This is virus is known as CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb] . This RoMeO A.K.A ILLS [CIXENT] copied these files to C:\WINDOWS\system32 folder:

C:\WINDOWS\system32\V3-Force.exe
C:\WINDOWS\system32\cipaplu.exe
C:\WINDOWS\system32\mycaption.reg
C:\WINDOWS\system32\butuhlu.bat
C:\WINDOWS\system32\forattrib.bat
C:\WINDOWS\system32\makedir.bat

and will change your C drive name to:

(C:) jadi RoMeO A.K.A ILLS [CIXENT]

RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb] will display a popup title:

Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!! x100 words

And will display a “51″ icon on the system tray.

The solutions to RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb virus is to delete all the files that it have copied, and delete all the registry entries containing the name of those files. To delete those registry entries:

1. Run regedit.
2. Click on the menu "Edit".
3. Choose "Find".
4. Type in the name of the files that the RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb virus have copied, and delete them.

Make sure to update your Antivirus or any other Malicious scanner program such as adware scanner or spyware scanner, and run a full scan using these Software after cleaning and removing this RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb virus manually.

virus cleaner and remover here.

Share this articles with everyone:

Hide Sites

See also:

• Remove VBS/ButSur-A or BHA.DLL.VBS fix (6)
• Trixcu.A worm (1)
• The Genealogy of Virus (8)
• The best antivirus program (2)
• RoMeO A.K.A ILLS [CIXENT] cleaner and remover (2)