Documente Academic
Documente Profesional
Documente Cultură
ER (Uninstall Guide)
1 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
2 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
3 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
4 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
5 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
6 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
7 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
8 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
9 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
10 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
11 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
%commondesktopdir%VBA/TrojanDownloader.Agent.ER.lnk
%windows%System32drivers[**Random**].sys
C:WindowsSystem32drivers[Random].sys
%program files%Backdoor.Emdivi!gen1 uninstall VBA/TrojanDownloader.Agent.ER.lnk
%ProgramFiles%Protected SearchTaskSchedulerCreator.exe
%System%driversUAC[RANDOM CHARACTERS].sys
%Documents and Settings%[UserName]Application Data VBA/TrojanDownloader.Agent.ER
C:Documents and Settings[user name]Local SettingsTemporary Internet Files
random.exe
12 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
13 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
14 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
15 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun .exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings WarnonBadCertRecving = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktop NoChangingWallPaper = 1
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments SaveZoneInformation = 1
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem DisableTaskMgr = 1
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload CheckExeSignatures = no
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain Use FormSuggest = yes
16 of 16
http://blog.mitechmate.com/remove-vbatrojandownloader-agent-er-uni...