Fizzer manual removal:
Kill processes:
iservc.exe, progop.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\systeminit
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\txtfile\Shell\Open\Command\@=%Windir%\progop.exe 0 7 %Windir%\notepad.exe %1 %Windir%\initbak.dat iservc.exe
Delete files:iservc.exe, progop.exe, iservc.dll
Misc:Fizzer opens the following TCP ports: 81, 2018, 2019, 2020, 2021.
All parasite files can be found in the main system directory C:\Windows or C:\Winnt.
Post Comment: