Re: Worm removal - Help with LEGACY key in Regedit

From: Shawn E. Hale (SEHaleNOSPAM1_at_comcast.net)
Date: 10/24/05

  • Next message: SJS: "Re: Worm removal - Help with LEGACY key in Regedit" 
    Date: Sun, 23 Oct 2005 19:56:51 -0400

    You will see from a lengthy post by me and numerous follow-ups over the past
    few days, I had a problem with an "infected" SVKP.sys file. I ran into the
    same problem the original poster had and Dave Knox's advice is exactly what
    I did. Changed permissions and wiped out the Legacy SVKP entries in the
    registry. I am still not so sure it wasn't a false positive from the latest
    Norton antivirus definitions but my wife's computer (which we acquired at
    the same time as the other one with the problem) didn't have any SVKP
    references so I deleted them. Numerous reboots and scans from various
    sources in different modes have not returned any problems or error messages.

    "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message
    news:e7VIMWB2FHA.2348@TK2MSFTNGP15.phx.gbl...
    Right click the key in question. Select Permissions. Ensure that your
    username has full control. If not, modify the permissions. If your username
    isn't listed, click Add and add it to the list with Full control. 

    -- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart 
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
"SJS" <sjs[at]yahoo[dot]com> wrote in message 
news:%23aXxxFB2FHA.592@TK2MSFTNGP10.phx.gbl...
> My Symantec antivirus detected an instance of the W32.Spybot.UBH on my
> machine, however, it could only quarantine it, not delete it altogether. I
> have been following the instructions on Symantec' website
> (http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.ubh.html)
> which, at one point, require deleting
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ENUM\ROOT\LEGACY_SVKP
>
> Unfortunately, RegEdit just won't allow me. When I locate the key, and 
> press
> delete, I get an 'Error Deleting Key' popup message. Any suggestion? As
> always, thank you in advance for your ideas.
>
>
>
>
  • Next message: SJS: "Re: Worm removal - Help with LEGACY key in Regedit"

    Relevant Pages

    • Re: Worm removal - Help with LEGACY key in Regedit
      ... username has full control. ... If not, modify the permissions. ... click Add and add it to the list with Full control. ... I get an 'Error Deleting Key' popup message. ...
      (microsoft.public.security.virus)
    • Re: Worm removal - Help with LEGACY key in Regedit
      ... If not, modify the permissions. ... If your username isn't listed, click Add and add it to the list with Full control. ... I get an 'Error Deleting Key' popup message. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Worm removal - Help with LEGACY key in Regedit
      ... username has full control. ... If not, modify the permissions. ... click Add and add it to the list with Full control. ... I get an 'Error Deleting Key' popup message. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Worm removal - Help with LEGACY key in Regedit
      ... If not, modify the permissions. ... If your username isn't listed, click Add and add it to the list with Full control. ... I get an 'Error Deleting Key' popup message. ...
      (microsoft.public.security.virus)
    • Quantcast