Miprinc manual removal:
Kill processes:
dnalsi_akgnab.exe, explorer, exe, mr_cf.exe, mutant.exe, negeri serumpun sebalai.pif.bat.com.scr.exe, polymorph1.exe, polymorph2.exe, sahang.exe, sma negeri 1 pangkalpinang.exe, timah.exe, winlogon.exe, [X1].exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\[X]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\[X]
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig=1
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR=1
Delete files:dnalsi_akgnab.exe, explorer, exe, mr_cf.exe, mutant.exe, negeri serumpun sebalai.pif.bat.com.scr.exe, polymorph1.exe, polymorph2.exe, sahang.exe, sma negeri 1 pangkalpinang.exe, timah.exe, winlogon.exe, [X1].exe, message for my princess.scr, mr_coolface.scr, [X2].scr
Delete directories:C:\Documents and Settings\[Current User]\Application Data\Mr_CF
C:\Documents and Settings\[Current User]\Local Settings\Application Data\Mr_CF
Misc:[X1] and [X2] are random file names.
Exact file location:
[X1].exe, mr_coolface.scr - C:\WINDOWS\System32 or C:\WINNT\System32
negeri serumpun sebalai.pif.bat.com.scr.exe - C:\WINDOWS or C:\WINNT
dnalsi_akgnab.exe - C:\Documents and Settings\[Current User]\Local Settings
message for my princess.scr - C:\Documents and Settings\[Current User]\Desktop
winlogon.exe - C:\Documents and Settings\[Current User]\Start Menu\Programs\Startup
polymorph1.exe, polymorph2.exe - C:\Documents and Settings\[Current User]\Local Settings\Application Data
explorer.exe, mutant.exe, sahang.exe, sma negeri 1 pangkalpinang.exe, timah.exe - C:\Documents and Settings\[Current User]\Application Data
mr_cf.exe - C:\Documents and Settings\[Current User]\Application Data\Mr_CF and C:\Documents and Settings\[Current User]\Local Settings\Application Data\Mr_CF
Post Comment: