Unionway AppHunter
auto start
located at:
D:/WINNT/
terxur_32.dll
KavSVCE.exe
in Registry:
"My Computer/HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon"
Value name:
[Shell]
Value date:
"Explorer.exe D:/WINNT/KavSVCE.exe"
Delete files and clear the registry! restart , OK!