back door virus?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Help, I have a backdoor virus, at least this is what my virus scanner says that it won't delete. The virus is in c:\windows\system\sysweb.exe. What do I need to do? Reformate by C drive?
 
Hi Glenn,

Help, I have a backdoor virus, at least this is what my virus scanner says that it won't delete. The virus is in c:\windows\system\sysweb.exe. What do I need to do? Reformate by C drive?
Click to expand...

From:
http://support.centralcommand.com/cgi-bin/command.cfg/php/enduser/std_adp.php?p_faqid=573

It follows that you have to delete these keys and the virus itself:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
"Setting"="sysweb.exe"

-
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
"Setting"="sysweb.exe"

Good luck
 
Back
Top