Cosdoor manual removal:
Kill processes:
iexplore.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\tsconf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Internet Explorer=%System%\iexplore.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit %System%\userinit.exe,%System%\iexplore.exe
Delete files:iexplore.exe
Misc:The iexplore.exe file is located in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
Post Comment: