DeadEye

DeadEye is a cyber threat foolishly presented to be designed for increasing computer’s performance. Dead Eye is mostly found with jre.exe executable file which is normally used for running Java Runtime Environment. However, in this situation jre.exe may attempt to download malware from its server which in the future will try only to rip you off

Remove DeadEye once you spot it on your computer. If left, it will annoy you to death with its fake notifications telling invented problems with viruses. Reboot your computer into Safe Mode with Networking, get a good anti-spyware then and after updating it run a full system scan. More detailed guide is above:

1. Restart your computer in SafeMode with Networking:
– After reboot of your computer, press F8 before Windows start
– Select Safe Mode with Networking on the table you see

2. Delete malicious processes:
– press CTRL+ALT+Delete to access Task Manager. See the process running and click End Process if you see infected ones.
– Also try clicking Start>Search> and then search for the files.

3. Download Spyware Doctor and run a full system scan with it

– Don’t forget to update anti-spyware before scanning!

Automatic Malware removal tools

Download Spyhunter for Malware detection
(Win)

Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,

Download Combo Cleaner for Malware detection
(Mac)

Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,

Manual removal

Processes:

Files:

%WinDir%\\Tasks\\At1.job
%WinDir%\\Tasks\\At2.job
%WinDir%\\Tasks\\At3.job
%WinDir%\\jreew.exe
%UserProfile%\\Start Menu\\Programs\\Startup\\j.exe
%SystemDir%\\xseed.exe
%SystemDir%\\xs
%SystemDir%\\multiply.exe
%SystemDir%\\svcagent.exe
%SystemDir%\\jreew.exe
%SystemDir%\\jre.exe
%UserProfile%\\Desktop\\pulist.exe
%UserProfile%\\Desktop\\reg.exe
%UserProfile%\\Desktop\\install-jre.exe
%UserProfile%\\Desktop\\multiply.exe
%UserProfile%\\Desktop\\taskkill.exe
%UserProfile%\\Desktop\\open.exe
%UserProfile%\\Desktop\\svcagent.exe
%UserProfile%\\Desktop\\sc.exe
%UserProfile%\\Desktop\\tasklist.exe
%UserProfile%\\Desktop\\jreew.exe
%UserProfile%\\Desktop\\cp.cmd
%UserProfile%\\Desktop\\set.cmd
%UserProfile%\\Desktop\\ver.cmd
%UserProfile%\\Desktop\\x.cmd
%UserProfile%\\Desktop\\autorun.inf
%CommonProgramFiles
%\\Adobe\\Brick\\jre.exe
%CommonProgramFiles%\\Adobe\\Brick\\svcagent.exe
%CommonProgramFiles%\\Adobe\\Brick\\x.jar
%CommonProgramFiles%\\Adobe\\Brick\\open.exe
%CommonProgramFiles%\\Adobe\\Brick\\cp.cmd
%CommonProgramFiles%\\Adobe\\Brick\\set.cmd
%CommonProgramFiles%\\Adobe\\Brick\\ver.cmd
%CommonProgramFiles%”\\Adobe\\Brick\\x.cmd
%CommonProgramFiles%”\\Adobe\\Brick\\autorun.inf
%CommonProgramFiles%\\Adobe\\Brick\\service.log
%CommonProgramFiles%\\Adobe\\Brick\\A.log
%CommonProgramFiles%\\Java\\Update\\jre.exe
%CommonProgramFiles%\\Java\\Update\\multiply.exe
%CommonProgramFiles%\\Java\\Update\\open.exe
%CommonProgramFiles%\\Java\\Update\\cp.cmd
%CommonProgramFiles%\\Java\\Update\\set.cmd
%CommonProgramFiles%\\Java\\Update\\ver.cmd
%CommonProgramFiles%\\Java\\Update\\x.cmd
%CommonProgramFiles%\\Java\\Update\\autorun.inf
%ProgramFiles%\\Adobe\\Brick\\jre.exe
%ProgramFiles%\\Adobe\\Brick\\svchost.exe

Registers:

HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run
HKEY_USERS\\S-1-5-21-1004336348-1326574676-839522115-1003\\Software\\JavaSoft\\Java2D\\1.6.0_06\\Drivers\\.DISPLAY1 VMware SVGA II\\32
HKEY_USERS\\S-1-5-21-1004336348-1326574676-839522115-1003\\Software\\JavaSoft\\Java2D\\1.6.0_06\\Drivers\\.DISPLAY1 VMware SVGA II
HKEY_USERS\\S-1-5-21-1004336348-1326574676-839522115-1003\\Software\\JavaSoft\\Java2D\\1.6.0_06\\Drivers
HKEY_USERS\\S-1-5-21-1004336348-1326574676-839522115-1003\\Software\\JavaSoft\\Java2D\\1.6.0_06
HKEY_USERS\\S-1-5-21-1004336348-1326574676-839522115-1003\\Software\\JavaSoft\\Java2D
HKEY_USERS\\S-1-5-21-1004336348-1326574676-839522115-1003\\Software\\JavaSoft
HKEY_USERS\\S-1-5-21-1004336348-1326574676-839522115-1003\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\Run
HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\svcagent\\Enum
HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\svcagent\\Security
HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\svcagent
Xseed =  \"xseed.exe\" Multiply=  \"%CommonProgramFiles%\\Java\\Update\\multiply.exe\"
Xseed =  “xseed.exe”

DeadEye - How to remove

Automatic Malware removal tools

Manual removal

Removal guides in other languages

TOC

Leave a Reply Cancel reply