View Single Post
Old 21st September 2007, 11:42   #766 (permalink)
CaliAtenza
BHPian
 
Join Date: Feb 2004
Location: LAX-SNA-BFL-BLR
Posts: 241
Default

Quote:
Originally Posted by Prashanth Hegde View Post
Hi Caliatenza ,

Sorry for not posting full solution for the problem .
Here is the method to clean this worm .

and sorry to that in previous replay i called this worm as MS32dll.dll.vbs where as its actually w32.USBWorm .

I have simple tool to clear this worm or else you can try the method given below to clear the worm manually .

Go to Start Menu>Run and type regedit .

In the Registry Editor browse to this entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\Advanced\Folder\Hidden\SHO WALL and in the “Checked all” key reset it back to 1 from 2.


Now you can change the settings in the folders option. Now delete the folder C:\heap41a .


clear all the key entries from this registry entry HKEY_LOCAL_MACHINE,SOFTWARE\Microsoft\Windows\
CurrentVersion\policies\Explorer\Run which says heap41a.


Now the virus infection is removed 100%. Before you are done make sure you format the usb drive it doesn’t infect other systems too.



A
I am still having the problem, do i need to restart the computer after i do this? i could not find the heap41a folder, but the registry keys i did take care of.
CaliAtenza is offline   Reply With Quote