cixent.v3-force.lovepart.small.vb

Threat
cixent.v3-force.lovepart.small.vb
Type
Virus / Malware
Modus Operandi
copied these files to C:\WINDOWS\system32 folder:
C:\WINDOWS\system32\V3-Force.exe
C:\WINDOWS\system32\cipaplu.exe
C:\WINDOWS\system32\mycaption.reg
C:\WINDOWS\system32\butuhlu.bat
C:\WINDOWS\system32\forattrib.bat
C:\WINDOWS\system32\makedir.bat
and will change your C drive name to:
(C:) RoMeO A.K.A ILLS [CIXENT]

CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb] will display a popup title:

Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!!Jeng!!! x100 words

How To Remove

Manual
delete all the files that it have copied, and delete all the registry entries containing the name of those files. To delete those registry entries:

1. Run regedit.
2. Click on the menu "Edit".
3. Choose "Find".
4. Type in the name of the files that the RoMeO A.K.A ILLS [CIXENT] or CIXENT Corp [CIXENT.V3.Force.LovePart.Small.vb virus have copied, and delete them

Removal Tools
Cixent.V3-remover