W32/Murlo.ABJ manual removal:
Kill processes:
init32.exe frmwrk32.exe userinit.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete run=frmwrk32.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
DisableTaskMgr Change Value to 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
NoChangingWallpaper Change Value to 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoSetActiveDesktop Change Value to 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoActiveDesktopChanges Change Value to 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop
NoChangingWallpaper Change Value to 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
NoSetActiveDesktop Change Value to 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
NoActiveDesktopChanges Change Value to 1
HKCU\Software\Microsoft\Internet Explorer\Desktop\Components
GeneralFlags Change Value to 0
HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0
CurrentState Change Value to 40000004
HKCU\Software\Microsoft\Internet Explorer\Desktop\General
Wallpaper \ahtn.htm
Delete files:%Windows\\System\\init32.exe %Windows\\System\\frmwrk32.exe %Windows\\System\\userinit.exe
Post Comment: