Security Stronghold security made easy

Remove Antiwebshell Using instuctions below

Antiwebshell is classified as computer worm. As any other worm Antiwebshell is self-copying and replicating threat and it gets to your PC through local or global network. And the you will get the most imact on your network and internet connection. Worms are not easy to remove and we advise you to download WiperSoft Antispyware Malware Remediation Tool or ask our specialists for help. Otherwise use this manual guide to remove Antiwebshell

For our customers who own one of our products we provide FREE help in removing Antiwebshell redeeming problems connected with Antiwebshell in case our software didn't help!

If you are customer and Antiwebshell Removal Tool can't detect the problem - fill in the form below. Our support staff will contact you in several minutes and give a step-by-step guide on how to get rid of Antiwebshell. In complex cases specialist will connect your PC and remove threat manually. Mention that we guarantee removal of Antiwebshell.

Click to ask professional of Antiwebshell solution

Try to describe your problem step-by-step. Attach suspicious files:

We'll reply you in 10 minutes or less
* Name:
* E-mail:
* Problem summary:
* Detailed description:
Attach suspicious file:
Here you can attach file you suspect to be worm or source of problem. If you want to attach several files, put them into one archive and attach it instead.

We'll contact you back in several minutes after you click on this button.

We guarantee individual solution !

 

It is important:

  1. We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you Antiwebshell removal solution.
  2. All fields of this form are obligatory.

Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

If you want to learn more about the Antiwebshell use links below :

* Description of Antiwebshell. Some technical details of Antiwebshell infectionl.

* Remove Antiwebshell by hand for free using special instuctions.

* Download program that will delete Antiwebshell automatically.

* Instant professional support in removing Antiwebshell from your computer by our Security Support Team.


Threat indicator: HIGH

Technical details of the threat

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Antiwebshell

kuai8setup.exe

Worm

Win32 (Windows 9x, Windows XP, Windows Vista, Windows 7, Windows 8)


Nasty application originated from China.

chinaglag

Creates multiple files. Classified by most antiviruses as Autorun worm or Gen.Trojan.

MD5 of the installer:

6c4a4ea97301768e29b05aa54adde554

Changes homepage to a weird one (2345abc.com). This site is a fake clone of famous Asian search engine Baidu. Also comes bundled with setup of a program named Kuai8.


How Antiwebshell infected your PC?

Antiwebshell

Antiwebshell copies its file(s) to your hard drive. Its typical file name is kuai8setup.exe (if it is not using random names for executable files). Then it records in startup key with name Antiwebshell and value kuai8setup.exe. You can also find it in your processes list with name kuai8setup.exe or Antiwebshell. Usually Antiwebshell influences your internet or network connection. If you have any additional questions about Antiwebshell, please ask them in the form above and we'll contact you as soon as possible.

Download Wipersoft Antispyware

Download this advanced removal tool and solve problems with Antiwebshell and kuai8setup.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Antiwebshell

* WiperSoft Antispyware was developed to remove threats like Antiwebshell in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

Features of WiperSoft Antispyware

* Removes all files created by viruses.

* Removes all registry entries created by viruses.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if Wipersoft fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.


Download Spyhunter Remediation Tool by Enigma Software

Download antimalware designed specifically to remove threats like Antiwebshell and kuai8setup.exe (download of fix will start immediately):

Download AntiMalware to remove Antiwebshell

Features of Spyhunter Remediation Tool

* Removes all files created by Antiwebshell.

* Removes all registry entries created by Antiwebshell.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Spyhunter Remediation Tool fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Manual Solution


How to delete Antiwebshell files, folders, and registry keys?

Manually deleting registry keys folder and files belonging to Antiwebshell usually helps to get rid of it but to be sure you need to remove malicious process from startup and unregistering all corresponding DLLs as Antiwebshell can restore itself. Missing DLL's corrupted by Antiwebshell can be replaced by original from you Windows CD.

To remove Antiwebshell once and forever, you need:

1. Prevent the following processes from running and delete the appropriate files:

  • ˹ÍзòÍøҳľÂíɨÃèר¼Ò.lnk
  • kuai8setup.exe
  • nsj5.tmp
  • Baidubar.bmp
  • Base64.dll
  • blowfish.dll
  • inetc.dll
  • InstallOptions.dll
  • ioSpecial.ini
  • left.bmp
  • modern-header.bmp
  • nsj6.tmp\modern-wizard.bmp
  • nsj6.tmp\nsDialogs.dll
  • nsj6.tmp\nsRandom.dll
  • nsj6.tmp\System.dll
  • nsj6.tmp\xconfigx.ini
  • 8P2F8PMB\5[1].xml
  • kuai8_setup[1].exe
  • ˹ÍзòÍøҳľÂíɨÃèר¼Ò\²é¿´Èí¼þ×îа汾.lnk
  • ˹ÍзòÍøҳľÂíɨÃèר¼Ò\˹ÍзòÍøҳľÂíɨÃèר¼Ò.lnk
  • ˹ÍзòÍøҳľÂíɨÃèר¼Ò\жÔر¾Èí¼þ.lnk
  • Att.db
  • AttD.db
  • Ext.db
  • ExtD.db
  • config.inf
  • SkinH_CB.dat
  • SkinH_CB.dll
  • uninst.exe
  • ˹ÍзòÍøҳľÂíɨÃèר¼Ò.url
  • ÍøҳľÂíɨÃè.exe

Warning: you should delete only files located in mentioned folders and exactly with the names that are listed. Sometimes there may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool that provides safe problem solution.

**Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

2. Remove the following malicious folders:

  • C:\Program Files\AntiWebshell\
  • C:\Program Files\AntiWebshell\config\
  • C:\Program Files\AntiWebshell\ShellCache

3. Remove the following malicious registry entries and\or values using Registry Editor:

  • Key: HKU\S-1-5-21-1202660629-527237240-1417001333-500\Software\Microsoft\Internet Explorer
    \Main\Start Page

    Value: www.2345abc.com
  • Key: HKU\S-1-5-21-1202660629-527237240-1417001333-500\Software\Microsoft\Multimedia
    \DrawDib
  • Key:
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\˹ÍзòÍøҳľÂíɨÃèר¼Ò
  • Key:
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ÍøҳľÂíɨÃè.exe

Next threat: AV Security 2012 »

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2024 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.