How to Remove Pictures EXE Viruses

By Tim Mammadov

The "my picture.exe" and "picture.exe" are malicious process files that are installed by the Obsorb and Exvid Trojans. The Obsorb Trojan executes a program that shuts down and restarts your Windows continuously unless you start the operating system in the safe mode. The Exvid trojan spreads itself via email attachments and downloads keyloggers to infected computers. The keyloggers record every key pressed on computer and then send this information back to the originators. Remove this dangerous viruses immediately to prevent any further damage to your PC.

Remove the Obsorb Trojan Virus

Step 1

Press and hold the F8 key as soon as your computer comes back on after a restart but before the Windows logo is displayed. Use your arrow keys to highlight "Safe mode" in the "Advanced boot options" screen and press Enter to start Windows in the safe mode.

Step 2

Press the Ctrl, Shift and Esc keys at the same time to start the Task Manager. Click the "Processes" tab in the Task Manager's window. Select "waste.exe" from the list of the processes and click "End Process" at the bottom of the window. End the following processes the same way: "muse.exe," "obsorb.exe," "ezy.exe," "nasty.exe," "my picture.exe" and "picture.exe." Close the Task Manager.

Step 3

Go to the Start menu, type "waste.exe" in the "Start Search" box and press Enter. Delete all search results. Delete the following files the same way: "muse.exe," "obsorb.exe," "ezy.exe," "nasty.exe," "my picture.exe" and "picture.exe."

Step 4

Restart your computer.

Remove Exvid Virus

Step 1

Press the Ctrl, Shift and Esc keys at the same time to start the Task Manager. Click the "Processes" tab in the Task Manager's window, select "sexvideo[X].exe" from the list of the processes and click "End Process" button at the bottom of the window. End the following processes in the similar manner: "sexvideo.exe," "myvideo[X].exe," "myvideo.exe," "mypicture[X].exe," "mypicture.exe," "mypassword[X].exe," "mypassword.exe," "mydocument[X].exe," "mydocument.exe" and "svchost.exe." Close the Task Manager.

Step 2

Go to the Start menu, type "regedit" in the "Start Search" box and press Enter to start the Registry Editor. Browse to and delete the following registry entries:HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunsvchost Netware ManagerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsvchostNetwareManagerClose the Registry Editor.

Step 3

Go to the Start menu, type "cmd" in the "Start Search" box and press Enter to start the command-line window. Type "regsvr32 /u kdbdll.dll" in the "Start Search" box and press Enter to unregister the DLL.

Step 4

Go to the "Start" menu, type "kdbdll.dll" in the "Start Search" box and press "Enter." Delete all search results. Find and delete the following files in the similar manner: ""sexvideo[X].exe," "sexvideo.exe," "myvideo[X].exe," "myvideo.exe," "mypicture[X].exe," "mypicture.exe," "mypassword[X].exe," "mypassword.exe," "mydocument[X].exe," "mydocument.exe" and "svchost.exe."

Step 5

Restart your computer.

Tips & Warnings

  • Back up the system registry before removing the registry entries.
  • Delete only the listed registry entries to avoid damage to the operating system.