Manual removal of xxx.exe

xxx.exe (W32.Bropia)
xxx.exe is registered as a downloader. This process usually comes bundled with a virus or spyware and its main role is to do nothing other than download other viruses/spyware to your computer. This process is a security risk and should be removed from your system.
Damage Level : Highly Dangerous
Distribution Level: Medium
Download Auto Removal Tool for xxx.exe (W32 Bropia)
Manual Removal Instructions
Recommend Removal from Safe Mode:
How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.
The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal

• %System%\msnadp32.exe
• %System%\adaware.exe
• %System%\VB6.EXE
• %System%\lexplore.exe
• %System%\Win32.exe
• %System%\xxx.exe

The worm also uses P2P networks to spread. It copies itself to the shared directory of numerous P2P applications using the following file names:
Adult ID Check.exe, Aim Flooder.exe, Aim Hacker.exe, AIMHacks.exe, Anarchist CookBook.exe, AVPDVDRip.mpg.exe, BF1942FULL.exe, BFVietnam.exe, BigBoobs.exe, BigBoobsXXX.exe, Britney XXX.exe, broadband wizard.exe, cable accelerator.exe, cable uncapper.exe, CallofDutyFULL.exe, CoolGames.exe, Cool_Games.exe, CounterStrike.exe, CounterStrikeSOURCE.exe, CounterStrikeSourceFULL.exe, Cracker Game.exe, Cracks Collections.Exe, Credit Card.exe, Delphi6 Keygen.exe, DOOM3_FULL.exe, DownLoad Accelerator Plus.exe, Dreamcast BootDisc.exe, Dropitlikeitzhot.exe, DVDRipper.exe, Easy CD Creator 5.exe, email hacker.exe, exeeenSaver.exe, F-ProtAV-Full.exe, FBISecretDocuments.exe, FTP Commander.exe, Ftp Cracker.exe, Ftp Hacker.exe, FuckedHARDXXX.exe, Gladiator (Movie) - Full Downloader.exe, GTAViceCity.exe, Hacker Kit.exe, Hacker.exe, HackingWebpage.exe, HackingWindowsXP.exe, HackingXP.exe, HalfLife2FULL+Crack.exe, HalfLife2FULL.exe, Halflife2KeyGen.exe, HalfLife2_FULL.exe, Hotmail Account Hacker.exe, Hotmail Hack.exe, Hotmail Hacker.exe, Hotmail Password Cracker.exe, HotmailHackerKit.exe, How-to-Hack.exe, HowtoHack.exe, Icq Ad Remover.exe, Icq Banner Remover.exe, ICQ Hack.exe, icq hacker.exe, icq ip patch.exe, Ident Faker.exe, Ident Spoofer.exe, IE6 Final.exe, InDaClub.exe, irc flooder.exe, IRobotDVDRip.mpg.exe, Jasc Paint Shop Pro 7 (Full).exe, JeniferLopezNUDE.exe, Johnny English (Movie) - Full Downloader.exe, Kazaa ad remover.exe, LanGuard NetScan.exe, Linux RootKit.exe, Matrix Reloaded.exe, McafeeAntiVirus.exe, MedalofHonorPacificAssultFULL.exe, Microsoft Office Full.exe, MiddleSchoolPornXXX.exe, Mirc6 Full.exe, mirc6 keygen.exe, Mp3 Maker Pro.exe, mp3 to wav full.exe, Msn Hacker.exe, MSN Messenger Password Stealer.exe, MS_Frontpage.exe, NeroBurningRom 6.exe, Norton AntiVirus Full.exe, Norton Keygen-All Vers.exe, NortonAntirVirus2005FULL.exe, NortonAntiVirus2005FULL.exe, NortonPersonalFirewallFULL.exe, NudeCheerleaders.exe, OfficeXP sp2 express.exe, PasswordCrackers.exe, PCChillen.exe, pE packer.exe, Peck.exe, PhotoShopCS8.0_Crack.exe, PipeBombTutorial.exe, PreTeenBlowJob.exe, PreTeenSEX.exe, PreTeenXXX.exe, PS1 BootDisc.exe, PS2 BootDisc.exe, PSXCopy Full.exe, Salford.exe, Serials 2k.exe, Serials Collections.exe, SexyChickXXXHarcore.exe, SexyTeen.exe, Simpsons.exe, SluttyCheerleaders.exe, SohposAntiVirusFULL.exe, Sopohs_Anti_Virus.exe, SpywareKiller.exe, SteelCap.exe, StylesXP.exe, Sub7 Master Password.exe, Sub7 Remover.exe, SwordFish (Movie) - Full Downloader.exe, SxyTeenagePorn.exe, SxyTeenageSEX.exe, SxyTeenFuckedHARD.exe, SxyTeenGetsItuptheASS.exe, TeenSexHardcore.exe, Trillian Patcher.exe, Trillian Pro Full.exe, Trojan Remover.exe, uin2ip.exe, VS.Net Patcher.exe, Wadle.exe, WallPapersXXX.exe, webpage hacker.exe, WebpageHackingTools.exe, WebRootSpySweeper.exe, Westdene.exe, Win Proxy.exe, Win Shares Cracker.exe, Win-RAR-FULL+CRACK.exe, Win-RAR-FULL.exe, Win98 Hacker.exe, WinXP Keygen.exe, WinXPHacking.exe, www hacker kit.exe, XPHackes.exe, xxx exeeensaver.exe, XXX Virtual Sex.exe, XXXCollection.exe, XXXHighSchoolSluts.exe, XXXMagaPack.exe, XXXTeenSexXXX.exe, XXXWallpaperCollection.exe, Yahoo Hacker.exe, Zip_RAR_PWCracker.exe, ZoneAlarm Pro Full.exe, ZoneAlarm.exe


If you have any of these files in running process from task manger, end the process before removal.
Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg


Manual Removal From Registry
Click Start, Run,Type regedit,Click OK.
Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Download and run this UnHookExec.inf, and then continue with the removal.

HKEY_USERS\S-1-5-21-1482476501-162531612-839522115-1003\Software\Microsoft\OLE

WinPWD Manager="pwmgr.exe"
HKEY_USERS\S-1-5-21-1482476501-162531612-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run
WinPWD Manager="pwmgr.exe"
HKEY_USERS\S-1-5-21-1482476501-162531612-839522115-1003\Software\Microsoft\Windows\CurrentVersion\RunServices
WinPWD Manager="pwmgr.exe"
HKEY_USERS\S-1-5-21-1482476501-162531612-839522115-1003\SYSTEM\CurrentControlSet\Control\Lsa

WinPWD Manager="pwmgr.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole

WinPWD Manager="pwmgr.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

WinPWD Manager="pwmgr.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

WinPWD Manager="pwmgr.exe"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa

WinPWD Manager="pwmgr.exe"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

WinPWD Manager="pwmgr.exe"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\OLE
In the right pane, delete the value:
"win32" = "winhost.exe"

Exit the Registry Editor,
Restart your Computer.

Search Registry For Virus File Names listed above to remove completely,
Edit Menu - Find, enter Keyword and remove all value that find in search.

Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Killbox (Freeware)