On 5 Jan 2007 at 15:41, Phil Daley wrote: > At 1/5/2007 03:17 PM, David W. Fenton wrote: > > >The main thing to try is to boot in safe mode and then see if you > can >delete the files the Trojan is loading (assuming you've > identified >those). Then reboot normally and when startup complains > about >something missing, do a search in the registry and delete the > key(s) >that refer to the files you just deleted. > > In Windows RegEdit, you check the CurrentUser and LocalMachine keys > for Software\Microsoft\Windows\CurrentVersion > > Run > RunOnce > RunOnceEx > > Delete any entries for programs you don't want to run on startup.
Easier still, Crtl-F and type in the name of the executable file you deleted in safe mode. That will find it anywhere it happens to be in the registry. -- David W. Fenton http://dfenton.com David Fenton Associates http://dfenton.com/DFA/ _______________________________________________ Finale mailing list [email protected] http://lists.shsu.edu/mailman/listinfo/finale
