IamBigBrother manual removal:
Kill processes:
cp.exe, cpanel.exe, dllhost.exe, nl.exe, ma.exe, spoolsv.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Service Manager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows System Tray
HKEY_CLASSES_ROOT\CLSID\{0C1F87AE-AE62-11D3-911C-00105A17B608}
HKEY_CLASSES_ROOT\CLSID\{371D0743-7A57-11D2-AD5A-00105A17B608}
HKEY_CLASSES_ROOT\CLSID\{39FDA070-61BA-11D2-AD84-00105A17B608}
HKEY_CLASSES_ROOT\CLSID\{4F99A075-5227-11D2-AD06-00105A17B608}
HKEY_CLASSES_ROOT\CLSID\{A1EEDAA7-C4D8-11D2-AD9C-00105A17B608}
HKEY_CLASSES_ROOT\CLSID\{B22FE43C-D1E8-432A-A862-9F83D5F04732}
HKEY_CLASSES_ROOT\CLSID\{CA4FC24B-C65C-11D1-AA6F-000000000000}
HKEY_CLASSES_ROOT\CLSID\{DDD136CE-517B-11D2-AD03-00105A17B608}
HKEY_CLASSES_ROOT\CLSID\{E9D55102-9683-11D2-BA68-0040053687FE}
Delete files:cp.exe, cpanel.exe, dllhost.exe, nl.exe, ma.exe, spoolsv.exe, asycfilt.dll, dartftp.dll, dartsock.dll, dmm.dll, encodex.dll, mimex.dll, winl.dll
Delete directories:C:\Windows\System\Fonts\System\Explorer\Mru
C:\Windows\System32\Fonts\System\Explorer\Mru
C:\Winnt\System32\Fonts\System\Explorer\Mru
C:\Windows\System\Fonts\svc
C:\Windows\System32\Fonts\svc
C:\Winnt\System32\Fonts\svc
Misc:Filenames may vary.
Post Comment: