Spyware.NetMama

How to Remove Spyware.NetMama:
1. Disable System Restore (WinME and Windows XP) [how]
2. Update your Virus definitions.
3. Reboot your Computer in SafeMode. [how]
4. Run a full system scan.
5. Delete any values added to the registry. [how to edit registry]

Navigate to the subkey and restore the value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Value: “Userinit” = “%System%\userinit.exe,c:\program files\provisqz\nmst.exe”

Navigate to the subkey and restore the value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
Value: “CheckedValue” = “1″

Navigate to and delete the any of the following subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{184AF5F9-FB5C-4D70-95C8-3613B5DC0E23}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7D9ED5A8-EDBB-4B42-B549-DD4184E25592}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DataAccess\RegisteredApplications\{3C1182F3-442B-4C01-AE0F-99DFEF0B1F9F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DataAccess\RegisteredApplications\{51461ACD-9D36-4FAE-B8CC-B228B2B58621}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{184AF5F9-FB5C-4D70-95C8-3613B5DC0E23}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkCrawler\Objects\
WorkgroupCrawler\sesessionPolicy328.23
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{184AF5F9-FB5C-4D70-95C8-3613B5DC0E23}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{184AF5F9-FB5C-4D70-95C8-3613B5DC0E23}

6. Exit Registry Editor and Reboot the computer.
7. In order to make sure that Spyware.NetMama is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to detect the virus using various Scanner Program without the need to install can be done with Free Online Virus Scanner.