iloveher.exe


Filename:
iloveher.exe

Related to:

File Directory:
[drive letter]

Startup Type:
N/A

Removal and Protection:
Deleting the file iloveher.exe will not help in removing the threat on computer. Antivirus and Anti-Spyware Software are recommended for automatic removal and protection.

How to Remove iloveher.exe:

Provided on this page is our suggested (by Webmaster) removal procedure and User's suggestion shared with us. However, we cannot control and evaluate all User's shared post so please use it at your own risks. If no suggestion is present to remove specific threat, you may try our Standard Procedure here.

14 Respondents on “iloveher.exe”


webmaster | January 18th, 2008 at 10:11 am

1. Temporarily Disable System Restore (For WinXP only)
- On the Desktop, Right Click on My Computer
- Select the System Restore Tab
- Mark the “Turn Off System Restore” to disable and UnMark to Enable
- Click Apply on the Bottom of the Dialog Box to save the settings.
- A message “This deletes all existing restore points” will appear, click Yes to disable.
- Click OK.
Note: System Restore must be enabled after cleaning process.

2. Reboot computer in SafeMode with Netoworking
- During BootUp (just before Windows Start) process Press F8 continuously until selection appears
- Use Arrow Up+Down to select SafeMode with Networking on the selections menu.

3. Download and scan with Ewido
- Download Ewido Micro Scanner.
- It will download Signature Database before scanning
- When update is completed, disconnect computer from Internet (Turn Off Modem or unplug RJ45 jack)
- Click “Start scan” to begin. It may take time for the process to finished
- When finished scanning, click “Save Report” this will be used later as a reference when modifying registry. Save Ewido report on your Desktop
- Click “Remove Infection” to delete infected files. Do not close the Ewido Micro Scanner yet.

4. Perform Disc Cleanup
- Go to Start > All Programs > Accessories > System Tools > Disc Cleanup
- It will scan for files.
- When prompted for files to delete, check all and click OK. Press Yes for confirmation

5. Delete/Modify any values added to the registry.
- Click Start > Run
- Type regedit on the field
- Click OK.
Navigate to and delete the values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Values: On the right pane, check any values or data that are related to .exe and .dll files detected earlier by the Ewido Scanner. Please use Ewido report as reference.
- Also, delete entries that contains malicious files:

  • iloveher.exe

- Exit registry editor when done.

6. End running process
- Press Ctrl+Alt+Del
Note: If Windows Task Manager is disabled please see option below to enable it.
- Go to Process Tab
- End the process of the .exe and .dll files that were detected earlier by Ewido Scanner if present. End also process that contains malicious files stated above

7. Search and delete malicious files:
- Go to Start> Search
- Click All files and folders
- Input the malicious files filename on the “All or part of the filename” field.
- Click Search to begin
- If found, right-click on the file and Delete
- Search and delete malicious files one-by-one

8. Delete hidden and autorun files
- Go to Start > Run > type cmd in the field
- A command prompt will appear
- Type cd\ [Press Enter]
- Type dir/ah [Press Enter] (This will display hidden malicious and autorun files)
- Type edit C:\autorun.inf
- Text editor will appear and reveal the contents of the autorun file. Take note on the .exe that was called to automatically run. Example: open=filename.exe
- Exit Text editor
- Still at the command prompt (C:\>), type “ATTRIB”. It will list files with corresponding attributes. Usually files of Downloader.Agent has an attribute of SHR.
- Type “ATTRIB -S -H -R C:\filename.exe” (Where filename.exe is the file that was called in the autorun.inf file)
- Type “ATTRIB -S -H -R C:\autorun.inf”
- Type “del filename.exe”
- Type “del autorun.inf”
- Type “ATTRIB” again to see if the two files are deleted
- If clean, type “Exit” to close command prompt window

9. Scan again with Ewido
- While Ewido Micro Scanner is still open, clcik “Start a new Scan” to perform another scan and delete any infected files found.

10. Restore Internet Explorer default page
- Go to Start > Run> type gpedit.msc and click OK
- Navigate to User Configuration / Administrative Templates / Windows Component / Internet Explorer
- Click “Disabled changing home page settings” and set to Disabled
- Exit Group Policy Editor
- Open Internet Explorer
- On the Menu, click Tools > Internet Options
- On General tab, set to Use Default or enter URL of your desired website

OPTIONS:

Enable Task Manager
1. Click Start > Run
2. Enter gpedit.msc in the Open box and click OK
3. In the Group Policy settings window:
- Select User Configuration
- Select Administrative Templates
- Select System
- Select Ctrl+Alt+Delete options
- Select Remove Task Manager
- Double-click the “Remove Task Manager” option
- Set to Disabled

4. Exit the Group Policy Editor

jonathan | January 26th, 2008 at 2:32 pm

hello i tried the procedures but when i started the safe mode with networking. i cant double click my icon in the computer to connect to the internet . what should i do? thanks

webmaster | January 29th, 2008 at 1:22 pm

Jonathan, Are you using Dial-up? I guess you have to try it in Normal mode.

joey | February 3rd, 2008 at 1:39 am

hi.. i tried this procedure and it was a success removing the virus on drive c:.. but my problem is that i cant remove the virus to the other drives… can you pls help me?? thanks!!!

alex | February 4th, 2008 at 5:01 am

good day….
if i will follow this process, will my files will be lost?.. casue i have some important files…
thankyou

chenyl | February 5th, 2008 at 12:03 am

Hi. I tried this as well but when I did procedure 8, del Iloveher.exe wouldn’t work, it says file not found. What’s wrong? thanks

dboss | February 9th, 2008 at 12:38 pm

Joey, since your C drive is clean. Update your antivirus and scan other drives.

Alex, no it will not harm other files.

Chenyl, in procedure 8, you should see what file is being called. Maybe the file you wanted to delete is in other folder or maybe it is calling a different file other than iloveher.exe. Read the contents of autorun.inf file

jubelle | February 15th, 2008 at 8:18 am

Sir, thanks for your suggested steps.
I tried doing it in drive C then afterward in drive D. and the iloveher.exe and the autorun.inf were removed. but the moment i restarted the PC, it again shows up. Need your help Sir.
Many thanks.

Sarah | February 22nd, 2008 at 7:55 am

Hi i also tried doing the suggested steps; however, the virus keeps on coming back whenever i open my computer… but the thing is that i cannot do step 10 because my computer keeps on hanging whenever I go to the Administrative template… is this step crucial in removing iloveher.exe? your help will be very much appreciated!thanks

henry | March 3rd, 2008 at 3:39 pm

how about in Vista?! i can’t open my task manager.. I’ve done everything. I’m hoping you could help me

helga | March 4th, 2008 at 5:38 am

Sir, I can’t open my task manager. I followed the procedure you’ve stated above. Im using vista on my laptop. Is there any way I can go to process?

FE | March 4th, 2008 at 8:29 am

thanks, i tried this to my usb flash disk and it successfully removed the viruses. But it won’t worked in my hard disk. Then, the only way to removed the iloveher.exe and autorun.inf is to format.

Allan | March 10th, 2008 at 1:37 pm

below is the simple procedure in removing say no drug display or iloveher.exe

booth computer to safe mode. do this by pressing f8 when the computer is restarting.

type cmd on run, it will bring to command prompt

1. type attrib -s -h -r iloveher.exe then enter
2 .type attrib -s -h -r autorun.inf then enter
3 .type del iloveher.exe then enter
4 .type de autorun.inf the enter

do this on the all the drives as well as at c:\windows/system32

then type msconfig to run command

uncheck the iloveher.exe on the start-up

gx of zabarte road caloocan city | March 26th, 2008 at 1:26 am

sir thanks for the help ..it really help me a lot to remove the iloveher.exe on my pc..acctually im a csr here at the cafe and im so worried if all of our pc’s will be infected by this rude infections….

THANKS A LOT ! ! !

Add to Favorites:     Subscribe: AddThis Feed Button

Add Response: