Removal Guide
Kill Process
(How to kill a process effectively?)
anpf56mn5.exe
setup.exe (MD5: 28a8737b03cc2f14723755ea8f4d6941)
[random].exe
Unregister DLL files
[random].dll
Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Protector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "LoadAppInit_DLLs" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs" = ".dll"
Remove Folders and Files
%UserProfile%\Application Data\[random].exe
%UserProfile%\Application Data\[random].dll
%UserProfile%\Local Settings\Temp\[random].exe
%UserProfile%\Local Settings\Temp\[random].dll
%Program Files%\Internet Explorer\[random].exe
%Program Files%\Internet Explorer\[random].dll
%windir%\[random].exe %windir%\[random].dll
%windir%\system32\[random].exe
%windir%\system32\[random].dll
%windir%\system32\drivers\[random].exe
%windir%\system32\drivers\[random].dll
Kill Process
(How to kill a process effectively?)
anpf56mn5.exe
setup.exe (MD5: 28a8737b03cc2f14723755ea8f4d6941)
[random].exe
Unregister DLL files
[random].dll
Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Protector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "LoadAppInit_DLLs" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs" = ".dll"
Remove Folders and Files
%UserProfile%\Application Data\[random].exe
%UserProfile%\Application Data\[random].dll
%UserProfile%\Local Settings\Temp\[random].exe
%UserProfile%\Local Settings\Temp\[random].dll
%Program Files%\Internet Explorer\[random].exe
%Program Files%\Internet Explorer\[random].dll
%windir%\[random].exe %windir%\[random].dll
%windir%\system32\[random].exe
%windir%\system32\[random].dll
%windir%\system32\drivers\[random].exe
%windir%\system32\drivers\[random].dll
No comments:
Post a Comment