Worm VBS.Autill removal tips...
1. Follow standard procedure for virus removal
2. Delete these values and subkeys added to registry.
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Userinit" = "%System%\userinit.exe, %System%\wscript.exe %System%\killVBS.vbs"
* HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Window Title" = " "
* HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Start Page" = " "
* HKEY_CLASSES_ROOT\vbsfile\"DefaultIcon" = "%SystemRoot%\System32\WScript.exe,2"
No comments:
Post a Comment