Antiwebshell Removal: Remove Antiwebshell Forever

Let our support team solve your problem with Antiwebshell and repair Antiwebshell right now!

Leave the detailed description of your Antiwebshell problem in the form below. Our support team will contact you in several minutes and give a step-by-step instruction on how to fix Antiwebshell problem. Please be specific. Do your best describing the problem. This will help us recommend right and complete Antiwebshell problem removal solution.

Describe your problem here and we'll contact you in several minutes:

* Name:
* E-mail:
* Problem summary:
* Detailed description:
Attach suspicious file:
	Here you can attach file you suspect to be virus or source of problem. If you want to attach several files, put them into one archive and attach it instead.

We'll contact you back in 10 minutes or less after you click on this button.

Individual solution guaranteed!

 

It is important:

1. We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you Antiwebshell removal solution.
2. All fields of this form are obligatory.

Guaranteed Problem Solution

If you want to make problem with Antiwebshell and random.exe solved with the automated fix created by our professionals right now, click here (download of fix will start immediately):

Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

What is Antiwebshell? Technical details of Antiwebshell problem and Antiwebshell removal tool.

Methods for manual Antiwebshell removal.

Instant download of a program that will solve your problem automatically.

Instant professional support in solving Antiwebshell error from our Security Support Team.

Threat's profile

Nasty application originated from China.



Creates multiple files. Classified by most antiviruses as Autorun worm or Gen.Trojan.

MD5 of the installer:

6c4a4ea97301768e29b05aa54adde554

Changes homepage to a weird one (2345abc.com). This site is a fake clone of famous Asian search engine Baidu. Also comes bundled with setup of a program named Kuai8.

Antiwebshell intrusion method

Antiwebshell copies its file(s) to your hard disk. Its typical file name is random.exe. Then it creates new startup key with name Antiwebshell and value random.exe. You can also find it in your processes list with name random.exe or Antiwebshell.

If you have further questions about Antiwebshell, please fill in the form above and we'll contact you shortly.

Download program to remove Antiwebshell (Antiwebshell Removal Tool)

Recommended Solution

If you are not sure what to delete, use our award winning program - Antiwebshell Removal Tool.

Antiwebshell Removal Tool will find and fully remove Antiwebshell and all problems associated with Antiwebshell virus.

Fast, easy, and handy, Antiwebshell Removal Tool protects your computer against Antiwebshell that does harm to your computer and breaks your privacy. Antiwebshell Removal Tool scans your hard disks and registry and destroys any manifestation of Antiwebshell. Standard anti-virus software can do nothing against malicious programs like Antiwebshell. Remove Antiwebshell straight away!

Download Antiwebshell Removal Tool now

	Please take 1 second to show that you like our solution - click on this Facebook button:

How to fix Antiwebshell?

This problem can be solved manually by deleting all registry keys and files connected with Antiwebshell, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Antiwebshell.

To get rid of Antiwebshell, you should:

1. Kill the following processes and delete the appropriate files:

• ˹ÍзòÍøҳľÂíɨÃèר¼Ò.lnk
• kuai8setup.exe
• nsj5.tmp
• Baidubar.bmp
• Base64.dll
• blowfish.dll
• inetc.dll
• InstallOptions.dll
• ioSpecial.ini
• left.bmp
• modern-header.bmp
• nsj6.tmp\modern-wizard.bmp
• nsj6.tmp\nsDialogs.dll
• nsj6.tmp\nsRandom.dll
• nsj6.tmp\System.dll
• nsj6.tmp\xconfigx.ini
• 8P2F8PMB\5[1].xml
• kuai8_setup[1].exe
• ˹ÍзòÍøҳľÂíɨÃèר¼Ò\²é¿´Èí¼þ×îа汾.lnk
• ˹ÍзòÍøҳľÂíɨÃèר¼Ò\˹ÍзòÍøҳľÂíɨÃèר¼Ò.lnk
• ˹ÍзòÍøҳľÂíɨÃèר¼Ò\жÔر¾Èí¼þ.lnk
• Att.db
• AttD.db
• Ext.db
• ExtD.db
• config.inf
• SkinH_CB.dat
• SkinH_CB.dll
• uninst.exe
• ˹ÍзòÍøҳľÂíɨÃèר¼Ò.url
• ÍøҳľÂíɨÃè.exe

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use Antiwebshell Removal Tool for safe problem solution.

2. Delete the following malicious folders:

• C:\Program Files\AntiWebshell\
• C:\Program Files\AntiWebshell\config\
• C:\Program Files\AntiWebshell\ShellCache

3. Delete the following malicious registry entries and\or values:

• Key: HKU\S-1-5-21-1202660629-527237240-1417001333-500\Software\Microsoft\Internet Explorer\Main\Start Page
  Value: www.2345abc.com
• Key: HKU\S-1-5-21-1202660629-527237240-1417001333-500\Software\Microsoft\Multimedia\DrawDib
• Key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\˹ÍзòÍøҳľÂíɨÃèר¼Ò
• Key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ÍøҳľÂíɨÃè.exe

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use Antiwebshell Removal Tool for safe problem solution.

Next threat: AV Security 2012 »

Learn more about Antiwebshell and random.exe »

« Back to catalog