Mebroot Trojan manual removal:
Delete registry values:HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973}
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973} deleteflag
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973} errorcontrol
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973}\enum nextinstance
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973}\parameters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973}\parameters servicedll
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973} imagepath
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973} objectname
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973}\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973}\enum 0
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{bee686b9-4c84-4487-9d72-9f40f051e973}\enum count
Delete files:cln2.tmp
Post Comment:
Attention: Use this form only if you have additional information about Mebroot Trojan parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by