Hopee manual removal:
Kill processes:
cssrss.exe
Delete registry values:HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\EnableFirewall = dword:00000000
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\< trojan executable > = "
:*:Enabled:DHCP Client"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WMDM PMSP Service = "%System%\cssrss.exe"
Delete files:
System\\cssrss.exe System\\.syz
Post Comment: