|
What is Sayaudio and removal instructions
Sayaudio is a virus that infects all executable files it finds in the compromised system. The parasite also drops a trojan. It may attempt to block some network connections. Sayaudio runs as a service on every Windows startup.
Sayaudio manual removal: Kill processes: svchost.exe
Delete registry values: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XPManager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XPManager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_XPMANAGER
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_XPMANAGER
Delete files: svchost.exe, qmap32.dll
Misc: Exact file location:
svchost.exe - C:\WINDOWS or C:\WINNT
qmap32.dll - C:\WINDOWS\System32 or C:\WINNT\System32
|
|
|
|
|