Forum Home
Press F1
Thread ID: 20837	2002-06-12 11:33:00	T.Porritt re Benjamin.	Guest (0)	Press F1

Post ID	Timestamp	Content	User
54066	2002-06-12 11:33:00	Terry... Sorry for delay getting back. Thanks for the link to Symantec. I found explorer.scr (alias benjamin) in Windows\system then tip- toed into the registry as you suggested and deleted it there. All seems to be ok now except that my virus checkers both report it still in Windows\system altho it seems to be gone from the registry. Any suggestions about what has happened? Thanks for the helpful reply to my original post. Ken	Guest (0)
54067	2002-06-12 21:13:00	Hi Ken, well Im not an expert on this as I havent had to remove it, but the Symantec instructions are just to remove a registry entry. They do say though that the worm creates a folder c:\windows\temp\sys32, so delete the sys32 folder, then delete explorer.scr if you havent already done so. Someone else may also respond with how they got rid of all traces. Cheers.	Guest (0)
54068	2002-06-13 11:40:00	Hi Terry... Well, I deleted the sys32 folder and then found that I could delete explorer.scr in windows\system. That seems to have done the trick. Thanks again.. Ken	Guest (0)
54069	2002-06-13 12:31:00	Hi Terry... Well, I deleted the sys32 folder and then found that I could delete explorer.scr in windows\system. That seems to have done the trick. Thanks again.. Ken	Guest (0)
1