Virus removal/Regedit

  • Thread starter Thread starter Pat
  • Start date Start date
P

Pat

Got a "Trojan Horse" virus. Followed Symantec's
instructions for removal, but can't locate it in RegEdit.
Any ideas??
 
Pat said:
Got a "Trojan Horse" virus. Followed Symantec's
instructions for removal, but can't locate it in RegEdit.
Any ideas??

Without knowing any more, suggest re-reading their instructions. Also
search on google for the name of the this virus and see if advice
offered elsewhere.
 
-----Original Message-----
Got a "Trojan Horse" virus. Followed Symantec's
instructions for removal, but can't locate it in RegEdit.
Any ideas??
.
If you followed Symantec's (Norton) instructions it
should have either tried to repair it, delete ir or you
put it in quarantine. If it repaired it your OK, if it
is in quarantine you can delete it there. But be careful
deleting/removing a Reg item for it can crash your PC.
Do you have a backup copy of your Registry? If not, try
a Restore before deleting any Registry items. Good luck!
 
I followed Symantec's instructions to the letter. (See
below):

Click Start, and then click Run. (The Run dialog box
appears.)
Type regedit
Then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run
In the right pane, delete the value:
"win32app"="%system%\winpup32.exe"
Exit the Registry Editor.

When I get to the proper "Registry key", the file/value
(see "win32app....32.exe" above), is not available in
that window/pane for me to delete. So....where do I look
now??
 
Got a "Trojan Horse" virus. Followed Symantec's
instructions for removal, but can't locate it in RegEdit.
Any ideas??



Not unless you give us some real information to go on. What
virus? What were the instuctions?
 
Ok, let's back up a little and get some more info. What alerted you to
the presence of the trojan in the first place? Do you have anti-virus on
your machine? If so, what did it do about the trojan? For that matter,
what trojan is/was it?

If the key is absent from the registry it just means the trojan was
never executed, which is a good thing.

If you do have a/v and it cleaned or deleted the file and the reg entry
doesn't exist then you have no worries about it.

Steve
 
Back
Top