TROJ_DLOAD.CK

To delete the registry key this malware/grayware created:

1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
2. In the left panel, double-click the following:
   HKEY_CLASSES_ROOT
3. Still in the left panel, locate and delete the key:
   VSFlexGrid8.VSFlexGridN.1
4. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>VSFlexGrid8.VSFlexGridN.1
5. Still in the left panel, locate and delete the key:
   CLSID
6. Again Still in the left panel, locate and delete the key:
   VSFlexGrid8.VSFlexGridN
7. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>VSFlexGrid8.VSFlexGridN
8. Still in the left panel, locate and delete the key:
   CLSID
9. Again Still in the left panel, locate and delete the key:
   CurVer
10. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID
11. Still in the left panel, locate and delete the key:
    {74233DB3-F72F-44ea-94DC-258A624037E6}
12. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{74233DB3-F72F-44ea-94DC-258A624037E6}
13. Still in the left panel, locate and delete the key:
    ProgID
14. Again Still in the left panel, locate and delete the key:
    VersionIndependentProgID
15. Again Still in the left panel, locate and delete the key:
    Programmable
16. Again Still in the left panel, locate and delete the key:
    InprocServer32
17. Again Still in the left panel, locate and delete the key:
    Control
18. Again Still in the left panel, locate and delete the key:
    Insertable
19. Again Still in the left panel, locate and delete the key:
    ToolboxBitmap32
20. Again Still in the left panel, locate and delete the key:
    MiscStatus
21. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{74233DB3-F72F-44ea-94DC-258A624037E6}>MiscStatus
22. Still in the left panel, locate and delete the key:
    1
23. Again Still in the left panel, locate and delete the key:
    TypeLib
24. Again Still in the left panel, locate and delete the key:
    Version
25. Again Still in the left panel, locate and delete the key:
    Verb
26. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib
27. Still in the left panel, locate and delete the key:
    {9DB12C0E-8736-49E6-9CA1-896A1E67D6F3}
28. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{9DB12C0E-8736-49E6-9CA1-896A1E67D6F3}
29. Still in the left panel, locate and delete the key:
    1.0
30. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{9DB12C0E-8736-49E6-9CA1-896A1E67D6F3}>1.0
31. Still in the left panel, locate and delete the key:
    FLAGS
32. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{9DB12C0E-8736-49E6-9CA1-896A1E67D6F3}>1.0>0
33. Still in the left panel, locate and delete the key:
    win32
34. Again Still in the left panel, locate and delete the key:
    HELPDIR
35. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface
36. Still in the left panel, locate and delete the key:
    {99B81306-F18F-4C28-8801-EC9676762E88}
37. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{99B81306-F18F-4C28-8801-EC9676762E88}
38. Still in the left panel, locate and delete the key:
    ProxyStubClsid
39. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
40. Again Still in the left panel, locate and delete the key:
    TypeLib
41. Again Still in the left panel, locate and delete the key:
    {8E203240-537D-11D3-BD8C-000000000000}
42. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{8E203240-537D-11D3-BD8C-000000000000}
43. Still in the left panel, locate and delete the key:
    ProxyStubClsid
44. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
45. Again Still in the left panel, locate and delete the key:
    TypeLib
46. Again Still in the left panel, locate and delete the key:
    {6E70D75A-17C8-4652-A9CD-40AD15F743B3}
47. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6E70D75A-17C8-4652-A9CD-40AD15F743B3}
48. Still in the left panel, locate and delete the key:
    ProxyStubClsid
49. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
50. Again Still in the left panel, locate and delete the key:
    TypeLib
51. Again Still in the left panel, locate and delete the key:
    {F7BD8706-6CE2-4F7D-B797-1E3A9B617C00}
52. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{F7BD8706-6CE2-4F7D-B797-1E3A9B617C00}
53. Still in the left panel, locate and delete the key:
    ProxyStubClsid
54. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
55. Again Still in the left panel, locate and delete the key:
    TypeLib
56. Again Still in the left panel, locate and delete the key:
    {FE41E29B-36E8-4841-99CA-C7ED4A93100A}
57. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{FE41E29B-36E8-4841-99CA-C7ED4A93100A}
58. Still in the left panel, locate and delete the key:
    ProxyStubClsid
59. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
60. Again Still in the left panel, locate and delete the key:
    TypeLib
61. Again Still in the left panel, locate and delete the key:
    {7982E950-A915-444E-99B1-3B9FD237026A}
62. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{7982E950-A915-444E-99B1-3B9FD237026A}
63. Still in the left panel, locate and delete the key:
    9.0
64. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{7982E950-A915-444E-99B1-3B9FD237026A}>9.0
65. Still in the left panel, locate and delete the key:
    FLAGS
66. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{7982E950-A915-444E-99B1-3B9FD237026A}>9.0>0
67. Still in the left panel, locate and delete the key:
    win32
68. Again Still in the left panel, locate and delete the key:
    HELPDIR
69. Again Still in the left panel, locate and delete the key:
    {B2AAAE0C-8770-488D-9A49-F4F0D8964E6B}
70. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{B2AAAE0C-8770-488D-9A49-F4F0D8964E6B}
71. Still in the left panel, locate and delete the key:
    ProxyStubClsid
72. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
73. Again Still in the left panel, locate and delete the key:
    TypeLib
74. Again Still in the left panel, locate and delete the key:
    {4CBC1C6B-FCD7-4F5A-9FF4-395A96F28D34}
75. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{4CBC1C6B-FCD7-4F5A-9FF4-395A96F28D34}
76. Still in the left panel, locate and delete the key:
    ProxyStubClsid
77. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
78. Again Still in the left panel, locate and delete the key:
    TypeLib
79. Again Still in the left panel, locate and delete the key:
    {5C67D2A8-B620-4977-BD4B-D6FA30BBB5D5}
80. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{5C67D2A8-B620-4977-BD4B-D6FA30BBB5D5}
81. Still in the left panel, locate and delete the key:
    ProxyStubClsid
82. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
83. Again Still in the left panel, locate and delete the key:
    TypeLib
84. Again Still in the left panel, locate and delete the key:
    {34967E63-5095-4F1A-88B9-48D6D897CE3A}
85. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{34967E63-5095-4F1A-88B9-48D6D897CE3A}
86. Still in the left panel, locate and delete the key:
    ProxyStubClsid
87. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
88. Again Still in the left panel, locate and delete the key:
    TypeLib
89. Again Still in the left panel, locate and delete the key:
    {555FE62B-78D4-4FF7-BADD-4EA28341C65D}
90. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{555FE62B-78D4-4FF7-BADD-4EA28341C65D}
91. Still in the left panel, locate and delete the key:
    ProxyStubClsid
92. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
93. Again Still in the left panel, locate and delete the key:
    TypeLib
94. Again Still in the left panel, locate and delete the key:
    {C1AD7797-0222-4EF5-9741-2D5B62C63548}
95. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C1AD7797-0222-4EF5-9741-2D5B62C63548}
96. Still in the left panel, locate and delete the key:
    ProxyStubClsid
97. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
98. Again Still in the left panel, locate and delete the key:
    TypeLib
99. Again Still in the left panel, locate and delete the key:
    {6E85440F-CAB1-4FD9-9FD3-234A0B75211D}
100. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6E85440F-CAB1-4FD9-9FD3-234A0B75211D}
101. Still in the left panel, locate and delete the key:
     ProxyStubClsid
102. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
103. Again Still in the left panel, locate and delete the key:
     TypeLib
104. Again Still in the left panel, locate and delete the key:
     {9279543F-E7E1-4943-8701-986F459BE772}
105. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{9279543F-E7E1-4943-8701-986F459BE772}
106. Still in the left panel, locate and delete the key:
     ProxyStubClsid
107. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
108. Again Still in the left panel, locate and delete the key:
     TypeLib
109. Again Still in the left panel, locate and delete the key:
     {C8159277-251C-46F6-A75D-AB32F84EDDDE}
110. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C8159277-251C-46F6-A75D-AB32F84EDDDE}
111. Still in the left panel, locate and delete the key:
     ProxyStubClsid
112. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
113. Again Still in the left panel, locate and delete the key:
     TypeLib
114. Again Still in the left panel, locate and delete the key:
     {5D66FEA3-C3E4-425A-ABC7-29DBEE061AB3}
115. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{5D66FEA3-C3E4-425A-ABC7-29DBEE061AB3}
116. Still in the left panel, locate and delete the key:
     ProxyStubClsid
117. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
118. Again Still in the left panel, locate and delete the key:
     TypeLib
119. Again Still in the left panel, locate and delete the key:
     {DAD33C35-D92D-455A-AE67-EB38CCB588B5}
120. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{DAD33C35-D92D-455A-AE67-EB38CCB588B5}
121. Still in the left panel, locate and delete the key:
     ProxyStubClsid
122. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
123. Again Still in the left panel, locate and delete the key:
     TypeLib
124. Again Still in the left panel, locate and delete the key:
     {AA83298F-4D29-4E4A-A72E-AEC5DD465A38}
125. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{AA83298F-4D29-4E4A-A72E-AEC5DD465A38}
126. Still in the left panel, locate and delete the key:
     ProxyStubClsid
127. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
128. Again Still in the left panel, locate and delete the key:
     TypeLib
129. In the left panel, double-click the following:
     HKEY_CLASSES_ROOT>CLSID
130. Still in the left panel, locate and delete the key:
     {437CF5B9-2A4C-4FB5-A01C-13E65CEB47E9}
131. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{437CF5B9-2A4C-4FB5-A01C-13E65CEB47E9}
132. Still in the left panel, locate and delete the key:
     InprocServer32
133. Again Still in the left panel, locate and delete the key:
     MUC_OCX.MUCEq
134. Again Still in the left panel, locate and delete the key:
     {5BB8D3C9-64EA-4048-A1BA-4A7D80970E90}
135. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{5BB8D3C9-64EA-4048-A1BA-4A7D80970E90}
136. Still in the left panel, locate and delete the key:
     InprocServer32
137. Again Still in the left panel, locate and delete the key:
     MUC_OCX.MUCGraphicAlphabet
138. Again Still in the left panel, locate and delete the key:
     {55E168BC-3C39-48B5-B4EB-47A0DFE97175}
139. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{55E168BC-3C39-48B5-B4EB-47A0DFE97175}
140. Still in the left panel, locate and delete the key:
     InprocServer32
141. Again Still in the left panel, locate and delete the key:
     MUC_OCX.MUCLabel
142. Again Still in the left panel, locate and delete the key:
     {585BA9E5-B92B-4D4A-9F39-96EF10FDF4E7}
143. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{585BA9E5-B92B-4D4A-9F39-96EF10FDF4E7}
144. Still in the left panel, locate and delete the key:
     InprocServer32
145. Again Still in the left panel, locate and delete the key:
     MUC_OCX.MUCFormResize2
146. Again Still in the left panel, locate and delete the key:
     {E752E703-A4FA-4D41-BA92-87B48C9001C0}
147. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{E752E703-A4FA-4D41-BA92-87B48C9001C0}
148. Still in the left panel, locate and delete the key:
     InprocServer32
149. Again Still in the left panel, locate and delete the key:
     MUC_OCX.MUCButton2
150. Again Still in the left panel, locate and delete the key:
     {17BD189B-4D23-4EEA-A6CC-1F229710E11D}
151. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{17BD189B-4D23-4EEA-A6CC-1F229710E11D}
152. Still in the left panel, locate and delete the key:
     InprocServer32
153. Again Still in the left panel, locate and delete the key:
     MUC_OCX.MUCBackGround2
154. Close Registry Editor.

To delete the registry value this malware/grayware created:

1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
2. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{74233DB3-F72F-44ea-94DC-258A624037E6}>InprocServer32
3. In the right panel, locate and delete the entry:
   ThreadingModel = "Apartment"
4. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{99B81306-F18F-4C28-8801-EC9676762E88}>TypeLib
5. In the right panel, locate and delete the entry:
   Version = "1.0"
6. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{8E203240-537D-11D3-BD8C-000000000000}>TypeLib
7. In the right panel, locate and delete the entry:
   Version = "1.0"
8. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6E70D75A-17C8-4652-A9CD-40AD15F743B3}>TypeLib
9. In the right panel, locate and delete the entry:
   Version = "1.0"
10. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{F7BD8706-6CE2-4F7D-B797-1E3A9B617C00}>TypeLib
11. In the right panel, locate and delete the entry:
    Version = "1.0"
12. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{FE41E29B-36E8-4841-99CA-C7ED4A93100A}>TypeLib
13. In the right panel, locate and delete the entry:
    Version = "1.0"
14. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{B2AAAE0C-8770-488D-9A49-F4F0D8964E6B}>TypeLib
15. In the right panel, locate and delete the entry:
    Version = "9.0"
16. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{4CBC1C6B-FCD7-4F5A-9FF4-395A96F28D34}>TypeLib
17. In the right panel, locate and delete the entry:
    Version = "9.0"
18. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{5C67D2A8-B620-4977-BD4B-D6FA30BBB5D5}>TypeLib
19. In the right panel, locate and delete the entry:
    Version = "9.0"
20. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{34967E63-5095-4F1A-88B9-48D6D897CE3A}>TypeLib
21. In the right panel, locate and delete the entry:
    Version = "9.0"
22. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{555FE62B-78D4-4FF7-BADD-4EA28341C65D}>TypeLib
23. In the right panel, locate and delete the entry:
    Version = "9.0"
24. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C1AD7797-0222-4EF5-9741-2D5B62C63548}>TypeLib
25. In the right panel, locate and delete the entry:
    Version = "9.0"
26. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6E85440F-CAB1-4FD9-9FD3-234A0B75211D}>TypeLib
27. In the right panel, locate and delete the entry:
    Version = "9.0"
28. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{9279543F-E7E1-4943-8701-986F459BE772}>TypeLib
29. In the right panel, locate and delete the entry:
    Version = "9.0"
30. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C8159277-251C-46F6-A75D-AB32F84EDDDE}>TypeLib
31. In the right panel, locate and delete the entry:
    Version = "9.0"
32. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{5D66FEA3-C3E4-425A-ABC7-29DBEE061AB3}>TypeLib
33. In the right panel, locate and delete the entry:
    Version = "9.0"
34. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{DAD33C35-D92D-455A-AE67-EB38CCB588B5}>TypeLib
35. In the right panel, locate and delete the entry:
    Version = "9.0"
36. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{AA83298F-4D29-4E4A-A72E-AEC5DD465A38}>TypeLib
37. In the right panel, locate and delete the entry:
    Version = "9.0"
38. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{437CF5B9-2A4C-4FB5-A01C-13E65CEB47E9}
39. In the right panel, locate and delete the entry:
    ProgID = "MUC_OCX.MUCEq"
40. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{437CF5B9-2A4C-4FB5-A01C-13E65CEB47E9}>InprocServer32
41. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
42. Again In the right panel, locate and delete the entry:
    ToolboxBitmap32 = "%System%\MUC_OCX.ocx, 30000"
43. Again In the right panel, locate and delete the entry:
    MiscStatus = "0"
44. Again In the right panel, locate and delete the entry:
    MiscStatus\1 = "131473"
45. Again In the right panel, locate and delete the entry:
    TypeLib = "{7982E950-A915-444E-99B1-3B9FD237026A}"
46. Again In the right panel, locate and delete the entry:
    VERSION = "9.0"
47. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>MUC_OCX.MUCEq
48. In the right panel, locate and delete the entry:
    Clsid = "{437CF5B9-2A4C-4FB5-A01C-13E65CEB47E9}"
49. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C1AD7797-0222-4EF5-9741-2D5B62C63548}
50. In the right panel, locate and delete the entry:
    ProxyStubClsid = "{00020424-0000-0000-C000-000000000046}"
51. Again In the right panel, locate and delete the entry:
    ProxyStubClsid32 = "{00020424-0000-0000-C000-000000000046}"
52. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{AA83298F-4D29-4E4A-A72E-AEC5DD465A38}
53. In the right panel, locate and delete the entry:
    ProxyStubClsid = "{00020420-0000-0000-C000-000000000046}"
54. Again In the right panel, locate and delete the entry:
    ProxyStubClsid32 = "{00020420-0000-0000-C000-000000000046}"
55. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{5BB8D3C9-64EA-4048-A1BA-4A7D80970E90}
56. In the right panel, locate and delete the entry:
    ProgID = "MUC_OCX.MUCGraphicAlphabet"
57. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{5BB8D3C9-64EA-4048-A1BA-4A7D80970E90}>InprocServer32
58. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
59. Again In the right panel, locate and delete the entry:
    ToolboxBitmap32 = "%System%\MUC_OCX.ocx, 30001"
60. Again In the right panel, locate and delete the entry:
    MiscStatus = "0"
61. Again In the right panel, locate and delete the entry:
    MiscStatus\1 = "131473"
62. Again In the right panel, locate and delete the entry:
    TypeLib = "{7982E950-A915-444E-99B1-3B9FD237026A}"
63. Again In the right panel, locate and delete the entry:
    VERSION = "9.0"
64. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>MUC_OCX.MUCGraphicAlphabet
65. In the right panel, locate and delete the entry:
    Clsid = "{5BB8D3C9-64EA-4048-A1BA-4A7D80970E90}"
66. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{555FE62B-78D4-4FF7-BADD-4EA28341C65D}
67. In the right panel, locate and delete the entry:
    ProxyStubClsid = "{00020424-0000-0000-C000-000000000046}"
68. Again In the right panel, locate and delete the entry:
    ProxyStubClsid32 = "{00020424-0000-0000-C000-000000000046}"
69. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{DAD33C35-D92D-455A-AE67-EB38CCB588B5}
70. In the right panel, locate and delete the entry:
    ProxyStubClsid = "{00020420-0000-0000-C000-000000000046}"
71. Again In the right panel, locate and delete the entry:
    ProxyStubClsid32 = "{00020420-0000-0000-C000-000000000046}"
72. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{55E168BC-3C39-48B5-B4EB-47A0DFE97175}
73. In the right panel, locate and delete the entry:
    ProgID = "MUC_OCX.MUCLabel"
74. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{55E168BC-3C39-48B5-B4EB-47A0DFE97175}>InprocServer32
75. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
76. Again In the right panel, locate and delete the entry:
    ToolboxBitmap32 = "%System%\MUC_OCX.ocx, 30002"
77. Again In the right panel, locate and delete the entry:
    MiscStatus = "0"
78. Again In the right panel, locate and delete the entry:
    MiscStatus\1 = "131473"
79. Again In the right panel, locate and delete the entry:
    TypeLib = "{7982E950-A915-444E-99B1-3B9FD237026A}"
80. Again In the right panel, locate and delete the entry:
    VERSION = "9.0"
81. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>MUC_OCX.MUCLabel
82. In the right panel, locate and delete the entry:
    Clsid = "{55E168BC-3C39-48B5-B4EB-47A0DFE97175}"
83. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{34967E63-5095-4F1A-88B9-48D6D897CE3A}
84. In the right panel, locate and delete the entry:
    ProxyStubClsid = "{00020424-0000-0000-C000-000000000046}"
85. Again In the right panel, locate and delete the entry:
    ProxyStubClsid32 = "{00020424-0000-0000-C000-000000000046}"
86. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{5D66FEA3-C3E4-425A-ABC7-29DBEE061AB3}
87. In the right panel, locate and delete the entry:
    ProxyStubClsid = "{00020420-0000-0000-C000-000000000046}"
88. Again In the right panel, locate and delete the entry:
    ProxyStubClsid32 = "{00020420-0000-0000-C000-000000000046}"
89. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{585BA9E5-B92B-4D4A-9F39-96EF10FDF4E7}
90. In the right panel, locate and delete the entry:
    ProgID = "MUC_OCX.MUCFormResize2"
91. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{585BA9E5-B92B-4D4A-9F39-96EF10FDF4E7}>InprocServer32
92. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
93. Again In the right panel, locate and delete the entry:
    ToolboxBitmap32 = "%System%\MUC_OCX.ocx, 30003"
94. Again In the right panel, locate and delete the entry:
    MiscStatus = "0"
95. Again In the right panel, locate and delete the entry:
    MiscStatus\1 = "164241"
96. Again In the right panel, locate and delete the entry:
    TypeLib = "{7982E950-A915-444E-99B1-3B9FD237026A}"
97. Again In the right panel, locate and delete the entry:
    VERSION = "9.0"
98. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>MUC_OCX.MUCFormResize2
99. In the right panel, locate and delete the entry:
    Clsid = "{585BA9E5-B92B-4D4A-9F39-96EF10FDF4E7}"
100. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{5C67D2A8-B620-4977-BD4B-D6FA30BBB5D5}
101. In the right panel, locate and delete the entry:
     ProxyStubClsid = "{00020424-0000-0000-C000-000000000046}"
102. Again In the right panel, locate and delete the entry:
     ProxyStubClsid32 = "{00020424-0000-0000-C000-000000000046}"
103. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C8159277-251C-46F6-A75D-AB32F84EDDDE}
104. In the right panel, locate and delete the entry:
     ProxyStubClsid = "{00020420-0000-0000-C000-000000000046}"
105. Again In the right panel, locate and delete the entry:
     ProxyStubClsid32 = "{00020420-0000-0000-C000-000000000046}"
106. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{E752E703-A4FA-4D41-BA92-87B48C9001C0}
107. In the right panel, locate and delete the entry:
     ProgID = "MUC_OCX.MUCButton2"
108. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{E752E703-A4FA-4D41-BA92-87B48C9001C0}>InprocServer32
109. In the right panel, locate and delete the entry:
     ThreadingModel = "Apartment"
110. Again In the right panel, locate and delete the entry:
     ToolboxBitmap32 = "%System%\MUC_OCX.ocx, 30004"
111. Again In the right panel, locate and delete the entry:
     MiscStatus = "0"
112. Again In the right panel, locate and delete the entry:
     MiscStatus\1 = "131473"
113. Again In the right panel, locate and delete the entry:
     TypeLib = "{7982E950-A915-444E-99B1-3B9FD237026A}"
114. Again In the right panel, locate and delete the entry:
     VERSION = "9.0"
115. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>MUC_OCX.MUCButton2
116. In the right panel, locate and delete the entry:
     Clsid = "{E752E703-A4FA-4D41-BA92-87B48C9001C0}"
117. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{4CBC1C6B-FCD7-4F5A-9FF4-395A96F28D34}
118. In the right panel, locate and delete the entry:
     ProxyStubClsid = "{00020424-0000-0000-C000-000000000046}"
119. Again In the right panel, locate and delete the entry:
     ProxyStubClsid32 = "{00020424-0000-0000-C000-000000000046}"
120. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{9279543F-E7E1-4943-8701-986F459BE772}
121. In the right panel, locate and delete the entry:
     ProxyStubClsid = "{00020420-0000-0000-C000-000000000046}"
122. Again In the right panel, locate and delete the entry:
     ProxyStubClsid32 = "{00020420-0000-0000-C000-000000000046}"
123. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{17BD189B-4D23-4EEA-A6CC-1F229710E11D}
124. In the right panel, locate and delete the entry:
     ProgID = "MUC_OCX.MUCBackGround2"
125. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{17BD189B-4D23-4EEA-A6CC-1F229710E11D}>InprocServer32
126. In the right panel, locate and delete the entry:
     ThreadingModel = "Apartment"
127. Again In the right panel, locate and delete the entry:
     ToolboxBitmap32 = "%System%\MUC_OCX.ocx, 30005"
128. Again In the right panel, locate and delete the entry:
     MiscStatus = "0"
129. Again In the right panel, locate and delete the entry:
     MiscStatus\1 = "164241"
130. Again In the right panel, locate and delete the entry:
     TypeLib = "{7982E950-A915-444E-99B1-3B9FD237026A}"
131. Again In the right panel, locate and delete the entry:
     VERSION = "9.0"
132. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>MUC_OCX.MUCBackGround2
133. In the right panel, locate and delete the entry:
     Clsid = "{17BD189B-4D23-4EEA-A6CC-1F229710E11D}"
134. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{B2AAAE0C-8770-488D-9A49-F4F0D8964E6B}
135. In the right panel, locate and delete the entry:
     ProxyStubClsid = "{00020424-0000-0000-C000-000000000046}"
136. Again In the right panel, locate and delete the entry:
     ProxyStubClsid32 = "{00020424-0000-0000-C000-000000000046}"
137. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6E85440F-CAB1-4FD9-9FD3-234A0B75211D}
138. In the right panel, locate and delete the entry:
     ProxyStubClsid = "{00020420-0000-0000-C000-000000000046}"
139. Again In the right panel, locate and delete the entry:
     ProxyStubClsid32 = "{00020420-0000-0000-C000-000000000046}"
140. Close Registry Editor.

To delete malware/grayware component files:

1. Search for the following files:
   
   • %System%\utilp.exe
   • %System%\vsflex8n.ocx
   • %System%\MUC_OCX.ocx
   • %System%\VB6KO.DLL
   • gmHTTP_REQUEST16587.7.tmp
   
   Note: To do a search for the following files, right-click Start then click Search... or Find..., depending on the version of Windows you are running. For each file to be deleted, type its file name in the Named input box. In the Look In drop-down list, select My Computer, then press Enter.
2. Once located, select the file then press SHIFT+DELETE to permanently delete the file.
3. Repeat the said steps for all files listed.