W32.HLLW.Doomjuice virus and XP Registry
From: Larry (larry12341_at_yahoo.com)
Date: 02/13/04
- Next message: Ferron C Dora: "windows update"
- Previous message: Ferron: "Re: temporary Internet Files that will not delete"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 12 Feb 2004 20:21:34 -0800
Having recently been the lucky recipient of the Doomjuice
virus I followed the Symantec directions for removal.
The last step is removing it's registry values. At
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\Run I deleted C:\Windows\system32\intrenat.exe as
instructed. I was also told to delete the same from
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run. However, C:\Windows\system32\intrenat.exe was not
to be found there.... Instead I found "DELETE
ME" "REG_SZ" "worm.exe". Question is... should I
delete this line? Symantec makes no mention of a line
such as this.
- Next message: Ferron C Dora: "windows update"
- Previous message: Ferron: "Re: temporary Internet Files that will not delete"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
