worm_swen.a

[brancaleone]

Ciao,
mi serve un aiuto. Sono stato attaccato due volte dal virus recente spedito con e-mail di finta provenienza Microsoft (WORM_SWEN.A). Sono riuscito ad eliminare i files infetti ed i problemi da essi derivanti, ma non riesco a ri-abilitare il regedit. Qualcuno sa dirmi come fare?
Grazie
Carlo

[brancaleone]

dimenticavo: ho Win95.
Carlo

[MrOZ]

Dal sito Symantec:

For Windows 95/98
1) Restart the computer.
2) Do one of the following:
Windows 95: When "Starting Windows 95..." appears on the screen, press F8. The Windows 95 Startup Menu appears.
--------------------------------------------------------------------------------
Note: On some computers, a keyboard or other error may appear during restart as you hold down the Ctrl key. If this happens, then follow the prompts to press a key to continue (for example, the message may prompt you to press the Esc key), then immediately press the Ctrl key again.
--------------------------------------------------------------------------------

3) Select "Command Prompt only."

4) Type the following and press Enter after typing each line:

cd\
cd windows
edit repair.reg

The DOS text editor opens.

5) Type the following lines into the DOS text editor exactly as shown here:

REGEDIT4

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\regfile\shell\open\command]
@="regedit.exe \%1\"

6) Press Alt and F at the same time to access the File menu, and then press X to exit the DOS text editor. When prompted, press Enter to confirm that you want to save the file. This returns you to the command prompt.

7) Type the following and press Enter after typing each line. You must type them exactly as shown here:

regedit /e backup.reg hkey_classes_root\exefile
regedit /d hkey_classes_root\exefile\shell\open\command
regedit /d hkey_classes_root\regfile\shell\open\command
regedit repair.reg

8) Restart the computer.