Affilred manual removal:
Kill processes:
axe.exe, cab.exe, criticalupdate.exe, highspeed-cable.exe, iprotect.exe, mshotfix.exe, msupdate.exe, security32.exe, twain_32.exe, usbwin32.exe, winsecure.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Cab Manager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Security Hot Fix Update
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\RegistryMonitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Security Manager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Security Update
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\WinTask
HKEY_LOCAL_MACHINE\SOFTWARE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit=%System%\userinit.exe, %Windir%\iprotect.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\load\Memory Manager
HKEY_CLASSES_ROOT\CLSID\{1BB87441-6B7F-4B60-885C-B7AF9F9AFDE3}
HKEY_CLASSES_ROOT\CLSID\{FD3A6AB4-5527-4B52-90AF-F90CD3270861}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1BB87441-6B7F-4B60-885C-B7AF9F9AFDE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{0CDAAEC2-E245-44CC-8357-CAB70172D017}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{77566C2A-2987-44BC-AC81-A02D19EE271B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8E668361-C801-41B7-BF89-2FC2C8DE9167}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{C0DADD7E-D3F1-430D-B735-39DC6033592C}
Delete files:axe.exe, cab.exe, criticalupdate.exe, highspeed-cable.exe, iprotect.exe, mshotfix.exe, msupdate.exe, security32.exe, twain_32.exe, usbwin32.exe, winsecure.exe, comnt32.dll, inetconnect.dll, default.scr, memorymanager.pif, regisry.pif
Misc:Affilred may create all listed objects or install only few of them.
Exact file location:
cab.exe, criticalupdate.exe, winsecure.exe - C:
mshotfix.exe, msupdate.exe, twain_32.exe - C:\Windows or C:\Winnt
axe.exe, iprotect.exe, security32.exe, comnt32.dll, inetconnect.dll, memorymanager.pif - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32