(Removal Guide) How to Remove yewimmxqbs64.exe completely?

Help! Recently I found a virus on my computer which one of my friends call a rat, and I can't open anything or download anything unless I go through a process, some things I just CAN'T open or download like system restore or malwarebytes, but I was able to download Avast the antivirus and remove the virus, the virus was in a folder called 002 and the actual virus was named yewimmxqbs64.exe and I was able to remove the virus with Avast, unfortunately it did not repair the issue and all remains the same.


What is yewimmxqbs64.exe ?
Yewimmxqbs64.exe is an executable program, which is capable to reserve many malicious virus in operation system. Also, it is capable to use the security holes to sneak into your PC and then infected your PC without your consent.

Once you found it, you should remove it as soon as possible. yewimmxqbs64.exe is able to change your system and create a new system every moment. What’s more, it will root deeply in your system and steal your privacy and then send the data to remote server without your knowledge. Also, yewimmxqbs64.exe is designed to steal your account data for online banking systems, e-payment systems, and credit or debit cards. Worse still, it changes many safe files to malicious files and thus brings Trojan or other dangerous virus into your PC. Before you find it, it has already done harmful to your important files and system. Besides, it can avoid the detection of antivirus software and firewall, even though is found by these tools, it cannot be removed completely by them. From the above analysis, yewimmxqbs64.exe must be remove immediately before it does more harmful to your PC.


Important Note: To remove this malicious virus, manual removal is the only way. Since yewimmxqbs64.exe is a stubborn threat constantly mutates in different systems, so the malicious processes, files and registry entries dropped by it vary in each PC. If you cannot find the files listed below, please contact Professional Expert Online to help you find and remove them safely.

How to get rid of yewimmxqbs64.exe?

Step1: Boot up your computer in Safe Mode with Networking:

On Windows XP, Win 7 / Vista:

•Reboot your infected PC
•Keep pressing F8 key before Windows start-up screen shows
•Use the arrow keys to select “Safe Mode with Networking” and press Enter.

(If your PC’s Safe Mode with Networking has been disabled by yewimmxqbs64.exe virus as well, please contact Online PC Expert to get further solutions.) 

On Windows 8 / 8.1

Method One

1: Press “Windows” and “R” keys together to open the Run box

2: Type “msconfig” in the the Run box and click

3: Click the Boot tab, then check the box that says “Safe boot” and “Network” under the Boot options section Click OK.

4: Click Restart when it informs that you need to restart your computer.

Method Two 

1: Press the “Windows” + “C” keys, and then click Settings.

2: Click Power, hold down Shift key on your keyboard and click Restart.

3: Click Troubleshoot button

4: Click Advanced options button

5: Click Startup Settings button

6: Click Restart button

7: Press 5 on your keyboard to Enable Safe Mode with Networking.

(If your PC’s Safe Mode with Networking has been disabled by yewimmxqbs64.exe Virus virus as well, please contact Online PC Expert to get further solutions.)

Step2: Stop yewimmxqbs64.exe redirect processes in the Windows Task Manager

random.exe

On Windows XP

•Press Ctrl+Alt+Del keys together to open Windows Task Manager ;
•Under the Processes tab, right-click on the processes related with the virus and click End Process

On Windows 7 / Windows Vista

•Right-click on Task Bar and click on Task Manager;
•Under the Processes tab, right-click on the processes related with the virus and click

On Windows 8 / 8.1

•Right-click on Task Bar and click on Task Manager;
•Under the Processes tab, right-click on the processes related with the virus and click

Step3: Show all hidden files:

On Windows XP

•Close all programs so that you are at your desktop.
•Click on the Start button. This is the small round button with the Windows flag in the lower left corner.
•Click on the Control Panel menu option.
•When the control panel opens click on the Appearance and Personalization link.
•Under the Folder Options category, click on Show Hidden Files or Folders.
•Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
•Remove the checkmark from the checkbox labeled Hide extensions for known file types.
•Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
•Press the Apply button and then the OK button.

On Windows 7 / Vista

•Click and open Libraries
•Under the Folder Options category of Tools , click on Show Hidden Files or Folders.
•Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
•Remove the checkmark from the checkbox labeled Hide extensions for known file types.
•Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
•Press the Apply button and then the OK button.

On Windows 8 /8.1

•Click on Windows Explorer ;
•Click on View tab;
•Check the “Hidden Items” box

Step4: Delete yewimmxqbs64.exe redirect Virus associated files

%UserProfile%\Application Data\[random digits]\[random digits].exe
%AppData%[trojan name]toolbaruninstallIE.dat
%AppData%[trojan name]toolbarstats.dat
%UserProfile%\Application Data\[random digits]\[random digits].cfg

Step 5: Open Registry Editor:

Method 1 

(Available on Windows XP, Windows 7 /Vista, and Windows 8 /8.1): 

•Call out “Run” box by pressing “Windows” key + “R” key on your keyboard;
•Type “Regedit” into the Run box and click OK to open Registry Editor

Method 2 

(Available on Windows 7/ Vista):

•Click on Start button to open Start Menu
•Type “Regedit” into the search box and click on Regedit to open Registry Editor

Step 6: Terminate these Registry Entries created by yewimmxqbs64.exe redirect.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus Security Pro Virus\UninstallString “%AppData%[RANDOM CHARACTERS][RANDOM CHARACTERS].exe” –u
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\[RANDOM CHARACTERS] %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe

Tips: To get rid of yewimmxqbs64.exe, above manual removal is the best way. But if you are not familiar with computer, you'd better ask for an expert help.