.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\shrnxshq.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\rqxjhbsl.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\rzqstbqq.exe
%Windir%\pchealth\helpctr\System\Remote Assistance\wesnhzec.exe
%Windir%\pchealth\helpctr\System\sysinfo\bjlkjrls.exe
%Windir%\pchealth\helpctr\System\sysinfo\cntbrbzr.exe
%Windir%\pchealth\helpctr\System\sysinfo\jbrhbztz.exe
%Windir%\pchealth\helpctr\System\sysinfo\jrtqcssx.exe
%Windir%\pchealth\helpctr\System\sysinfo\rbcjjwqr.exe
%Windir%\pchealth\helpctr\System\sysinfo\rercrnhh.exe
%Windir%\pchealth\helpctr\System\sysinfo\rnbrkrlv.exe
%Windir%\pchealth\helpctr\System\sysinfo\vkchbbxh.exe
%Windir%\pchealth\helpctr\System\UpdateCtr\lwklbvze.exe
%Windir%\pchealth\helpctr\System\UpdateCtr\qxshkkqn.exe
%Windir%\pchealth\helpctr\System\UpdateCtr\rrbvcsbb.exe
%Windir%\pchealth\helpctr\System\UpdateCtr\snqesjrk.exe
%Windir%\pchealth\helpctr\System\UpdateCtr\trkhkjxz.exe
%Windir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\erwskeqr.exe
%Windir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\kkrtrbns.exe
%Windir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\vxwqhwzs.exe
%Windir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\vxwqhwzs.exe
%Windir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\vxwqhwzs.exe
%Windir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\vxwqhwzs.exe
%Windir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\vsekkehe.exe
%System%\urdvxc.exe
%Windir%\Web\wcxnjhhj.exe