Womble manual removal:
Kill processes:
inet.exe, netupdate.exe, winlog.exe, winlogin.exe, winupdate.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ms_net_update
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ms_net_update
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell\explorer.exe %System%\[filename]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit\%System%\userinit.exe %System%\[filename]
HKEY_LOCAL_MACHINE\SOFTWARE\WinUpdate
Delete files:inet.exe, netupdate.exe, winlog.exe, winlogin.exe, winupdate.exe, yahoo_info.wmf
Misc:Exact file location:
netupdate.exe, winlog.exe, winlogin.exe, winupdate.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
inet.exe, yahoo_info.wmf - C:\Documents and Settings\[Current User]\Application Data\Microsoft\WinTools\dvd
Post Comment: