View Single Post
Old 29-06-2007, 22:08   #18
topcreator
cf.addict
 
Join Date: Apr 2005
Posts: 249
topcreator has disabled reputation
Re: Pigeon PP spyware problem

Find and Delete the following Files:
  • 023.exe
  • %program_files%\messenger\svchost.exe
  • %system%\svkp.sys
  • %program_files%\messenger\svchost.exe
  • 023.exe
Find and Delete the following Registry Keys:
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp nextinstance
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000 class
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000 classguid
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000 configflags
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000 devicedesc
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000 legacy
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000 service
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000\control *newlycreated*
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_svkp\0000\control activeservice
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___ nextinstance
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000 class
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000 classguid
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000 configflags
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000 devicedesc
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000 legacy
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000 service
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000\control *newlycreated*
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\r oot\legacy_vista_xp___\0000\control activeservice
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp displayname
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp errorcontrol
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp imagepath
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp start
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp type
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp\enum 0
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp\enum count
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp\enum nextinstance
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\svkp\security security
topcreator is online now   Reply With Quote