Satiloler.b manual removal:
Kill processes:
lsass.exe, userinit.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\system
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\system
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SFCDisable=FFFFFF9D
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SFCScan=0
Delete files:lsass.exe, userinit.exe, sfc.dll, sfc_os.dll, xvid.dll, divx.ini, xvid.ini
Misc:Exact file location:
lsass.exe - C:\Program Files\Common Files\System
userinit.exe, xvid.dll, divx.ini, xvid.ini - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
sfc.dll, sfc_os.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32; C:\Windows\dllcache or C:\Winnt\dllcache
Post Comment: