How to Remove Pictures EXE Viruses

The "my picture.exe" and "picture.exe" are malicious process files that are installed by the Obsorb and Exvid Trojans. The Obsorb Trojan executes a program that shuts down and restarts your Windows continuously unless you start the operating system in the safe mode. The Exvid trojan spreads itself via email attachments and downloads keyloggers to infected computers. The keyloggers record every key pressed on computer and then send this information back to the originators. Remove this dangerous viruses immediately to prevent any further damage to your PC.

...

Remove the Obsorb Trojan Virus

Step

Press and hold the F8 key as soon as your computer comes back on after a restart but before the Windows logo is displayed. Use your arrow keys to highlight "Safe mode" in the "Advanced boot options" screen and press Enter to start Windows in the safe mode.

Step

Press the Ctrl, Shift and Esc keys at the same time to start the Task Manager. Click the "Processes" tab in the Task Manager's window. Select "waste.exe" from the list of the processes and click "End Process" at the bottom of the window. End the following processes the same way: "muse.exe," "obsorb.exe," "ezy.exe," "nasty.exe," "my picture.exe" and "picture.exe." Close the Task Manager.

Step

Go to the Start menu, type "waste.exe" in the "Start Search" box and press Enter. Delete all search results. Delete the following files the same way: "muse.exe," "obsorb.exe," "ezy.exe," "nasty.exe," "my picture.exe" and "picture.exe."

Step

Restart your computer.

Remove Exvid Virus

Step

Press the Ctrl, Shift and Esc keys at the same time to start the Task Manager. Click the "Processes" tab in the Task Manager's window, select "sexvideo[X].exe" from the list of the processes and click "End Process" button at the bottom of the window. End the following processes in the similar manner: "sexvideo.exe," "myvideo[X].exe," "myvideo.exe," "mypicture[X].exe," "mypicture.exe," "mypassword[X].exe," "mypassword.exe," "mydocument[X].exe," "mydocument.exe" and "svchost.exe." Close the Task Manager.

Step

Go to the Start menu, type "regedit" in the "Start Search" box and press Enter to start the Registry Editor. Browse to and delete the following registry entries:

Step

HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunsvchost Netware Manager HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsvchostNetwareManager

Step

Close the Registry Editor.

Step

Go to the Start menu, type "cmd" in the "Start Search" box and press Enter to start the command-line window. Type "regsvr32 /u kdbdll.dll" in the "Start Search" box and press Enter to unregister the DLL.

Step

Go to the "Start" menu, type "kdbdll.dll" in the "Start Search" box and press "Enter." Delete all search results. Find and delete the following files in the similar manner: ""sexvideo[X].exe," "sexvideo.exe," "myvideo[X].exe," "myvideo.exe," "mypicture[X].exe," "mypicture.exe," "mypassword[X].exe," "mypassword.exe," "mydocument[X].exe," "mydocument.exe" and "svchost.exe."

Step

Restart your computer.