Xitram manual removal:
Kill processes:
nice sex.exe, recycled.exe, reply.exe, spoolsv.exe, 911.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Task=C:\Documents and Settings\[Current User]\spoolsv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Task=C:\Documents and Settings\[Current User]\spoolsv.exe
HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe=%Windir%\matrix.scr
Delete files:nice sex.exe, recycled.exe, reply.exe, spoolsv.exe, 911.exe, matrix.scr
Delete directories:E:\Secret
F:\Fuck
G:\911 Death
H:\VDO
I:\Data Fair
Misc:The reply.exe file arrives attached to Xitram e-mail messages.
Exact file location:
911.exe - G:\911 Death
matrix.scr - C:\WINDOWS or C:\WINNT
recycled.exe - A:, E:, F:, G:, H:, I:, J:
spoolsv.exe - C:\Documents and Settings\[Current User]
nice sex.exe - E:\Secret, F:\Fuck, H:\VDO, I:\Data Fair, J:
reply.exe - C:\Documents and Settings\[Current User]\Local Settings\Temp
Post Comment:
Attention: Use this form only if you have additional information about Xitram parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by Guest. 2007-07-22 03:07:48