This won't necessarily work... the virus code appears to infect .html, .js, etc.
files. Following the instructions below would not get rid of the changes to existing
files. Of course, it's early, and few people have fully analyzed the code yet, so I
could be wrong.
-Scott
---------- Original Message ----------------------------------
From: Len Conrad <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Thu, 04 May 2000 19:32:48 +0200
I picked this up on another list, if it works, sure beats re-installing Win:
=============================
Just delete the following things to get rid of the Viri:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WIN-BUG
SFIX
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKerne
l32 und
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
\Win32DLL
also for a WIN-BUGSFIX.EXE File on your Harddisk and delete it.
The Infected Email Recieptens are lstet here in the Registry (So you can
warn them):
HKEY_CURRENT_USER\Software\Microsoft\WAB\
=====================
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
