Wednesday, November 24, 2010

Windows XP SP3 - Infected with Infostealer.Lineage. Regedit is locked. How do I enable it to make changes?

Windows XP SP3

Infected with Infostealer.Lineage



STEPS SUGGESTED BY - SYMANTEC

1. Click Start %26gt; Run.

2. Type regedit



Then click OK.



3. Navigate to the key:



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi?br>


4. In the right pane, delete the value:



%26quot;[Random Name]%26quot; = %26quot;%ProgramFiles%\rundll32.exe%26quot;

%26quot;[Random Name]%26quot; = %26quot;%ProgramFiles%\explorer.exe%26quot;

%26quot;[Random Name]%26quot; = %26quot;%ProgramFiles%\Internat.exe%26quot;

%26quot;[Random Name]%26quot; = %26quot;%windir%\rundll32.exe%26quot;

%26quot;[Random Name]%26quot; = %26quot;%windir%\Internat.exe%26quot;



5. Exit the Registry Editor.



PROBLEM -

Unable to use %26quot;regedit%26quot; command. Seems it is locked by the virus. How do I enable it so that I can perform the above mentioned steps? Please reply ASAP. Thanks in advance.Windows XP SP3 - Infected with Infostealer.Lineage. Regedit is locked. How do I enable it to make changes?
well it is obvious that symantic has not a clue what they are talking about . the best way to do this is with a bootdisk such as a ultimate boot disk or a part PE disk , however if you cant do that . boot the pc in safe mode and run supwerantispywareWindows XP SP3 - Infected with Infostealer.Lineage. Regedit is locked. How do I enable it to make changes?
Download RRt from the link below.

http://www.softpedia.com/get/Security/Se



RRT recovers the disabled services due to a virus attack.

No comments:

Post a Comment