Urgent - Websites for scanning virus and spybots

ndmmxiaomayi SG

For W32/Poebot-K:

Clean up this worm.

Restart Computer. Go to Start, Run. Type in regedit in the dialouge box.

Find this registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Delete any of these keys if they exist.

"Local Security Authority Service" = "%System%\lssas.exe"
"Local Security Authority Service" = "%System%\Isass.exe"
"Client Server Runtime Process" = "%System%\csrs.exe"
"Windows Logon Application" = "%System%\logon.exe"
"Windows Logon Application" = "%System%\winIogon.exe"
"Windows Explorer" = "%System%\explorer.exe"
"Winamp Agent" = "%System%\winamp.exe"
"Windows Network Firewall" = "%System%\firewall.exe"
"Spooler SubSystem App" = "%System%\spoolsvc.exe"
"Spooler SubSystem App" = "%System%\spooIsv.exe"
"Application Layer Gateway Service" = "%System%\algs.exe"
"Microsoft Internet Explorer" = "%System%\iexplore.exe"

Don't delete the key in red. Only delete those in blue if they exist.

ndmmxiaomayi SG

They don't remove certain things. Don't tell me you crack those 2 softwares.

ndmmxiaomayi SG

For W32/Rbot-Fam:

Again, remove the virus by using antivirus.

Restart computer and go to registry editor.

Go to these keys:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
RunServices

HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
RunServices

HKEY_CURRENT_USER\Software\Microsoft\OLE\

HKEY_CURRENT_USER\SYSTEM\CurrentControlSet\Control\Lsa\

Delete this key:

" Microsoft Xp Systems loaders " = " win32xpsys.exe "

Don't delete the red part. Only the blue ones.

alexkusu SG

yeah...

ndmmxiaomayi SG

Surprised

ndmmxiaomayi SG

For W32/Rbot-AXG:

Remove using antivirus.

ndmmxiaomayi SG

For Troj/Qoolaid-W:

Print out the instructions from this website:

http://www.sophos.com/support/disinfection/trojan.html

Do as instructed.

alexkusu SG

why pay when u can dl for free Cool

ndmmxiaomayi SG

Haha, I know. There's also another good one. Ewido. Free de. Mr. Green

ndmmxiaomayi SG

For Troj/Qoolaid V/U:

I can't make out whether it is V or U from MS-DOS, so I give you both websites.

For Qoolaid U

For Qoolaid V

ndmmxiaomayi SG

For Troj/Qoolaid-T/Z:

http://www.sophos.com/support/disinfection/trojan.html

It will work for both trojans.

babymac13 SG

I have been using northon Anti-Virus for years, but recently I think I click on something on msn which result my 'downfall' of my PC.
At the moment now, my anti-virus program is disable as it was in my prev OS, the present OS is newly reinstalled.

As you can the window folder is WINNTT instead of WINNT

babymac13 SG

Thanks ndmmxiaomayi,

But i think it will be a major operation to be remove all the virus.
Best and direct solution is to format my PC again.
Sign~, but that only be next month.

Smile Smile

ndmmxiaomayi SG

Then you have to bear with those for one month. Good luck. Wink

« Previous Page