Gamqowi manual removal:
Kill processes:
ajlkqjlk.exe, dodrrr.exe, mwfirewall.exe, svch0st.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ms_anti_spyware
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\ms_anti_spyware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\devsec
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ms_anti_spyware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ms_anti_spyware
HKEY_CURRENT_USER\Software\Microsoft\OLE\winrun=svch0st.exe
HKEY_CURRENT_USER\System\CurrentControlSet\Control\Lsa\winrun=svch0st.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\winrun=svch0st.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\winrun=svch0st.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DisableRegistryTools=0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DisableRegistryTools=0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SFCDisable=0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SFCScan=0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\lmnla
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\mtxnm
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\veer
Delete files:ajlkqjlk.exe, dodrrr.exe, mwfirewall.exe, svch0st.exe, mscore32.dll
Misc:All Gamqowi files can be found in C:\Windows or C:\Winnt directory.
Post Comment: