Pigeon AZOD manual removal:
Kill processes:
3.exe
Delete registry values:HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients nextinstance
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000 class
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000 classguid
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000 configflags
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000 devicedesc
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000 legacy
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000 service
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000\control *newlycreated*
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_dhcp_clients\0000\control activeservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients description
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients displayname
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients errorcontrol
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients imagepath
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients objectname
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients start
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients type
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\enum 0
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\enum count
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\enum nextinstance
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\parameters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\parameters servicedll
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\security
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dhcp clients\security security
Unregister DLLs:pvtfcx6n.dll
Delete files:3.exe pvtfcx6n.dll
Post Comment: