Naninf.c manual removal:
Kill processes:
lsadst.exe, photo and article.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\WindowsProtocolLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsProtocolLog
Delete files:lsadst.exe, photo and article.exe, [X].bat
Misc:Naninf.c usually arrives as the photo and article.exe file attached to a malicious e-mail message.
[X] is a random file name.
Exact file location:
[X].bat - C:\Windows\Temp or C:\Winnt\Temp
lsadst.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment: