Got problem with W32.Rontokbro.B@mm

Got problem with your Antivirus software and it's not working and want
to
find manual way to trash out bullshit virus called W32.Rontokbro.B@mm

Steps for Removing W32.Rontokbro.B@mm


1. Disable System Restore (Windows Me/XP).


2. Restarted your computer in Safe mode


3. In safe mode run xp_secconsole.exe and in Windows explorer > uncheck

Disable Folder Options then in System Security > uncheck Disable
Regedit after that exit that application.


xp_secconsole.exe can be download from
http://www.dougknox.com/xp/utils/xp_secconsole.zip


4. Delete the following files:


%UserProfile%\Local Settings\Application Data\csrss.exe
%UserProfile%\Local Settings\Application Data\inetinfo.exe
%UserProfile%\Local Settings\Application Data\lsass.exe
%UserProfile%\Local Settings\Application Data\services.exe
%UserProfile%\Local Settings\Application Data\smss.exe
%UserProfile%\Local Settings\Application Data\winlogon.exe
%UserProfile%\Start Menu\Programs\Startup\Empty.pif
%UserProfile%\Templates\A.kotnorB.com
%Windir%\inf\norBtok.exe
%System%\3D Animation.scr


Note:
%System% is a variable that refers to the System folder. By default
this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32
(Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Windir% is a variable that refers to the Windows installation folder.
By default, this is C:\Windows (Windows 95/98/Me/XP) or C:\Winnt
(Windows NT/2000).
%UserProfile% is a variable that refers to the current user's profile
folder. By default, this is C:\Documents and Settings\[CURRENT USER]
(Windows NT/2000/XP).


Delete the directory:


%UserProfile%\Local Settings\Application Data\Bron.tok-3-3


5. delete the scheduled tasks added by the worm


Click Start, and then click Control Panel. (In Windows XP, switch to
Classic View.)
In the Control Panel window, double click Scheduled Tasks.
Right click the task icon and select Properties from pop-up menu.
The properties of the task is displayed.
Delete the task if the contents of the Run text box in the task pane,
matches the following:


%UserProfile%\Templates\A.kotnorB.com


By Thet Aung Min Latt, Yangon, Myanmar


thetaung@xxxxxxxxx
thetaung.amyanmar.com

.

Relevant Pages

  • Re: Problerms after installing scanner
    ... The scanner install went OK and works perfectly, but when I open Windows ... I had spent an hour talking to India, and taken some screenshot ... Printer' in Control Panel - Faxes and Printers. ... In Printers and Faxes folder, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Blue Screen 0x0000007A
    ... Next in Windows Explorer make sure View, ... atapi.sys is located in the folder ... stopped from Services in the Control Panel or by other programs. ... The process IDE/ATAPI Port Driver belongs to the software Microsoft ...
    (microsoft.public.windowsxp.hardware)
  • explorer.exe has generated errors and will be closed by Windows. (Critical)
    ... Started to have persistent problems with windows xp. ... I can't open *any folder* or control panel. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Problerms after installing scanner
    ... I've no 'Add A Printer' in Control Panel - Faxes and Printers. ... And a little message then says, "Windows cannot ... In Printers and Faxes folder, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Cascading folders on Start Menu / My Computer
    ... Expand Control Panel ... MS-MVP Windows Shell/User ... It lets me navigate to the folder ...
    (microsoft.public.windowsxp.basics)