March 26, 2008

How to remove worm W32.Bancorkut@mm ?

Worm W32.Bancorkut@mm removal tips


1. Follow standard procedure for virus removal

2. Delete these values and subkeys added to registry.


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"AVGShield" = "%Windir%\avgsh.exe"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"MSMSGS" = "%Program Files%\Messenger\msmsgs.exe /background"

No comments: