Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

VirtualMaid is a browser hijacker that changes Internet Explorer default start and search pages to web sites on the searchmaid.com domain. SearchMaid installs as a toolbar, delivers popups, and may come bundled with other questionable programs. VirtualMaid may be difficult to remove because it secretly runs on every Windows startup.

Automated Detection for VirtualMaid

VirtualMaid Manual Removal Instructions

Stop VirtualMaid system processes:

pop-uper.exe
vminstaller.exe
vm.exe
msole32.exe
helper.exe
pop-uper.exe5e60971403.exe
vminstaller.exe
vm.exe
msole32.exe
helper.exe
5e60971403.exe

Unregister VirtualMaid DLLs:

virtualmaid.dll
govm.dll

Remove VirtualMaid files:

uninstall.bat
logo.bmp
2.bmp
1.bmp
virtualmaid.xml
govm.dll.htm
virtualmaid.dll
govm.dll
pop-uper.exe
vminstaller.exe
vm.exe
msole32.exe
helper.exe
uninstall.bat5e60971403.exe
logo.bmp
2.bmp
1.bmp
virtual maid.xml
govm.dll.htm

Remove VirtualMaid registry values:

HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\uninstall\\virtualmaidvirtualmaid
HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversionguid
HKEY_CURRENT_USER\\software\\virtualmaid
HKEY_CLASSES_ROOT\\vm.vmobj.1
HKEY_CLASSES_ROOT\\vm.vmobj
42c7653a-5834-45a1-899a-ed0dfa370d21
ab2dde8c-cbff-491a-9825-87b8bb4cbfe0
835baa68-b5e5-47d5-a18d-2a4e0f5b72d5
HKEY_CLASSES_ROOT\\govm.contextitem.1
HKEY_CLASSES_ROOT\\govm.contextitem
8b0b6f79-c50d-4ea6-8f65-bdf18005de20
HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\uninstall\\virtual maidvirtual maid 77b2f8de-cb3f-4b6b-839b-807dd1adba1c
HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion guid
HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\toolbar {77b2f8de-cb3f-4b6b-839b-807dd1adba1c}
HKEY_CURRENT_USER\\software\\virtual maid
HKEY_CURRENT_USER\\software\\microsoft\\internet explorer\\toolbar\\webbrowser {77b2f8de-cb3f-4b6b-839b-807dd1adba1c}
HKEY_CLASSES_ROOT\\vm.vmobj.1
HKEY_CLASSES_ROOT\\vm.vmobj
HKEY_CLASSES_ROOT\\typelib\\{42c7653a-5834-45a1-899a-ed0dfa370d21}
HKEY_CLASSES_ROOT\\interface\\{ab2dde8c-cbff-491a-9825-87b8bb4cbfe0}
HKEY_CLASSES_ROOT\\interface\\{835baa68-b5e5-47d5-a18d-2a4e0f5b72d5}
HKEY_CLASSES_ROOT\\govm.contextitem.1
HKEY_CLASSES_ROOT\\govm.contextitem
HKEY_CLASSES_ROOT\\clsid\\{8b0b6f79-c50d-4ea6-8f65-bdf18005de20}
HKEY_CLASSES_ROOT\\clsid\\{77b2f8de-cb3f-4b6b-839b-807dd1adba1c}

Important Disclaimer

What is a Browser Hijacker?

VirtualMaid is a Browser Hijacker.

Browser Hijacker is a malicious application that may place additional toolbars to your browser and display unwanted advertisements on your computer screen. The hijacking technique enables the attacker to have controll over your browser. Browser hijacker may also be known as search hijacker and have an ability to change your search page and redirect your search queries. Browser hijackers are also reported to install addtional malicious ActiveX controls. Once a browser hijacker is inside your system, it may be difficult to uninstall because it tends to re-install on every Windows startup.

VirtualMaid is related to:

  » No related posts

This entry was posted on Monday, June 26th, 2006 at 11:47 am and is filed under Browser Hijackers. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.