Nopride manual removal:
Kill processes:
adobegammalog.exe, dfinstall.exe, ego.exe, services.exe, system32.exe, [X]log.exe, [X].exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\EGO31/08/2053
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispAppearancePage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCpl=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispSettingsPage=1
Delete files:adobegammalog.exe, dfinstall.exe, ego.exe, services.exe, system32.exe, [X]log.exe, [X].exe
Misc:[X] is current user's logon name.
Exact file location:
services.exe, system32.exe - C:\WINDOWS or C:\WINNT
[X]log.exe - C:\Documents and Settings\[Current User]\Desktop
[X].exe - C:\Documents and Settings\[Current User]\My Documents
dfinstall.exe - C:\Documents and Settings\[Current User]\Favorites
adobegammalog.exe - C:\Documents and Settings\[Current User]\Start Menu\Programs\Startup
Post Comment: