KillSec manual removal:
Kill processes:
smss.exe, winlogon.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Logon Process
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Session Manager Subsystem
HKEY_CLASSES_ROOT\ib1dll6.CBrowserHelper
HKEY_CLASSES_ROOT\CLSID\{1E6CE4CD-161B-4847-B8BF-E2EF72299D69}
HKEY_CLASSES_ROOT\Interface\{8C691F25-C565-4FB7-8BCC-E85169BD7C47}
HKEY_CLASSES_ROOT\TypeLib\{14A5F3E7-B235-4D98-9264-5C67D2657BC4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E6CE4CD-161B-4847-B8BF-E2EF72299D69}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E6CE4CD-161B-4847-B8BF-E2EF72299D69}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\InitRegKey
Delete files:smss.exe, winlogon.exe
Misc:KillSec files reside in the main system folder C:\Windows or C:\Winnt.
Post Comment:
Attention: Use this form only if you have additional information about KillSec parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by Guest. 2006-08-18 09:08:50