Some viruses can stop the action during the removal process. In this case rename the vcleaner.exe to some different exe file (e.g. something.exe). Restart your computer in Safe mode (recommended) and run the remover on the infected computer.

Download the remover rmbugbear.exe and run it on infected computer. Then restart your PC normally and run the AVG Complete Test. If the infected computer is connected to LAN, it is neccessary to disconnect this computer from LAN before removing the virus and re-establish the connection in the moment when ALL computers in LAN are cleaned.

Download and run the remover rmganda.exe. Then restart your PC and run the AVG Complete Test. Note: Default path set in this utility is to scan actual drive. If you want to change this value, run the utility as: rmganda.exe :\

Download the following three files ( rmluder.exe, rmluder.nt, rmluder.dos) and run the rmluder.exe file. You can also specify the disks (or partitions) to heal as a command parameters, e.g.: "rmluder C: D:". If the command is used without parameters, it heals all disks (partitions) on computer.

Users of AVG Anti-Virus with updated virus databases may continue to receive false warning messages indicating that the I-Worm/Mydoom virus was sent from their email address. This is because the I-Worm/Mydoom virus changes the address of the sender of the infected email. This makes it very difficult to identify the actual sender of the virus, and therefore to notify the sender that his computer is infected. This may result in the virus displaying a different email address from that of the actual sender of the infected email. When such an email is detected by the anti-virus system on the computer which receives the infected e-mail, a warning message is often sent concerning the infection to the address that is indicated as the sender of the infected message - even when the email was NOT sent from this address.

If you have infected computer connected to a LAN, you need it to unplug from the LAN, and re-connect again in the moment when all computers are clean. In any case, check for all available security patches.

Download and run the remover rmsircam.com on the infected computer. Restart the computer, run AVG and delete all infected files.

Run the Complete Test for all local hard drives -> Menu Tests -> Test manager -> Complete test -> Start test In case of virus infection select the button heal/remove. Some infected file cannot be healed/removed directly. In some cases following message will be displayed: "To finish the healing, it is necessary to restart the computer" or "File deletion was scheduled to the next restart of the computer". After finishing the Complete test please restart your PC and repeaet the AVG Complete test again to check all local hard drives again (to be sure all infected files has been removed). If you find any infected file again, please restart your computer in Safe mode. To do it press and hold the F8 key during the initial Windows boot phase. Repeat all steps described above in Safe mode.

Download the remover rmswen.exe. Restart your computer in Safe mode and run the remover. Then restart your PC normally and run the AVG Complete Test.

Successful running of the remover requires administrator rights. For proper functionality of the remover it is necessary to save the rmbg3svx.nt into the same folder as rmbg3svx.exe. After the healing process is finished please run the AVG Complete Test to make sure your computer is virus-free.