Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 30
First Seen: July 24, 2009
Last Seen: April 30, 2022
OS(es) Affected: Windows

VirusHeat Image

VirusHeat is a rogue anti-spyware application that issues fake computer scan results when you use it on your machine. VirusHeat creators and their marketing affiliates propagate and install VirusHeat's rogue anti-spyware application through a download that is bundled with a Trojan generated by a Browser Helper object (BHO). Once your computer gets infected with the Trojan, it will start showing up an annoying popup message. Do not click on any of the popups because it will redirect your IE to VirusHeat's website or another rogue website where you will be fooled into downloading VirusHeat's anti-spyware application.


15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
F-Secure Trojan-Downloader.Win32.Agent.kdp
Sophos Troj/FakeVir-AM
Panda Application/AntivirGear
Microsoft TrojanDownloader:Win32/Zlob.CCA.dll
Ikarus Trojan-Downloader.Win32.Bojo.t
Fortinet W32/Bojo.T!tr.dldr
F-Secure W32/DLoader.ECQZ
F-Prot W32/Trojan2.SGM
eWido Downloader.Bojo.t
DrWeb Trojan.Fakealert.origin
ClamAV Trojan.Downloader-16394
CAT-QuickHeal TrojanDownloader.Bojo.t
BitDefender Trojan.Downloader.Agent.YTM
AVG Generic9.SXN
Avast Win32:Bojo-D

SpyHunter Detects & Remove VirusHeat

VirusHeat Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

VirusHeat may create the following file(s):
# File Name MD5 Detections
1. wamdl.dll c1de5afec9ffb9d0d387696603b28b63 3
2. wamdl.dll 826129b816ec959d9318d4edf3cff8c2 3
3. VirusHeat 4.4.exe c923b25ded9d6ce4b0764f7e12f3aea5 0
4. zfaiqwr.dll ed4c08164d83f542aa6fe1b374e80c02 0
5. rkaxfza.dll fc5ea3de13443108adb79636f0fa824b 0
6. rkvdr.dll 4fe83d73e0b4429837c3e7e6e64d29af 0
7. wamdl.dll ee24523c291e1f25c86dbb01fee1760b 0
8. wamdl.dll f366094b504aa40c8df143fa740c198c 0
9. wamdl.dll b409322f685fdfcefc7061f4c5ec2de5 0
10. baoohy.dll 5da79caedc369394d262d2638671361b 0
11. kknwg.dll d6ad5cd8a9b52f4377bd0341628fa909 0
12. sozctue.dll 0b75d6d6b92daf96e5f566ae0db43599 0
13. wamdl.dll fef87b6d1186cd0c3b1e112d87d44b43 0
14. wamdl.dll d1987b9fd6f3619c7f59003f8cae9fdb 0
15. wcscqa.dll 569b09e8b839efc55fc04e6e6fa0c39a 0
16. jdxah.dll 8ac69e66124e217edb7a27f08e5b6982 0
17. guadq.dll ed8d16613814b68a44a96e04f11eb3d3 0
18. xskmoqx.dll ff30703c0853c100b7982dd0ca6f3f23 0
19. heuvth.dll bf6f3965b5d61e008e908ea24766b17b 0
20. wbchha.dll 667d620a7fb109aa2dfdc914d11cf644 0
21. txdkfh.dll c7d0dfbdedf872e7c1eee0dd91b11bd9 0
22. bubbj.dll eb4c66df3d7be479900bdce5a491a105 0
More files

Registry Details

VirusHeat may create the following registry entry or registry entries:
File name without path
Uninstall VirusHeat 4.3.lnk
VirusHeat 4.3 Website.lnk
VirusHeat 4.3.lnk


The following cookies were found:


1 Comment

Virus Heat is not as bad as Security Tools. Security Tools block everything, including your ms paint software. Both Virus Heat and Security Tools should be avoided at all cost and if you have one of them or any other rouge software, it is best to kill it using Spy Hunter, and if you can't run it, try running Spy Hunter in Safe Mode.


Most Viewed