swen virus infected friends comp

From: Sue (speerslair_at_shaw.ca)
Date: 09/29/03 

Date: Sun, 28 Sep 2003 19:23:39 -0700

A friend of mine fell for one of the microsoft update
emails and now has the Swen worm roaming around her system
causing all sorts of trouble. I have been trying to help
her but I am not an expert. Can someone try and tell me
what to do so I can pass the info onto her. I will try to
be as specific as possible but not really knowing what
happened exactly is kinda hard so please bear with me.

First off, after realizing she unleashed the worm she went
to the Symantec site and tried to d/l the Swen removal
tool but for some reason her comp is not letting her. She
has tried to follow the steps at Symantec as far as
removing registry entries but she can't. When she opens
Run to enter regedit she keeps getting an error. She can't
even get into msconfig. She can't open command prompt in
safe mode and the comp will not shut down when choosing
restart in MS Dos mode either. Her antivirus seems to be
working, it picked up 3 swen viruses during her last scan
this afternoon and she deleted them.

She cannot open anything in the start menu or on the
desktop. She can get online but she can't d/l anything at
all, so she can't get the Hijack This program or anything.
She can't open OE or messenger either. She keeps getting
this error message when trying to open programs, including
regedit..

Program not found. Windows cannot find VGCKJDTZ.exe This
program is needed for opening files of this type
application.

She phoned her local comp shop and they said for her to
bring it in and they can fix it or she can try to fix it
herself. She can't fix it herself if she can't even get
into the areas she needs to in order 'fix' it. Can someone
help please? I hope I've made some sense. It's kinda of
hard explaining a situation when I am not the one
experiencing it. Is there another way to get into the
registry to delete this virus? Is VGCKJDTZ.exe a
legitimate windows file or something the virus put there?

Thanks.

~S~

Relevant Pages

  • Re: Printer not printing messages - error message
    ... I have tried most of the option provided and no fix. ... An error has occurred in the script on this page. ... in a new window then that window opens blank and when I right click ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Word 2007 not installing correctly
    ... 'broken' - it is the file association in the registry that is incomplete. ... fix it select a document in Windows Explorer, ... gave the file path. ... It opens just a blank document where in I have ...
    (microsoft.public.word.docmanagement)
  • Re: swen virus infected friends comp
    ... Renaming the Swen removal tool to this name should get the fix ... > (that Windows asks for) and copy that file to Windows folder. ... When she opens ...
    (microsoft.public.security.virus)
  • Re: THE PERSONAL.XLS work book not loading.
    ... Jim - This is what i did. ... up in the file and breaks the process that opens it. ... I wish someone would come up with a fix for the problem. ... I went into EXCEL set up and put the path in the place where is says ...
    (microsoft.public.excel.misc)
  • Re: Word 2007 not installing correctly
    ... Repairing the program should fix the registry entries that are causing the ... 'broken' - it is the file association in the registry that is incomplete. ... It opens just a blank document where in I have ...
    (microsoft.public.word.docmanagement)