Remove GYUTBEAHA.EXE malware

GYUTBEAHA.EXE Malware Removal Guide

Manual removal instructions:

Antivirus Report of GYUTBEAHA.EXE:
Full path on a computer: %APPDATA%\IKFOFUQIU\GYUTBEAHA.EXE
Related Files:

The file GYUTBEAHA.EXE is malware related.
You must delete the file GYUTBEAHA.EXE immediately!

  1. Uninstall GYUTBEAHA.EXE using Windows uninstallation applet (use Add/Remove Programs or Uninstall Program or Apps & features).
  2. Open Task Manager and terminate "GYUTBEAHA.EXE" processes.
  3. Use Windows search to find and remove "GYUTBEAHA.EXE" files and folders.
  4. Run services.msc and disable a "GYUTBEAHA.EXE" Windows service.
  5. Execute taskschd.msc to get rid of "GYUTBEAHA.EXE" scheduled tasks.
  6. Open regedit.exe and delete GYUTBEAHA.EXE registry keys and values.
  7. Inspect the properties of your desktop and Start menu shortcuts for GYUTBEAHA.EXE presence and "http://" links.
  8. Open your browser and disable GYUTBEAHA.EXE plugins. Disable all unknown plugins. Reset the browser settings.
  9. Clean your Recycle bin and temporary files.
  10. Restart your computer and check results.

GYUTBEAHA.EXE is related to: trojanspy.win32.skeeyah.a!rfn, GYUTBEAHA.EXE.
Virustotal = 33/57
MD5 = 0CDAF6A59F6D80A6B9A1C592C1B4136B
File Size: 614400

File information:
OriginalFilename: Revaluates.exe
FileDescription: Maliki0
InternalName: Revaluates
CompanyName: Samsung
FileVersion: 1.00


Dmitry Sokolov:

I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.

Since that time I work every day to fix the issues that antiviruses cannot.

If your antivirus have not helped you solve the problem, you should try UnHackMe.

We are a small company and you can ask me directly, if you have any questions.


You can read UnHackMe testimonials here.