Re: registry virus

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Kaylene aka Taurarian (taurarian_at_REMOVE_CAPS_hotmail.com)
Date: 06/12/04 

Date: Sat, 12 Jun 2004 12:58:08 +1000

http://www.dougknox.com/xp/utils/xp_emerutils.htm
Creates usable copies of REGEDIT, MSCONFIG and Task Manager

You could be infected with one of these worms:

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
W32.Klez.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@mm.html
W32.Yaha.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.e@mm.html

These viruses terminate Regedit.exe and taskmgr.exe
W32.HLLW.Kefy:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kefy.html
W32.HLLW.Cydog@mm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cydog@mm.html
Backdoor.IRC.Yoink.A:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.yoink.a.html
Backdoor.Volac.dr:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.volac.dr.html
W32.Kwbot.R.Worm:
http://www.symantec.com/avcenter/venc/data/w32.kwbot.r.worm.html

These viruses delete the Regedit.exe, Regedt32.exe, Msconfig.exe, Taskmgr.exe
W32.Petch.B:
http://www.symantec.com/avcenter/venc/data/w32.petch.b.html
W32.HLLW.Maax.B@mm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.maax.b@mm.html

Perhaps an online security/virus check
Symantec
http://security.norton.com/sscv6/default.asp?langid=ie&venid=sym
Trend Micro House Call:
http://housecall.trendmicro.com/
Panda ActiveScan;
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
McAfee FreeScan:
http://us.mcafee.com/root/mfs/default.asp
Kaspersky Labs On-line Virus Checker:
http://www.kaspersky.com/remoteviruschk.html
BitDefender Online Scan:
http://www.bitdefender.com/scan/licence.php

Free virus program - AVG Anti Virus
http://www.grisoft.com/us/us_dwnl7.php

"bongskie" <anonymous@discussions.microsoft.com> wrote in message
news:1ba4801c45022$c6de8b00$a001280a@phx.gbl...
> Is there by any chance I can restore my registry editor,
> looks to me as if I had a virus recently that erased my
> regedit.exe . Anybody could help me in this?

Relevant Pages

  • Re: Task manager closes automatically etc
    ... MSCONFIG and Task Manager ... You could be infected with one of these worms: ... These viruses terminate Regedit.exe and taskmgr.exe ... Kaspersky Labs On-line Virus Checker: ...
    (microsoft.public.security.virus)
  • Re: Thursday Trump
    ... (virus, trojans and worms) ... And to penetrate a Mac OS X does not necessarily require ...
    (comp.sys.mac.misc)
  • Re: Linux and security
    ... >> windows. ... how would a virus come to ... > about worms? ... > against the threat of viruses, but someone will ALWAYS have to have ...
    (comp.os.linux.security)
  • Re: issue related to viruses
    ... A half-way decent worm is pretty easy to write, as opposed to a virus ... around with worms, we were using same the MHTML security zone spoofing ... Executable infectors are really hard if you don't normally do a lot of ... programming, and worms are so trivially easy as to make it not worth ...
    (comp.security.misc)
  • Everyones virus problem info....
    ... We have no worms or virusis coming from mailserver to our ... Now we are afraid of getting worms from webmail. ... >This worm infects through file sharing progams (kazaa, ... It is NOT recognized by any of the "leading virus ...
    (microsoft.public.security)