Imaut.u manual removal:
Kill processes:
svchost.exe, svchost32.exe
Delete registry values:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Task Manager
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Yahoo Messenger
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun=1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\Homepage=1
HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_buzz\Content URL=[site address]
HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_Launchcast\Content URL=[site address]
Delete files:svchost.exe, svchost32.exe
Misc:[site address] is an address of a web site on the quicknews.info domain.
Exact file location:
svchost.exe - C:\WINDOWS\System or C:\WINNT\System
svchost32.exe - C:\WINDOWS\System32 or C:\WINNT\System32
Post Comment: