Lingling.b manual removal:
Kill processes:
chenzi.exe, svchost.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{9C0CFA58-3A6F-51ba-9EFE-5320F4F621BA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C0CFA58-3A6F-51ba-9EFE5320F4F621BA}
Unregister DLLs:bdscheca001.dll
Delete files:chenzi.exe, svchost.exe, ~.exe, bdscheca001.dll, g0ld.com
Misc:Exact file location:
chenzi.exe - C:\WINDOWS or C:\WINNT
~.exe - C:\WINDOWS\System32 or C:\WINNT\System32
svchost.exe, g0ld.com - C:\WINDOWS\Temp or C:\WINNT\Temp
Post Comment: