Ourxin Description:                                        Speedup Your PC !

Ourxin is a Trojan that displays advertisements on the compromised computer. It may also log browser activities.

Anti-keyloggerT is a reliable tool to remove keyloggers, both known and unknown.

Remove the Trojan Using Spyware Doctor! More info about Spyware Doctor.

Sponsored Links:

Ourxin Removal:

To remove Ourxin, please follow the instruction:

1. Terminate the process in Tasks Manager if exist:
   wmpdrm457.exe
    
2. Click Start > Run. Type REGSVR32 -u <Dll_name>. Then click OK. Replace <Dll_name> with followings:
   cfs7zd.DLL
   cfsbho.dll
   cfsupd.dll
   cfsys.dll
   intro.tpl
   linbak.dll
   lowlvl.dll
    
3. Click Start > Run. Type REGEDIT. Then click OK. Navigate to and delete the registry subkeys:
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\cfsbho.DLL
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{B46D3E4A-3F54-497D-AFFD-
   464AAE8098EF}
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{16A770A0-0E87-4278-B748-
   2460D64A8386}
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A4280AD-9B37-4922-A51D-
   73F3C3A32AF7}
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A4BC2506-C00C-4D2E-B47F-
   0BB4C2C74CCF}
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CE82AFC1-5E4B-4F19-A3E3-
   4FFF55F3D279}
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2511DE40-34A3-4C6A-B1B2-
   C5C92A2F00BE}
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B46D3E4A-3F54-497D-AFFD-
   464AAE8098EF}
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cfsbho.BHelper
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cfsbho.BHelper.1
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHelper.MyIEHelper
   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHelper.MyIEHelper.1
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
   \CurrentVersion\Explorer\Browser Helper Objects\{16A770A0-0E87-4278-B748-2460D64A8386}
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
   \CurrentVersion\Explorer\Browser Helper Objects\{8A4280AD-9B37-4922-A51D-73F3C3A32AF7}
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cfs
   HKEY_USERS\S-1-5-21-1587740722-702901464-1649019846-500\Software\mscfs
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   "mscfs" = "RUNDLL32 %System%\msibm\cfsys.dll,cfs"
   Registry management is too hard? Download Registry Mechanic , and you will find it too easy!
    
4. Remove the following directories from %System% if exist:
   %System%\bakcfs
   %System%\msibm

Spyware Doctor can automatically remove the Trojan. Even if you remove it manually, we recommend you should use Spyware Doctor to make sure it's completely removed from your system and will not be reinstalled by itself.

Download the last version of Spyware Doctor to protect your system.

More Removal Instructions for Emerging Adware & Spyware