Exploit.winamp.pls manual removal:
Kill processes:
addas32.exe, atlya32.exe, f2install.exe, iepn32.exe, javaee32.exe, mfcsp32.exe, netef32.exe, netrl.exe, ntbe.exe, ntxo32.exe, sdkuk32.exe, spysheriff.exe, winstall.exe, [X1]32.exe, [X2].tmp.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SNInstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SpySheriff
HKEY_CLASSES_ROOT\CLSID\{202B0EFD-2CB9-039B-2B11-A3579D6D56A3}
HKEY_CLASSES_ROOT\CLSID\{7C43E35C-A398-7C5F-B1BA-7E87073BE150}
HKEY_CLASSES_ROOT\CLSID\{9CB4CE93-8CC7-9E03-1037-2DD837E3A52E}
HKEY_CURRENT_USER\Software\SpySheriff
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Uninstall\SpySheriff
Delete files:addas32.exe, atlya32.exe, f2install.exe, iepn32.exe, javaee32.exe, mfcsp32.exe, netef32.exe, netrl.exe, ntbe.exe, ntxo32.exe, sdkuk32.exe, spysheriff.exe, winstall.exe, [X1]32.exe, [X2].tmp.exe, iesecurity.dll, procmon.dll, [X3]32.dll, desktop.html, wallpaper.html, x.pls
Delete directories:C:\Program Files\SpySheriff
C:\Documents and Settings\[Current User]\Start Menu\Programs\SpySheriff
Post Comment: