Manual Removal

• 1). Print these directions before proceeding because you will have to restart your computer.
  
  
• 2). Click the Windows "Start" button. Click "Run," type "%SystemRoot%\system32\restore\rstrui.exe" (without quotes) and then click "OK."
  
  
• 3). Click "Create a restore point" on the "Welcome to System Restore Page" and click "Next." Type in a name for your restore point and click "Create." Click "Close" This will back up the system and create a restore point you can come back to in case of a system error when removing this malicious parasite.
  
  
• 4). Click the Windows "Start" button and click the "Control Panel." Double-click "System" and click the "System Restore" tab. Place a check on "Turn off System Restore" to disable it. Click "OK" and restart your computer.
  
  
• 5). Press "Ctrl," "Alt" and "Delete" together to open the Windows Task Manager after your computer has restarted. Click the "Processes" tab, scroll down and click "virusburst.exe." Click "End Process."
  
  
• 6). Click the Windows "Start" button and select "Run." Type "regedit" (without quotes) and press "Enter" to open the registry.
  
  
• 7). Press "F3" to open the search box. Search for and delete the following registry entries:
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\VirusBurst
  HKEY_CLASSES_ROOT\TypeLib\{728E63B0-5165-4E98-9C83-EF987EEB66C9}
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{728E63B0-5165-4E98-9C83-EF987EEB66C9}
  HKEY_LOCAL_MACHINE\SOFTWARE\VirusBurst
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusBurst
  Exit the registry.
  
  
• 8). Click the Windows "Start" button and click "Run." Type "cmd" (without quotes) and press "Enter" to open the command prompt. Move to the next step to unregister the .dll files before you can eventually delete them.
  
  
• 9). Type "regsvr32 /u + (dll file)" (without quotes) and press "Enter." (For example, to unregister dlt.dll, you type "regsvr32 /u dlt.dll") and press "Enter." Once you press "Enter," a message will pop up saying the .dll file has been unregistered. Unregister each of the following dll files:
  geplxss.dll
  higehsg.dll
  tvomnc.dll
  xkrdk.dll
  
  
• 10
  
  Click the Windows "Start" button and click "Search." Click "All Files and Folders" to open the search box. Click "More Advanced Options" and place a check on all the options.
  
  
• 11
  
  Search for and delete the following files:
  spydawn.exe
  geplxss.dll
  higehsg.dll
  tvomnc.dll
  xkrdk.dll
  sd.ini
  
  
• 12
  
  Empty the recycle bin. Click the Windows "Start" button and click the "Control Panel." Double-click "System" and click the "System Restore" tab. Remove the check from "Turn off System Restore" to reactivate it. Click "OK" and restart your computer.
  
  

Automatic Removal

• 1). Download and install Malwarebytes' Anti-Malware free (see Resources).
  
  
• 2). Launch your program after it has installed and click the "Scanner" tab. Click the "Perform quick scan" radio button and click "Scan." The program will scan for VirusBurst malicious files in the system folders and the registry.
  
  
• 3). Click "OK" when the scan is complete and click "Show scan results."
  
  
• 4). Click any detected VirusBurst files and click "Remove Selected." Malwarebytes' Anti-Malware will remove all the malicious files from the system folders and the registry.