RE: user accounts

From: linlily (anonymous_at_discussions.microsoft.com)
Date: 02/27/04


Date: Fri, 27 Feb 2004 05:11:07 -0800

In addition to my previous post, these are what I have done so far:

1) update the virus definitions.

2) run a full system scan. The name and location of the infected files are :

c:\WINDOWS\system\mcireg.dll (Keylogger.Trojan)
c:\WINDOWS\system\svchost.ex (Bloodhound.Packed)
c:\Program Files\Outlook Express\oemig54b+.exe (Download.Trojan)
c:\WINDOWS\svchost.exe (Bloodhound.Packed)

I have quarantined the viruses.

I have also open the Registry Editor and select HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
to look for the infected files on the right pane, but only 1 infected files was found, that is, svchost.exe.

I did not delete the svchost.exe file.

I have also tried to backup my entire windows XP registry by clicking start - Programs - Accessories - System Tools - and look for the word Backup, but cannot be found. Where could it be?

Kindly assist.

 

  



Relevant Pages

  • Update on W32.Nimda.A@mm/TROJ_NIMDA.A
    ... Well I just installed McAfee's latest virus definitions for Netshield, ... set my scanning software to clean the infected files ... TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE ...
    (NT-Bugtraq)
  • Re: delete virus files
    ... What antivirus software are you ... Do you have the latest virus definitions and have you run a full ... greg wrote: ... > I have 2 infected files that I need to delete. ...
    (microsoft.public.win2000.security)
  • RE: user accounts
    ... update the virus definitions. ... I have quarantined the viruses. ... to look for the infected files on the right pane, but only 1 infected files was found, that is, svchost.exe. ...
    (microsoft.public.windowsxp.newusers)