PUA.Win32.Jugglor.GA

To terminate the malware/grayware/spyware process:

1. Scan your computer with your Trend Micro product and take note of the name of the malware/grayware/spyware detected.
2. Open Windows Task Manager. To do this, press CTRL+SHIFT+ESC.
3. View the list of all running programs. To do this:
   • For Windows 2000, XP, Server 2003, Vista, 7 and Server 2008 users, click the Processes tab.
   • For Windows 8, 8.1 and Server 2012 users, click the Details tab.
4. In the list of running programs, locate a malware/grayware/spyware file detected earlier.
5. Select the detected files, then press either the End Task or the End Process button, depending on the version of Windows you are using.
6. Do the same for the remaining detected malware/grayware/spyware files in the list of running programs.
7. To check if the malware/grayware/spyware process has been terminated, close Task Manager, and then open it again.
8. Close Task Manager.

To delete the registry key this malware/grayware created:

1. Open Registry Editor.
   » For Windows 2000, Windows XP, and Windows Server 2003 users, click Start>Run, type regedit in the text box provided, and then press Enter.
   » For Windows Vista, Windows 7, and Windows Server 2008 users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, and Windows Server 2012 users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software
3. Still in the left panel, locate and delete the key:
   3rd Eye Solutions
4. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>SessionInfo>1
5. Still in the left panel, locate and delete the key:
   WHCIconStartup
6. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.3g2>OpenWithProgids
7. Still in the left panel, locate and delete the key:
   WMP11.AssocFile.3G2
8. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.3gp>OpenWithProgids
9. Still in the left panel, locate and delete the key:
   WMP11.AssocFile.3GP
10. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.3gp2>OpenWithProgids
11. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.3G2
12. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.3gpp>OpenWithProgids
13. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.3GP
14. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.AAC>OpenWithProgids
15. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.ADTS
16. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ADT>OpenWithProgids
17. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.ADTS
18. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ADTS>OpenWithProgids
19. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.ADTS
20. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.aif>OpenWithProgids
21. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.AIFF
22. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.aifc>OpenWithProgids
23. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.AIFF
24. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.aiff>OpenWithProgids
25. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.AIFF
26. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.asf>OpenWithProgids
27. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.ASF
28. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.asx>OpenWithProgids
29. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.ASX
30. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.au>OpenWithProgids
31. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.AU
32. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.avi>OpenWithProgids
33. Still in the left panel, locate and delete the key:
    WMP11.AssocFile.AVI
34. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.bmp>OpenWithProgids
35. Still in the left panel, locate and delete the key:
    Paint.Picture
36. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.cab>OpenWithProgids
37. Still in the left panel, locate and delete the key:
    CABFolder
38. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.contact>OpenWithProgids
39. Still in the left panel, locate and delete the key:
    contact_wab_auto_file
40. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.css>OpenWithProgids
41. Still in the left panel, locate and delete the key:
    CSSfile
42. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.csv>OpenWithProgids
43. Still in the left panel, locate and delete the key:
    Excel.CSV
44. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.dib>OpenWithProgids
45. Still in the left panel, locate and delete the key:
    Paint.Picture
46. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.dll>OpenWithProgids
47. Still in the left panel, locate and delete the key:
    dllfile
48. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.doc>OpenWithProgids
49. Still in the left panel, locate and delete the key:
    Word.Document.8
50. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.docm>OpenWithProgids
51. Still in the left panel, locate and delete the key:
    Word.DocumentMacroEnabled.12
52. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.docx>OpenWithProgids
53. Still in the left panel, locate and delete the key:
    Word.Document.12
54. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.dot>OpenWithProgids
55. Still in the left panel, locate and delete the key:
    Word.Template.8
56. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.dotm>OpenWithProgids
57. Still in the left panel, locate and delete the key:
    Word.TemplateMacroEnabled.12
58. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.dotx>OpenWithProgids
59. Still in the left panel, locate and delete the key:
    Word.Template.12
60. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.DVR>OpenWithProgids
61. Still in the left panel, locate and delete the key:
    MediaCenter.DVR
62. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.dvr-ms>OpenWithProgids
63. Still in the left panel, locate and delete the key:
    MediaCenter.DVR-MS
64. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.dwfx>OpenWithProgids
65. Still in the left panel, locate and delete the key:
    Windows.XPSReachViewer
66. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.easmx>OpenWithProgids
67. Still in the left panel, locate and delete the key:
    Windows.XPSReachViewer
68. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.edrwx>OpenWithProgids
69. Still in the left panel, locate and delete the key:
    Windows.XPSReachViewer
70. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.emf>OpenWithProgids
71. Still in the left panel, locate and delete the key:
    emffile
72. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.eprtx>OpenWithProgids
73. Still in the left panel, locate and delete the key:
    Windows.XPSReachViewer
74. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.exe>OpenWithProgids
75. Still in the left panel, locate and delete the key:
    exefile
76. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.fon>OpenWithProgids
77. Still in the left panel, locate and delete the key:
    fonfile
78. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.gif>OpenWithProgids
79. Still in the left panel, locate and delete the key:
    giffile
80. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.htm>OpenWithProgids
81. Still in the left panel, locate and delete the key:
    htmlfile
82. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.html>OpenWithProgids
83. Still in the left panel, locate and delete the key:
    htmlfile
84. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ico>OpenWithProgids
85. Still in the left panel, locate and delete the key:
    icofile
86. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ini>OpenWithProgids
87. Still in the left panel, locate and delete the key:
    inifile
88. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.jfif>OpenWithProgids
89. Still in the left panel, locate and delete the key:
    pjpegfile
90. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.jpe>OpenWithProgids
91. Still in the left panel, locate and delete the key:
    jpegfile
92. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.jpeg>OpenWithProgids
93. Still in the left panel, locate and delete the key:
    jpegfile
94. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.jpg>OpenWithProgids
95. Still in the left panel, locate and delete the key:
    jpegfile
96. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.jtx>OpenWithProgids
97. Still in the left panel, locate and delete the key:
    Windows.XPSReachViewer
98. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.lnk>OpenWithProgids
99. Still in the left panel, locate and delete the key:
    lnkfile
100. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.m1v>OpenWithProgids
101. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
102. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.m2t>OpenWithProgids
103. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.M2TS
104. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.m2ts>OpenWithProgids
105. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.M2TS
106. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.m2v>OpenWithProgids
107. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
108. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.m3u>OpenWithProgids
109. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.m3u
110. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.m4a>OpenWithProgids
111. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.M4A
112. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.m4v>OpenWithProgids
113. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MP4
114. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mht>OpenWithProgids
115. Still in the left panel, locate and delete the key:
     mhtmlfile
116. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mhtml>OpenWithProgids
117. Still in the left panel, locate and delete the key:
     mhtmlfile
118. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mid>OpenWithProgids
119. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MIDI
120. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.midi>OpenWithProgids
121. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MIDI
122. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mod>OpenWithProgids
123. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
124. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mov>OpenWithProgids
125. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MOV
126. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mp2>OpenWithProgids
127. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MP3
128. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mp2v>OpenWithProgids
129. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
130. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mp3>OpenWithProgids
131. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MP3
132. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mp4>OpenWithProgids
133. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MP4
134. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mp4v>OpenWithProgids
135. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MP4
136. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mpa>OpenWithProgids
137. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
138. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mpe>OpenWithProgids
139. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
140. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mpeg>OpenWithProgids
141. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
142. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mpg>OpenWithProgids
143. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
144. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mpv2>OpenWithProgids
145. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MPEG
146. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.msg>OpenWithProgids
147. Still in the left panel, locate and delete the key:
     Outlook.File.msg
148. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.mts>OpenWithProgids
149. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.M2TS
150. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ocx>OpenWithProgids
151. Still in the left panel, locate and delete the key:
     ocxfile
152. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.odt>OpenWithProgids
153. Still in the left panel, locate and delete the key:
     odtfile
154. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.otf>OpenWithProgids
155. Still in the left panel, locate and delete the key:
     otffile
156. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.pl>OpenWithProgids
157. Still in the left panel, locate and delete the key:
     Perl
158. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.png>OpenWithProgids
159. Still in the left panel, locate and delete the key:
     pngfile
160. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.pot>OpenWithProgids
161. Still in the left panel, locate and delete the key:
     PowerPoint.Template.8
162. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.potm>OpenWithProgids
163. Still in the left panel, locate and delete the key:
     PowerPoint.TemplateMacroEnabled.12
164. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.potx>OpenWithProgids
165. Still in the left panel, locate and delete the key:
     PowerPoint.Template.12
166. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ppam>OpenWithProgids
167. Still in the left panel, locate and delete the key:
     PowerPoint.Addin.12
168. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ppsm>OpenWithProgids
169. Still in the left panel, locate and delete the key:
     PowerPoint.SlideShowMacroEnabled.12
170. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ppsx>OpenWithProgids
171. Still in the left panel, locate and delete the key:
     PowerPoint.SlideShow.12
172. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ppt>OpenWithProgids
173. Still in the left panel, locate and delete the key:
     PowerPoint.Show.8
174. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.pptm>OpenWithProgids
175. Still in the left panel, locate and delete the key:
     PowerPoint.ShowMacroEnabled.12
176. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.pptx>OpenWithProgids
177. Still in the left panel, locate and delete the key:
     PowerPoint.Show.12
178. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ps1xml>OpenWithProgids
179. Still in the left panel, locate and delete the key:
     Microsoft.PowerShellXMLData.1
180. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.rle>OpenWithProgids
181. Still in the left panel, locate and delete the key:
     rlefile
182. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.rmi>OpenWithProgids
183. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.MIDI
184. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.rtf>OpenWithProgids
185. Still in the left panel, locate and delete the key:
     Word.RTF.8
186. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.scf>OpenWithProgids
187. Still in the left panel, locate and delete the key:
     SHCmdFile
188. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.search-ms>OpenWithProgids
189. Still in the left panel, locate and delete the key:
     SearchFolder
190. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.shtml>OpenWithProgids
191. Still in the left panel, locate and delete the key:
     shtmlfile
192. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.sldm>OpenWithProgids
193. Still in the left panel, locate and delete the key:
     PowerPoint.SlideMacroEnabled.12
194. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.sldx>OpenWithProgids
195. Still in the left panel, locate and delete the key:
     PowerPoint.Slide.12
196. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.snd>OpenWithProgids
197. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.AU
198. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.sys>OpenWithProgids
199. Still in the left panel, locate and delete the key:
     sysfile
200. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.tif>OpenWithProgids
201. Still in the left panel, locate and delete the key:
     TIFImage.Document
202. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.tiff>OpenWithProgids
203. Still in the left panel, locate and delete the key:
     TIFImage.Document
204. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ts>OpenWithProgids
205. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.TTS
206. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ttc>OpenWithProgids
207. Still in the left panel, locate and delete the key:
     ttcfile
208. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.ttf>OpenWithProgids
209. Still in the left panel, locate and delete the key:
     ttffile
210. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.tts>OpenWithProgids
211. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.TTS
212. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.txt>OpenWithProgids
213. Still in the left panel, locate and delete the key:
     txtfile
214. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wav>OpenWithProgids
215. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.WAV
216. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wax>OpenWithProgids
217. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.WAX
218. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wdp>OpenWithProgids
219. Still in the left panel, locate and delete the key:
     wdpfile
220. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wm>OpenWithProgids
221. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.ASF
222. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wma>OpenWithProgids
223. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.WMA
224. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wmf>OpenWithProgids
225. Still in the left panel, locate and delete the key:
     wmffile
226. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wmv>OpenWithProgids
227. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.WMV
228. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wmx>OpenWithProgids
229. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.ASX
230. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wpl>OpenWithProgids
231. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.WPL
232. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.WTV>OpenWithProgids
233. Still in the left panel, locate and delete the key:
     MediaCenter.WTVFile
234. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.wvx>OpenWithProgids
235. Still in the left panel, locate and delete the key:
     WMP11.AssocFile.WVX
236. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xlam>OpenWithProgids
237. Still in the left panel, locate and delete the key:
     Excel.AddInMacroEnabled
238. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xls>OpenWithProgids
239. Still in the left panel, locate and delete the key:
     Excel.Sheet.8
240. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xlsb>OpenWithProgids
241. Still in the left panel, locate and delete the key:
     Excel.SheetBinaryMacroEnabled.12
242. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xlsm>OpenWithProgids
243. Still in the left panel, locate and delete the key:
     Excel.SheetMacroEnabled.12
244. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xlsx>OpenWithProgids
245. Still in the left panel, locate and delete the key:
     Excel.Sheet.12
246. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xlt>OpenWithProgids
247. Still in the left panel, locate and delete the key:
     Excel.Template.8
248. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xltm>OpenWithProgids
249. Still in the left panel, locate and delete the key:
     Excel.TemplateMacroEnabled
250. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xltx>OpenWithProgids
251. Still in the left panel, locate and delete the key:
     Excel.Template
252. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xml>OpenWithProgids
253. Still in the left panel, locate and delete the key:
     xmlfile
254. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xps>OpenWithProgids
255. Still in the left panel, locate and delete the key:
     Windows.XPSReachViewer
256. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.xsl>OpenWithProgids
257. Still in the left panel, locate and delete the key:
     xslfile
258. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>FileExts>.zip>OpenWithProgids
259. Still in the left panel, locate and delete the key:
     CompressedFolder
260. Close Registry Editor.

To manually delete a malware/grayware file from an affected system:

• For Windows 2000, Windows XP, and Windows Server 2003:

1. Right-click Start then click Search....
2. In the File name* input box, type the following:
   
   • %User Temp%\Jgl_Rt\jstart.exe
   • %User Temp%\Jgl_Rt\SHLLJG0.dll
   • %User Temp%\Jgl_Rt\wdmaud.drv
   • %Windows%\jestertb.dll
   • %User Temp%\Jgl_Rt\13601x.exe
   • %System%\mms.cfg
3. In the Look In drop-down list, select My Computer then press Enter.
4. Once located, select the file then press SHIFT+DELETE to delete it.
   *Note: The file name input box title varies depending on the Windows version (e.g. Search for files or folders named or All or part of the file name.).

• For Windows Vista, Windows 7, Windows Server 2008, Windows 8, Windows 8.1, and Windows Server 2012:

1. Open a Windows Explorer window.
   • For Windows Vista, 7, and Server 2008 users, click Start>Computer.
   • For Windows 8, 8.1, and Server 2012 users, right-click on the lower left corner of the screen,then click File Explorer.
2. In the Search Computer/This PC input box, type:
   
   • %User Temp%\Jgl_Rt\jstart.exe
   • %User Temp%\Jgl_Rt\SHLLJG0.dll
   • %User Temp%\Jgl_Rt\wdmaud.drv
   • %Windows%\jestertb.dll
   • %User Temp%\Jgl_Rt\13601x.exe
   • %System%\mms.cfg
3. Once located, select the file then press SHIFT+DELETE to delete it.
   *Note: Read the following Microsoft page if these steps do not work on Windows 7.

To delete the malware/grayware folder:

1. Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
2. In the Named input box, type:
   
   • %User Temp%\Jgl_Rt
3. In the Look In drop-down list, select My Computer, then press Enter.
4. Once located, select the folder then press SHIFT+DELETE to permanently delete the folder.