Anserin manual removal:
Kill processes:
ibm[X].exe, kl.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Shell=C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm[X].exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell=explorer.exe [space characters] C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm[X].exe
Delete files:ibm[X].exe, kl.exe
Misc:[X] is a random five digit number.
Exact file location:
kl.exe - C:\Windows
ibm[X].exe - C:\Program Files\Common Files\Microsoft Shared\Web Folders
Post Comment: