Renadoc manual removal:
Kill processes:
check.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\check
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\desktop
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVerion\Policies\System\DisableRegistryTools=30
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVerion\Policies\System\DisableTaskMgr=30
Delete files:check.exe, desktop.com, direct.com
Misc:Exact file location:
desktop.com - C:\Windows or C:\Winnt
check.exe, direct.com - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment: