how to remove yphgx8.cmd

File size 107,860 bytes
MD5: 0x4FEAEC5E868AC773A1F08970CEEFC8E5
SHA-1: 0x575741BE76AE8688518FFF3B7B5B91537B103316
 ============================================================
Files created
C:\WINDOWS\system32\weidfsg.exe
C:\WINDOWS\system32\dsewtds0.dll
X:\yphgx8.cmd
X:\autorun.inf

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
nhkletd = "%System%\weidfsg.exe"


Values modified
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Folder\Hidden\SHOWALL\CheckedValue: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ShowSuperHidden: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoDriveTypeAutoRun: 0x00000091