Inker manual removal:
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windosxp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DisableKeyboard=rundll32.exe keyboard,disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DisableMouse=rundll32.exe mouse,disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start_Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start_Page=%Windir%\ipnuker.vbs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop=1
HKEY_CLASSES_ROOT\Shell\Shell\Explore\Command\(Default)=C:\Windows\ipnuker.vbs
HKEY_CLASSES_ROOT\txtfile\Shell\Open\Command\(Default)=%System%\wscript.exe
HKEY_CLASSES_ROOT\txtfile\Shell\Print\Command\(Default)=%System%\wscript.exe
HKEY_CLASSES_ROOT\txtfile\Shell\Printto\Command\(Default)=%System%\wscript.exe
HKEY_CLASSES_ROOT\Themefile\Shell\Open\Command\(Default)=%System%\wscript.exe
HKEY_CLASSES_ROOT\Unknown\Shell\Openas\Command\(Default)=%System%\wscript.exe
HKEY_CLASSES_ROOT\VBSFile\Shell\Command\(Default)=%System%\wscript.exe
HKEY_CLASSES_ROOT\VBSFile\Edit\Command\(Default)=%System%\wscript.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RegisteredOwner=Ipnuker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RegisteredOwner=Ipnuker.net
Delete files:ip.bat, ipuser.bat, ipusercreate.bat, ipnuker.vbs
Misc:[site address] is an address of a web site on the ipnuker.com domain.
Exact file location:
ip.bat, ipuser.bat, ipusercreate.bat - C:\Windows or C:\Winnt
ipnuker.vbs - C:\mIRC and (or) C:\Windows
Post Comment:
Attention: Use this form only if you have additional information about Inker parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.