Stration.c manual removal:
Kill processes:
corpdpvv.exe, rsmb.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rsmb
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\acac
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs=sisbmsxb.dll fldrtsd3.dll
Delete files:corpdpvv.exe, rsmb.exe, acac.dll, d3diusp1.dll, fldrtsd3.dll, rsmb.dll, sisbmsxb.dll, ~[X].tmp
Misc:[X] is a random number.
Exact file location:
rsmb.exe, rsmb.dll - C:\Windows or C:\Winnt
corpdpvv.exe, acac.dll, d3diusp1.dll, fldrtsd3.dll, sisbmsxb.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment: