Sixem.c manual removal:
Kill processes:
jucshed.exe, temps[X].exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\javastr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\javastr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\javastr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\rap
Delete files:jucshed.exe, temps[X].exe
Misc:[X] is a combination of three random digits.
Exact file location:
temps[X].exe - C:\Windows\Temp or C:\Winnt\Temp
jucshed.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment: