Incef manual removal:
Kill processes:
winexec.exe, winsys.exe, winupdate.exe, commando.exe, mysister_fucking.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winexec=%Windir%\winexec.exe
HKEY_CURRENT_USER\Software\Kazaa\LocalContent\DisableSharing=0
HKEY_CURRENT_USER\Software\Kazaa\LocalContent\dir[X]=012345:[xfolder]
HKEY_CURRENT_USER\Software\Kazaa\ResultsFilter\virus_filter=0
HKEY_CURRENT_USER\Software\Kazaa\ResultsFilter\firewall_filter=0
Delete files:winexec.exe, winsys.exe, winupdate.exe, commando.exe, mysister_fucking.exe, command.pif, srvwin.scr, comand.scr
Misc:[X] is the number from 0 to 5. [xfolder] is one of the following: C:\, C:\Windows\Shared, C:\Winnt\Shared.
Exact file location:
winexec.exe,command.pif,srvwin.scr - C:\Windows or C:\Winnt
winsys.exe,winupdate.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
commando.exe,command.scr - C:\
other files - C:\Windows\shared or C:\Winnt\shared
Post Comment: