Hi Glenn,
On Sun, 16 May 2004 11:51:03 -0700, "Glenn"
<(E-Mail Removed)> wrote:
>Help, I have a backdoor virus, at least this is what my virus scanner says that it won't delete. The virus is in c:\windows\system\sysweb.exe. What do I need to do? Reformate by C drive?
From:
http://support.centralcommand.com/cg...hp?p_faqid=573
It follows that you have to delete these keys and the virus itself:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
"Setting"="sysweb.exe"
-
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
"Setting"="sysweb.exe"
Good luck