Trojan Wincod manual removal:
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\?€?WmpTray?€? = ?€?[PATH TO TROJAN]?€?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\?€?Debugger?€? = ?€?[http://]wincodecpro.com/purcha[REMOVED]?€?
HKEY_LOCAL_MACHINE\SOFTWARE\GenericMultiMedia\WinCoDecPRO\?€?countr?€? = ?€?[NUMBER OF TIMES TROJAN HAS EXECUTED]?€?
HKEY_LOCAL_MACHINE\SOFTWARE\GenericMultiMedia
HKEY_LOCAL_MACHINE\SOFTWARE\GenericMultiMedia\WinCoDecPRO
Post Comment: