|
PWSteal.Metafisher
removal procedures requires technical know-how on
computer troubleshooting. It is better to consult your LAN Administrator
or Technical Persons to avoid additional damage on your computer if
modifications on Services and Registry have to be done.
MANUAL REMOVAL:
1. Disable System Restore (Windows Me/XP).
[how to]
2. Update the virus definitions.
3. Run a full system scan and delete all the files detected.
4. Delete any values added to the registry.
[how
to edit registry]
Navigate to the subkey and delete
values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
SharedAccess\Parameters\FirewallPolicy\StandardProfile\
AuthorizedApplications\List
Values:
"(Default)" = ":*:MCAFEE_SIGNATURE_HERE_LOL"
"%ProgramFiles%\Internet Explorer\IEXPLORE.EXE" = "%ProgramFiles%\Internet
Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer"
Navigate to the subkey and delete
values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control
Panel\load
Values:
"next_install" = "420ca762"
"compid" = "[RANDOM_ID]"
Navigate to the subkey and delete
value:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Value:
"Enable Browser Extensions" = "yes"
Delete the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control
Panel\load\httpreport
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control
Panel\load\waspopup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control
Panel\load\formwas
HKEY_LOCAL_MACHINE\SOFTRWARE\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\{78364D99-A640-4DDF-B91A-67EFF8373045}
5.
Exit registry editor and restart the computer.
***If it makes changes to Windows
registry that may prevent you from running executable files. A tool to
reset registry values to the default value is available for download.
Click Here.
6. In order to make sure that trojan PWSteal.Metafisher is
completely eliminated from your computer, carry out a full scan of your
computer using
AntiVirus and
Antispyware Software. Another way to delete the virus using various
Antivirus Program without the need to install can be done with
Online Virus
Scanner.
Click here to
proceed 
Click here to
proceed
Download and run any of these
Anti-Spyware:
Spy Sweeper
Spyware Doctor
Pest Patrol
Spy Hunter
|
