RoMeO A.K.A ILLS [CIXENT]

This is virus is known as CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb] . This RoMeO A.K.A ILLS [CIXENT] copied these files to C:WINDOWSsystem32 folder:



C:WINDOWSsystem32V3-Force.exe

C:WINDOWSsystem32cipaplu.exe

C:WINDOWSsystem32mycaption.reg

C:WINDOWSsystem32butuhlu.bat

C:WINDOWSsystem32forattrib.bat

C:WINDOWSsystem32makedir.bat



and will change your C drive name to:



(C:) jadi RoMeO A.K.A ILLS [CIXENT]



RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb] will display a popup title:



Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!! x100 words



And will display a "51″ icon on the system tray.



The solutions to RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb virus is to delete all the files that it have copied, and delete all the registry entries containing the name of those files. To delete those registry entries:



1. Run regedit.

2. Click on the menu "Edit".

3. Choose "Find".

4. Type in the name of the files that the RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb virus have copied, and delete them.



Make sure to update your Antivirus or any other Malicious scanner program such as adware scanner or spyware scanner, and run a full scan using these Software after cleaning and removing this RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb virus manually.