This solution deletes/modifies registry keys/entries added/modified by this malware. Before performing the steps below, make sure you know how to back up the registry and how to restore it if a problem occurs. Refer to this Microsoft article for more information about modifying your computer's registry.
Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
In the left panel, double-click the following:HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT> CurrentVersion>Winlogon
In the right panel, locate the entry:Shell = "Explorer.exe %System%\system32.dll.vbs"
Right-click on the value name and choose Modify. Change the value data of this entry to:Explorer.exe
Subscribe to:
Post Comments (Atom)
Posts
No comments:
Post a Comment