Skip to content. | Skip to navigation

Personal tools
You are here: Home virus-spam-phishing How to clean the Registry affected by Virus

Large Text  small text  original text  text mode site  

How to clean the Registry affected by Virus

Last Updated on: Apr 08, 2010 12:55 PM

Manual Registry Fixing:

1.To Enable Registry Editing:

Run the command given below on Start Menu==>Run
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
/v DisableRegistryTools /t REG_DWORD /d 0 /f

2. To Enable Task Manager:
Start Menu===>RUN==>gpedit.msc===>user config===>admin templates===>
system===>ctrl+alt+del===>Remove Task Manager==>Select and Apply "Not configured."

3. Open msconfig====>start up====>disable all suspectable entries

4.Open "Regedit.exe" and search scvshosts.exe and delete the entries.

5.Open Regedit.exe and go to

HKCU\Software\Microsoft\Windows\Cureent Version\Policies\System\===>here check and delete the policies that disables regedit or taskmanager.

6.Delete any scheduled tasks from control panel==>scheduled tasks.

7. Search for scvshost and delete all the files matching this except in
windows\system32 folder.

8.Scan with sophos Anti-Virus and delete the quarantined items.

9.how to remove the autoplay option from all the drives.
Run->windows configuration->Administrative templates->system->
in right pane find “turn off autoplay”, double click it and select enable and choose “all drives “ from drop down menu, then apply+ok.

Automatic Registry Fixing:

Download and run the FIXREG.bat file to fix your Registry

New worm spreading via Skype

Multilingual malware posing as porn in chat messages. VoIP and chat system Skype has been targeted by another worm, sending chat messages to harvested contacts posing as links to pornographic images, which in fact download and install copies of the worm. The new malware has been variously dubbed 'Pykspa.D', 'Skipi.A', 'Ramex.a' and 'Pykse.b'.

The fake messages, which are as likely to come from known contacts as from strangers, can contain text in a wide range of languages selected by the worm based on the sender's system locale settings, which hint that the linked erotic images may be of interest to the recipient. Following the link brings up a 'soap bubble' screensaver, and installs the worm.

http://www.virusbtn.com/news/2007/09_11.xml

3.0
No rating set
Document Actions
Share |

feedback feedback validator