|
What is PWSYahoo and removal instructions
PWSYahoo is a trojan, which steals Yahoo! Messenger passwords and account details. It sends gathered data to a predetermined e-mail address. PWSYahoo may disable some essential system tools including the Registry Editor. The trojan automatically runs on every Windows startup.
PWSYahoo manual removal: Kill processes: nndenb.exe
Delete registry values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft PCHealth32=nndenb.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
Delete files: nndenb.exe
Misc: The nndenb.exe file can be found in C:\Windows or C:\Winnt directory.
|