Erazer manual removal:
Kill processes:
char.exe, drvsys.exe, drvsystem.exe, eraser.exe, eraser32.exe, gothicmaster.exe, layer32.exe, numlock.exe, zonex.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ipconfig
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\COMSurrogate
Delete files:char.exe, drvsys.exe, drvsystem.exe, eraser.exe, eraser32.exe, gothicmaster.exe, layer32.exe, numlock.exe, zonex.exe
Delete directories:C:\Windows\System\drvformat
C:\Windows\System32\drvformat
C:\Winnt\System32\drvformat
C:\Windows\System\eraser
C:\Windows\System32\eraser
C:\Winnt\System32\eraser
C:\Windows\System\temp32
C:\Windows\System32\temp32
C:\Winnt\System32\temp32
Misc:Erazer uses files with random names.
Main Erazer files can be found in the default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
Post Comment: