Re[2]: Zavirovany PC - HELP!!

From: vvalda (vvalda@volny.cz)
Date: 29. 11. 2002, 00:35 CET


Co registry - pro Bugbear by mělo něco být

NOTES: %windir% is a variable. The worm locates the \Windows folder (by default this is C:\Windows or C:\Winnt) and creates files in that location.
It creates the following value
<random letters> <the worm's file name>
in the registry key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
NOTE: Normally, the operating system removes values from this key as soon as the programs to which these values refer are launched during startup. In this case the worm recreates the value so that it starts each time that you start Windows.

Další možnost - NAV scan a zapnout úplnou heuristiku (Bloodhound)

Dále NAV a start z emergency diskety nebo CD - viz manuál NAV.

V. Valda



This archive was generated by hypermail 2.1.2 : 29. 11. 2002, 00:36 CET