ThumbSnatcher manual removal:
Delete registry values:HKEY_CLASSES_ROOT\Popupper.PopUp
HKEY_CLASSES_ROOT\Popupper.PopUp.1
HKEY_CLASSES_ROOT\CLSID\{FA79FA22-8DB3-43D1-997B-6DBFD8845569}
HKEY_CLASSES_ROOT\Interface\{8522FD29-4D5F-4377-B4D6-B832954A7932}
HKEY_CLASSES_ROOT\TypeLib\{ECE19BAA-A2B5-4E77-9197-574B9873718C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FA79FA22-8DB3-43D1-997B-6DBFD8845569}
Unregister DLLs:gdiplus64.dll, myaccess.dll
Delete files:gdiplus64.dll, myaccess.dll
Misc:ThumbSnatcher is related to the www.thumsnatcher.com web site.
The parasite's files reside in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
Post Comment: