How to Remove Cutwail Spambot

Written by charles poole
  • Share
  • Tweet
  • Share
  • Email

The Cutwail virus is a Trojan infection on Windows-based computer systems that records keystrokes and transmits personal information over an Internet connection. If you have confirmed that the Cutwail virus is on your system, you should unplug the computer from the Internet source immediately. This virus can be removed without the need for additional software. You can delete the DLL (Dynamic Link Library) file and the registry keys to get rid of the Cutwail virus within a couple of minutes.

Skill level:


  1. 1

    Remove the Internet connection from your computer. Either shutdown the wireless connection or unplug the Ethernet cable from the computer.

  2. 2

    Press the “Control,” “Alt” and “Delete” buttons together to bring up the computer’s Task manager. Click the “Processes” tab on the right side of the menu.

  3. 3

    Right-click on each of these processes to end them:

    outpuk24[1].exe Test.exe 1[1].exe

  1. 1

    Click the “Start” button.

  2. 2

    Click on the “Run” box.

  3. 3

    Type “Regedit” into the run box and press the “Enter” button to open the Registry Editor.

  4. 4

    Right click on each of these keys and then select the “Delete” option from the menu:

    HKEY_CLASSES_ROOT\clsid{36b0a261-ea24-6be5-6027-7fc4035dd69b} HKEY_CLASSES_ROOT\clsid{7b5a24ee-1a07-53ab-eb60-eb908c88e935} HKEY_CLASSES_ROOT\clsid{51704c8a-007a-8362-32d7-c2ee36ce9214} HKEY_CLASSES_ROOT\clsid{97b59ad2-1228-70b8-ca0b-b7594efcbe07} HKEY_CLASSES_ROOT\clsid{f7405b81-92e2-ba64-ee73-933738d57403} HKEY_CURRENT_USER\software\wget HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\uninstall\xvid HKEY_LOCAL_MACHINE\software\wget HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ndnetl HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_runtime HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_runtime2 HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ndnet1 HKEY_LOCAL_MACHINE\system\currentcontrolset\services\runtime HKEY_CURRENT_USER\software\dimaware HKEY_LOCAL_MACHINE\software\dimaware HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\explorer\browser helper objects{c4de5b15-4ffe-4c02-8cb3-cad24a33562b} HKEY_LOCAL_MACHINE\system\currentcontrolset001\services\ctl_w32 HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ctl_w32 HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\setup.dll HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\winlog.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%WINDOWS%]\winnows.exe HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\run, startdrv[%WINDOWS%]\Temp\startdrv.exe" HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\run, startdrv=

  1. 1

    Click “Start” and then click the “Run” option.

  2. 2

    Type “cmd” into the Run box and press the “Enter” button to open the command prompt.

  3. 3

    Type “regsvr32 /u setupapi.ll” into the command prompt and then press the “Enter” button. This will delete the DLL files.

Don't Miss

  • All types
  • Articles
  • Slideshows
  • Videos
  • Most relevant
  • Most popular
  • Most recent

No articles available

No slideshows available

No videos available

By using the site, you consent to the use of cookies. For more information, please see our Cookie policy.