Stinx manual removal:
Kill processes:
csmsv.exe, cstsm.exe, svcmfte32.exe, photo + article.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\MainStart
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ManageProtoclCtrl
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\WindowsDiskLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MainStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ManageProtoclCtrl
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsDiskLog
Delete files:csmsv.exe, cstsm.exe, svcmfte32.exe, photo + article.exe
Misc:The photo + article.exe file arrives attached to e-mail messages.
All Stinx files are located in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
The parasite does not install all listed files and registry entries, but, depending on its version, creates only few of them.
Post Comment: