Mutech manual removal:
Kill processes:
perfont.exe
Delete registry values:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetPT
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PerfFont
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETPT
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PERFFONT
HKEY_CLASSES_ROOT\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}
Unregister DLLs:wmiprv.dll
Delete files:perfont.exe, wmiprv.dll, netpt.sys
Misc:Exact file location:
perfont.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
wmiprv.dll - C:\Windows\System\wbem, C:\Windows\System32\wbem or C:\Winnt\System32\wbem
netpt.sys - C:\Windows\System\Drivers, C:\Windows\System32\Drivers of C:\Winnt\System32\Drivers
Post Comment: