How to remove W3i.IQ5.fraud Virus

[Babunaj]

Sponsored Links

I am having 2 pcs at my home one of which is running on Windows XP. I have installed AVG antivirus on the same. Since last few days i found my system running very slow and behaving weird. Also many applications started crashing. So i decided to scan my system. While doing the same I have found my system is actually infected with a virus called "W3i.IQ5.fraud" Virus. My AVG was unable to terminate the this virus because it needs Admin access for the same, though i am admin and have only one user account. I removed all unwanted applications from system and yet the virus is there in my system. Can anyone suggest me how to remove W3i.IQ5 Fraud virus completely?

[Zared]

W3i.IQ5.fraud is a Trojan known for blocking programs from launching and slowing out your computer. But anyways, you have You have two options to remove W3i.IQ5.fraud Virus, First, you can use a called W3i.IQ5.fraud Virus removal tool or other third party virus removal tool to remove it manually. By 3rd party i meant tools such as Spybot-S&D or RunAlyzer. These applications are effective to remove the same. Just try out.

[Jugo]

You can go through the below manual steps to remove W3i.IQ5.fraud virus but you must know that while doing the same it may remove any key or value (in vary rare cases) that may cause your system not to start. So do it on your own risk. First of all open windows explorer and after that remove below files on your system:

%System%\drivers\[RANDOM CHARACTERS].sys
%Temp%\[random]
C:\WINDOWS\system32\[random name].dll

Now open registry editor to remove W3i.IQ5.fraud registry entries. To open windows registry editor you need to go through the below steps: go to start, click on Run. Now in run type: regedit and after that make click on ok button. Now you will get windows registry editor and under that go to the below location and remove the all keys and values which given below:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘Yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer “NoDesktop” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = ’0′

Once you remove all keys and values just restart your system and you are done.

[Captain Samuel Salt]

There is another way to get rid of this Trojan effectively. Just follow these:
Download and install Anvi Smart Defender from official site.
After installing Anvi Smart Defender, you need to update manually and along with you need to update database of ASD
Once finished with above steps, click on full scan to remove W3i.IQ5.fraud virus and all other threats.

I have tried this steps, I hope this will help you…

[Bhuvana21]

This is a Small guide to remove W3i.IQ5.fraud virus manually but I would like to suggest use this steps at your own risk. W3i.IQ5.fraud virus is a legit 7zip or similar to freeware installer. One your system infected by W3i.IQ5.fraud virus, this virus process will start at startup. So first of all you need to disable this process with help of clean boot. To perform clean boot: go to start, click on run, on run type: msconfig and after that make click on ok button. Now you will get system configuration utility windows and under that go to Startup tab. Now in Startup tab make uncheck mark in InstallIQUpdater.exe process. Once you finish with above steps, click on apply button and then reboot the system. This virus has key or values named as “8E1CB0F1-67BF-4052-AA23-FA22E94804C1” so first of all to remove this you need to go through the following locate and delete these files.

 %CommonAppData%\W3i\InstallIQUpdater\data.xml
%CommonAppData%\W3i\InstallIQUpdater\iqu.ini
%CommonAppData%\W3i\InstallIQUpdater\IQUMessageDlg.xsl
%CommonAppData%\W3i\InstallIQUpdater\updater.log
%CommonAppData%\W3i\InstallIQUpdater\InstallIQ Updater.lnk
%CommonAppData%\W3i\InstallIQUpdater\Privacy Policy.url
%CommonAppData%\W3i\InstallIQUpdater\Terms & Conditions.url
%CommonAppData%\W3i\InstallIQUpdater\Uninstall InstallIQ Updater.lnk
%CommonAppData%\W3i\InstallIQUpdater\InstallIQUpdater.exe
%CommonAppData%\W3i\InstallIQUpdater\killexplorer.bat

Sometime you cannot get these files if you have hide system file, so unhide all system file.
Now go to the below location in windows explorer and remove the all folders which given below:

%CommonAppData%\W3i\InstallIQUpdater\import
%CommonAppData%\W3i\InstallIQUpdater
%CommonAppData%\W3i

Once you finish everything close windows explorer and empty recycle bin
Now remove the below registry entries from windows registry editor. First launch windows registry using administrator id, login with administrator rights and after that click on start and then click on run, now in run type: regedit.exe and after that make click ok button. Now you will get windows registry editor and under that delete the below registry keys:

HKEY_CLASSES_ROOT\Installer\Features\1F0BC1E8FB762504AA32AF229E84401C
HKEY_CLASSES_ROOT\Installer\Products\1F0BC1E8FB762504AA32AF229E84401C
HKEY_LOCAL_MACHINE\SOFTWARE\ W3i

Now once you finish everything, just reboot the system for best result.