Video ActiveX Object manual removal:
Kill processes:
dumpserv.com nvctrl.exe icthis.exe ictun.exe waun.exe isfmntr.exe G2-tmp.exe sbmntr.exe sbsm.exe sbun.exe scit.exe scm.exe scu.exe uninst.exe G5-tmp.exe isfun.exe msmsgs.exe
Delete registry values:SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
{ab75cc7d-2751-4144-a278-5462d5a5884c}
{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Online Add-on
{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
NetProject
{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
{a6d478c6-7961-4fe9-be4b-e621dd640112}
Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
10C52A42-DB8B-4ade-AA4A-CED6A8282B85
{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
HKEY_CURRENT_USER\Software\Online Add-on
{aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
{2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
E404.e404mgr.1
{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
{c0ca766d-060c-48e1-b536-205e321bd174}
Microsoft\Windows\CurrentVersion\Uninstall\Web Application
Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
Microsoft\Windows\CurrentVersion\policies\explorer\run\some
BA0BACB5-FC95-451E-94D2-4959AB0949D2
F10587E9-0E47-4CBE-84AE-7DD20B8684CC
{747e1fbe-b70f-441d-bbca-6e536c04924a}
{81705D67-3F73-4983-859B-97D0922E5ABE}
7265100a-17e1-41bf-bd08-63b95a25a9c3
{27cb634d-c84e-4c00-9b53-f5523601dbad}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
E404.e404mgr
Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{C03FD59D-9104-44B7-929A-9EAA0BA05211}
{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
{E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
{F7D09218-46D7-4D3D-9B7F-315204CD0836}
{499B8A53-5949-4625-A8BF-A4D934AFC9DA}
{E63648F7-3933-440E-B4F6-A8584DD7B7EB}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
%UserProfile%\Application Data\Microsoft\Crypto\RSA
%UserProfile%\Application Data\Microsoft\ProtectObjects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
Unregister DLLs:dtjby.dll antzozc.dll Trojan.Zlob|eulbn.dll werbetpwg.dll sysdivx.dll vipextnog.dll werbetlrw.dll vipextgpk.dll vipextpxm.dll voipwet.dll fsehfcu.dll qhcvdw.dll findsiteonline.dll 1201639705.dll 1201639702.dll ofcpi.dll 1202030455.dll iinqyl.dll 1198448796.dll sbmdl.dll wamdl.dll 1198448799.dll 1202567261.dll 1202650266.dll 1203140349.dll 1203634438.dll 1203846321.dll hdtip.dll werbettxf.dll ictmdl.dll isfmdl.dll nczupfw.dll uimcu.dll
Delete files:ncompat.tlb hp[X].tmp msvol.tlb vnp7s.net zxserv0.com dumpserv.com