H-Net* Fw: Virus - Red Alert! Name ---NAVIDAD--

Wed, 22 Nov 2000 18:13:39 -0800

 
----- Original Message -----
Sent: Thursday, November 16, 2000 4:38 PM
Subject: Virus - Red Alert! Name ---NAVIDAD--

DO NOT TRY TO OPEN THE ATTACHMENT NAVIDAD.EXE
 
If you already open it..no worried..you already infected..do the following below..
 
Symptoms : Windows pop up looking for WINSVRC.EXE..cannot find programs ..
  1. Click on Start|Programs|MS-DOS Prompt.
  2. Type the DOS command below then press "ENTER"
    Ren regedit.exe regedit.com
    (Note: This renaming is only temporary and is necessary to be able to run Regedit)
  3. Type exit, then press "ENTER" to return to Windows.
  4. Click on Start|Run, type regedit, then press ENTER.
  5. In the left panel of the Registry Editor, click on the “+” at left of the names to go to the registry below:
    HKEY_CLASSES_ROOT\exefile\shell\open\
    command
  6. In the right panel, double-click on the entry with the data
    (Default) =
    “%systemdir%\WINSVRC.EXE”%1””%*”
    where %systemdir% is the Windows system directory; i.e., \WINDOWS\SYSTEM for Win 9x, and \WINNT\SYSTEM32 for NT/2K.
  7. In the Edit window that appears, delete the entire first part of the string, leaving behind “%1”%*”.
  8. As in step 5, go to the registry entry below:
    HKEY_LOCAL_MACHINE\Software\Microsoft\
    Windows\CurrentVersion\Run
  9. Click on the entry below, then press "DELETE"
    Win32BaseServiceMOD =
    %systemdir%\WINSVRC.EXE
  10. Click on Start|Programs|MS-DOS Prompt
  11. Type the DOS command below then press "ENTER"
    Ren regedit.com regedit.exe
  12. Scan your system with Norton or go to http://housecall.antivirus.com/pc_housecall/ and delete all files detected as TROJ_NAVIDAD.A.
Thank you!
 
 

Kirim email ke