Zhong manual removal:
Kill processes:
explorer.exe, weather.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rundll32
HKEY_CLASSES_ROOT\Chajian.ChajianHelper
HKEY_CLASSES_ROOT\Chajian.ChajianHelper.1
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\weather_is1
Unregister DLLs:sysreal32.dll
Delete files:explorer.exe, weather.exe, sysreal32.dll
Delete directories:C:\Program Files\Weather
C:\Documents and Settings\All Users\Start Menu\Programs
Misc:Exact file location:
weather.exe - C:\Program Files\Weather
explorer.exe, sysreal32.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment: