• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

How to remove braviax.exe/cru629.dat/users32.dat malware

Myantispyware team March 15, 2008    

braviax.exe is a malware that also installs rogue security applications and display false alert on compromised computer. If your computer infected, then you have a red circle with a white X in your taskbar that is constantly telling you, that you have a virus

Your computer is infected!…

Starting in July 2009, this malware installs PC Security 2009.

HijackThis shows it

O4 – HKLM\..\Run: [braviax] C:\WINDOWS\system32\braviax.exe
O20 – AppInit_DLLs: cru629.dat

Follow these steps to remove braviax infection

Download SDFix and save the file to your desktop. Double click SDFix.exe and it will extract the files to %systemdrive% (Drive that contains the Windows Directory, typically C:\SDFix)

Reboot your PC in Safe mode.

1. Restart your computer
2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3. Instead of Windows loading as normal, a menu should appear
4. Select the first option, to run Windows in Safe Mode.

Open the SDFix folder and double-click RunThis.bat.

Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.

Close any open browsers.

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

PC_Security_2009_mbam
Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Tutorials - HowTo

 Previous Post

VirusHeat rogue antispyware – How To Remove

Next Post 

Found new rogue antispyware programs

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

140 Comments

  1. Patrik
    ― September 3, 2009 - 9:05 pm  Reply

    Noe, ask for help at our Spyware removal forum.

  2. taylocan
    ― September 5, 2009 - 9:44 am  Reply

    to kill braviax.exe :

    1-shut down internet.
    2-open task manager
    3-end braviax.exe and its creator sys32_nov.exe
    4-than open windows/system32/
    5-search find and delete with unlocker these found files sys32_nov.exe and braviax.exe in system32 folder..it means you survived braviax.exe))

  3. Noe
    ― September 5, 2009 - 1:21 pm  Reply

    Thanks, I was actually able to fix it. I ran the a2cmd.exe and that allowed me to clean the virus without restarting Windows in safe mode.As for the error message that I got when trying to restart in safe mode, it is probably corruption on the drive which I’ll look further into and I’ll fix. Anyways, thanks to you, I was able to clean that virus. You’re a lifesaver!

  4. Terry
    ― September 5, 2009 - 8:57 pm  Reply

    Bless you! I am so computer impaired I usually just reformat when I get a virus but these two programs worked for me! A curse on all virus writers…. may all their teeth fall out except for one and that one stays abscessed forever.

  5. Patrik
    ― September 5, 2009 - 11:26 pm  Reply

    taylocan, you only removed a small part of infection. Braviax also replaced beep.sys and ntfs.sys (new version). You should repair them too.

  6. Don
    ― September 7, 2009 - 1:05 pm  Reply

    I tried the above steps – no avail. It is killing SPFix as well – shuts down the process in Safe Mode. Any new options our there – this one is nasty.

  7. zoyiab
    ― September 12, 2009 - 3:00 am  Reply

    thank you! thank you! thank you! thank you! I dont know what I would have done if i hadnt found your site!!!!! I’m telling everbody!!!

  8. hiyasassygal
    ― September 14, 2009 - 4:25 pm  Reply

    Thanks so much. Malwarebyte totally took care of it.

    P.S. I think I got braviax/antivirs2010 off of Pirate Bay. I was looking for an XP CD and while i was browsing it totally rebooted my system and loaded the virus. . . so watch out

  9. Geoff
    ― September 15, 2009 - 3:01 pm  Reply

    Awesome! Thank you so much for helping me get rid of braviax. It worked perfectly.

  10. Ivan Drago
    ― September 17, 2009 - 11:05 am  Reply

    Thank a lot, guys! I thought I’d never get read of that peace of crap without format! You’re great!

  11. Alex
    ― September 20, 2009 - 12:01 pm  Reply

    I’ve tried these steps but when I enter safe mode and enter ‘y’ in during the cmd, everything disappears and nothing seems to happen. Can anybody help me?

  12. Patrik
    ― September 20, 2009 - 10:47 pm  Reply

    Alex, probably your computer infected with a new version of braviax. Ask for help in our Spyware removal forum.

  13. NoSi
    ― September 21, 2009 - 2:14 am  Reply

    Thanks,try evrything and no luck, this works for me.

  14. Unsaer
    ― September 22, 2009 - 8:23 am  Reply

    Hi

    I got the same problem as one of the commenters above. I can’t get into SAFE MODE. When entering SAFE MODE the computer briefly displays a blue screen and then restarts. I can’t even read it. Also when I try to do a system repair I can’t do it, the next button won’t work.
    I haven’t got a windows install cd, so I can’t repair it that way.
    Anyone else got these problems ?
    Or got past them?

  15. doubleok
    ― September 23, 2009 - 1:25 am  Reply

    im trying to gety rid of the braviax but when i click on the SDFix icon it sends me to a sight with a whole bunch of indecipherable text images…what can i do to fix it

  16. Patrik
    ― September 24, 2009 - 6:45 am  Reply

    doubleok, looks like your PC is infected with another version of braviax. Ask for help in our Spyware removal forum.

  17. Andy Pham
    ― October 1, 2009 - 12:39 pm  Reply

    I follow your instruction to this point: Goto Start Menu > Right click My Computer > click properties > click Advanced Click Environment Variables and check that the ComSpec variable points to cmd.exe %SystemRoot%\system32\cmd.exe

    and I found out that. ComSpec variable points to cmd.exe but not including %SystemRoot%\system32\cmd.exe . Please help me what should I do next.

  18. Patrik
    ― October 2, 2009 - 4:53 am  Reply

    Andy, click twice to ComSpec and edit “Variable value”.

  19. Poonam
    ― January 28, 2010 - 8:25 am  Reply

    Hi there I am on Windows Vista, I have tried everything and nothing works. SDFix keeps flashing when I want it to scan. Malware Bytes does not work at all even after downloading it several times. I have tried everything and nothing works. I really want my laptop to work again….even the internet has stopped working now. HELP!

  20. Patrik
    ― January 28, 2010 - 9:00 am  Reply

    Poonam, please open a new topic in our Spyware removal forum. I will help you.

« Previous 1 … 3 4 5

Leave a Reply to Patrik Cancel reply

New Guides

STDEI GLP 1 Review, Stdei GLP-1 Weight Loss Oral Solution Scam
scam alert
GOTEEX.com Review: Promo Code Scams Exposed
Olygee Cooling Ace Review, Don’t Be Fooled by False Promises and Misleading Ads
Suzuki Moorai Robot Dog Vehicle Real or a Scam, What You Need to Know
Liketonline Cooling Ace Review, Scam or Legit? What You Need to Know

Follow Us

Search

Useful Guides

Smart Captcha Virus redirect
What is a Virus that Redirects Web Pages? A Comprehensive Guide
Iphone Calendar virus spam
Iphone Calendar Virus/Spam 2022 (Removal guide)
How to remove browser hijacker virus (Chrome, Firefox, IE, Edge)
search.yahoo.com
Remove Search.yahoo.com Redirect Virus ✅ (Quick & Easy) in 2024
How to reset Google Chrome settings to default

Recent Guides

VirusHeat rogue antispyware – How To Remove
Fresh updates to Ad-Aware and SpyBot-search & Destroy
How to remove core.cache.dsk and parportt.sys
How to remove CID popups
How To Remove cyberstoll.com, search-daily.com hijacker and WebHancer spyware

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.