XP Malware 2010 manual removal:
Kill processes:
av.exe ave.exe
Delete registry values:HKEY_CURRENT_USERSoftwareClasses.exe
HKEY_CURRENT_USERSoftwareClasses.exeDefaultIcon
HKEY_CURRENT_USERSoftwareClasses.exeshell
HKEY_CURRENT_USERSoftwareClasses.exeshellopen
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand
HKEY_CURRENT_USERSoftwareClasses.exeshellrunas
HKEY_CURRENT_USERSoftwareClasses.exeshellrunascommand
HKEY_CURRENT_USERSoftwareClasses.exeshellstart
HKEY_CURRENT_USERSoftwareClasses.exeshellstartcommand
HKEY_CURRENT_USERSoftwareClassessecfile
HKEY_CURRENT_USERSoftwareClassessecfileDefaultIcon
HKEY_CURRENT_USERSoftwareClassessecfileshell
HKEY_CURRENT_USERSoftwareClassessecfileshellopen
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand
HKEY_CURRENT_USERSoftwareClassessecfileshellrunas
HKEY_CURRENT_USERSoftwareClassessecfileshellrunascommand
HKEY_CURRENT_USERSoftwareClassessecfileshellstart
HKEY_CURRENT_USERSoftwareClassessecfileshellstartcommand
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand | @ = ????%AppData%av.exe?? /START ??%1?ณ %*??
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand | IsolatedCommand = ????%1?ณ %*??
HKEY_CURRENT_USERSoftwareClasses.exe | @ = ??secfile??
HKEY_CURRENT_USERSoftwareClasses.exe | Content Type = ??application/x-msdownload??
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand | @ = ????%AppData%av.exe?? /START ??%1?ณ %*??
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand | IsolatedCommand = ????%1?ณ %*??
Delete files:av.exe ave.exe
Post Comment: