End System Processes

• 1). Press the "Ctrl," "Shift" and "Esc" keys at the same time to start the Task Manager.
  
  
• 2). Click the "Processes" tab in the Task Manager's window.
  
  
• 3). Scroll down to highlight "ffisearch.exe" in the list of processes. Click "End Process."
  
  
• 4). Repeat Step 3 for "edmond.exe," "desktop.exe," "ffisearch.exeidinst.exe," "edmond.exe," "desktop.exe" and "idinst.exe."
  
  
• 5). Close the Task Manager.
  
  

Remove Registry Entries

• 1). Go to the "Start" menu.
  
  
• 2). Type "regedit" in the search field and hit "Enter" to start the Registry Editor.
  
  
• 3). Browse to and remove the following entries:
  
  HKEY_LOCAL_MACHINE\system\currentcontrolset\services\delprot
  HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ffis
  HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\desktopsearch
  HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelper
  HKEY_CLASSES_ROOT\mfiltis
  950238fb-c706-4791-8674-4d429f85897e
  HKEY_LOCAL_MACHINE\system\currentcontrolset\services\delprot5b4ab8e2-6dc5-477a-b637-bf3c1a2e5993
  HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ffis
  HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\desktop search
  HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\ext\clsid\{5b4ab8e2-6dc5-477a-b637-bf3c1a2e5993}
  objects\{5b4ab8e2-6dc5-477a-b637-bf3c1a2e5993}
  HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper
  HKEY_CLASSES_ROOT\mfiltis
  HKEY_CLASSES_ROOT\clsid\{950238fb-c706-4791-8674-4d429f85897e}
  HKEY_CLASSES_ROOT\clsid\{5b4ab8e2-6dc5-477a-b637-bf3c1a2e5993}
  
  
• 4). Close the Registry Editor.
  
  

Unregister DLLs

• 1). Go to the "Start" menu.
  
  
• 2). Type "cmd" in the search field and hit "Enter" to start the command line window.
  
  
• 3). Type "regsvr32 /u sysupd.dll" in the command line window and hit "Enter" to un-register the file.
  
  
• 4). Repeat Step 3 for "msdbhk.dll" and "mfiltis.dll."
  
  
• 5). Close the command line window.
  
  

Delete Files

• 1). Go to the "Start" menu.
  
  
• 2). Type "delprot.log" in the search field and hit "Enter." Delete all search results.
  
  
• 3). Repeat Step 2 for "delprot.ini," "yourplatinumvisa.lnk," "virushunter.url," "virushuntersecurity.lnk," "spywareavenger.lnk," "popupblockerstopspopups.lnk," "evidenceeraser.lnk," "bigdickschoolfor2.95.url," "analexploits.url," "delprot.sys," "sysupd.dll," "msdbhk.dll," "mfiltis.dll," "ffisearch.exe," "edmond.exe," "desktop.exe," "idinst.exe," "isearch.xpi," "delprot.log," "delprot.ini," "your platinum visa.lnk," "virus hunter.url," "virus hunter security.lnk," "spyware avenger.lnk," "popup blocker stops popups.lnk," "evidence eraser.lnk," "big dick school for 2.95.url," "anal exploits.url" and "delprot.sys."
  
  
• 4). Restart your computer.