Rungbu.b manual removal:
Kill processes:
ctfmon.exe, docicon.exe, smss.exe, spoolsv.exe, svchost.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell=explorer.exe "C:\Recycled\svchost.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit=C:\Recycled\svchost.exe
HKEY_CURRENT_USER\Word.Document.8\DefaultIcon\(default)\C:\Program Files\Microsoft Office\Office\docicon.exe
HKEY_CURRENT_USER\scrfile\(Default)\Microsoft Word Document
Delete files:ctfmon.exe, docicon.exe, smss.exe, spoolsv.exe, svchost.exe
Misc:Exact file location:
docicon.exe - C:\Program Files\Microsoft Office\Office
ctfmon.exe, smss.exe, spoolsv.exe, svchost.exe - C:\Recycled
Post Comment: