Monday, November 21, 2005

I Win :)

Registry entries found:

[HKEY_LOCAL_MACHINE\Software\C6TO8A2reNm9]
@="vGDJN6JSTTSTTUTjAKjvjjSTTSiVT.otju.yTKQKL6EZYT5JAN6JKT
AeWEG56EUKQK"
"Device"="\\\\.\\DisDPDD"
"DriverPath"="C:\\WINDOWS\\system32\\drivers\\i80modem.sys"
"DriverName"="Polrver"
"HideUninstallerName"="C:\\Program Files\\Sienkind\\rnrpya64.exe"
"HDll"="C:\\WINDOWS\\system32\\sysmdl32.dll"
"ServerAddress"="adchannel.contextplus.net"
"LegalNote"="http://adchannel.contextplus.net/legal-note/nonbranded.html"
"PartnerId"="CP.GH2"
"InstallationId"="{X2e238d9-6751-644d-6af2-70413177fe33}"
"PageFiltering"=dword:00000001
"ClientName"="C:\\Program Files\\Sienkind\\mqgcsrss.exe"
"AutoUpdater"="C:\\WINDOWS\\system32\\stksasrv.exe"
"Version"="2.0.128"
"CrMnTmt"=dword:0036ee80

************

Removing hidden service:
Service Polrver removed.

Removing hidden folder:
Deletion of folder Sienkind succeeded!

Deleting files:

Deletion of file C:\WINDOWS\system32\drivers\i80modem.sys succeeded!
Deletion of file C:\WINDOWS\system32\stksasrv.exe succeeded!
Deletion of file C:\WINDOWS\system32\sysmdl32.dll succeeded!

Backing up files:
Done!

Removing registry entries:

REGEDIT4

[-HKEY_CURRENT_USER\Software\C6TO8A2reNm9]
[-HKEY_LOCAL_MACHINE\Software\C6TO8A2reNm9]

Done!

Finished!

Teh Win!

0 Comments:

Post a Comment

<< Home