How to remove the framework virus
Most antivirus programs identify framework.exe as malware, for instance TrendMicro identifies it as TROJ_MALLJQ.A or WORM_RBOT.ELL, and Microsoft identifies it as Trojan:Win32/Small or Backdoor:Win32/Rbot.gen.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.
Framework.exe file information
The process known as Realtek Azalia Audio - Event Monitor or Framework Application appears to belong to software Realtek (version AC97 Audio - Event Monitor) or Lexware financial office pro by Realtek Semiconductor (www.realtek.com.tw) or Lexware GmbH & Co. KG.
Description: framework.exe is located in the folder C:\Windows\System32.
Known file sizes on Windows 7/XP are 118,272 bytes (46% of all occurrences), 118,784 bytes or 119,808 bytes.
There is no file information. The process is loaded during the Windows boot process (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices). It is not a Windows core file. It is located in the Windows folder, but it is not a Windows core file. The program is not visible. The software listens for or sends data on open ports to a LAN or the Internet. Framework.exe is able to record inputs, hide itself and monitor applications. Therefore the technical security rating is 87% dangerous; however you should also read the users reviews.
Recommended: Identify framework.exe related errors
If framework.exe is located in the folder C:\Windows, the security rating is 71% dangerous. The file size is 102,441 bytes. The program has no visible window. It is an unknown file in the Windows folder. The process is loaded during the Windows boot process (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices). The file is not a Windows core file. The software uses ports to connect to a LAN or the Internet. Framework.exe is able to monitor applications.
If framework.exe is located in a subfolder of "C:\Program Files", the security rating is 68% dangerous. The file size is 135,168 bytes.
The program has a visible window. The file is able to record keyboard inputs. The framework.exe file is not a Windows core file. The software listens for or sends data on open ports to a LAN or the Internet.
Framework.exe is able to monitor applications.
You have the option to uninstall Lexware financial office pro from your computer using the Control Panel applet "Add/Remove programs".
Important: You should check the framework.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Andreas (further information)
Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.
Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.
SpeedUpMyPC scans, cleans, repairs and optimizes your computer.
bcshellex.dll dbsrv9.exe rtvosd.exe framework.exe rtetpisv.exe uzcx.exe lxblksk.exe vc7play.exe winshost.exe mycent~1.dll rushtop.sys [all]