Tagged: Antispyware

microsfot process explorer http://technet.microsoft.com/en-us/sysinternals/bb896653 microsoft autoruns http://technet.microsoft.com/en-us/sysinternals/bb963902 Go to registry. Navigate : [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon], Delete all data under Userinit String value except C:\WINDOWS\system32\userinit.exe. Exit registry. Search...

c:\documents and settings\all users\application data\ehsfaxdecunmnk.exe