Hanmon manual removal:
Delete registry values:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diskmon32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\DependOnService=diskmon32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ENUM\ROOT\LEGACY_DISKMON32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\dmon=diskmon32
Delete files:dmcpyt.dll, tstdmc.dll
Misc:All Hanmon files reside in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
Post Comment: