Ertfor manual removal:
Kill processes:
[randomized char. string].exe a6gt9v9.exe zxhstn.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^lrijh8s73jhbfgfd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run@^lrijh8s73jhbfgfd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler@^{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_CLASSES_ROOT\CLSID\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_CLASSES_ROOT\CLSID\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_CLASSES_ROOT\CLSID\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
Unregister DLLs:[randomized char. string].dll hsari3jndsbfi73.dll sdfadccddkn93.dll
Delete files:[randomized char. string].exe a6gt9v9.exe zxhstn.exe [randomized char. string].dll hsari3jndsbfi73.dll sdfadccddkn93.dll
Post Comment: