|
|
|
re: Tweak
Friday, January 30, 2004 at 3:21 pm
Windows 2000 Annoyances Discussion Forum
Posted by AKB
(2 messages posted)
Thanks DEX but it didn't work. I deleted RunDLL32 tweakUI.DLL, TWEAKUI /tweakmeup,
but no Scheduling Agent resided in the RunServices folder.
The virus is still in the system somewhere. I can fool it by renaming my AOL.exe
and changing the shortcut, but a permanent fix would be nice.
On Thursday, January 29, 2004 at 8:57 pm, DEX wrote:
>AKB
>
>Virus ,Trojan Horse
>Backdoor.Subwoofer allows a hacker to remotely control an infected computer.
>
>To remove from your machine do this
>
>Click Start, and click Run. The Run dialog box appears.
>Type regedit and then click OK. The Registry Editor opens.
>Navigate to the key
>
>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
>
>In the right pane, delete the value
>
>Tweak UI "RunDLL32 tweakUI.DLL, TWEAKUI /tweakmeup"
>
>Navigate to the key
>
>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
>
>In the right pane, delete the value
>
>Scheduling Agent "Scheduler.exe"
>
>Click Registry, and click Exit.
>
>Reboot check again to see if it's back in the reg.file..
>Now download Spybot from the net install it reboot into safe mode ( F8 key at boot
>up ) run Spybot
>Then turn around and tells the kids NO No No please...to much work for dad to fix....but
>love ya you little shits,,
>I got 4 of them " rug rats..."
>hope this helps
>
>http://securityresponse.symantec.com/avcenter/venc/data/backdoor.subwoofer.html
>
>
- Written in response to:
- re: Tweak (DEX: Thursday, January 29, 2004 at 8:57 pm)
Responses to this message:
 | re: Tweak (DEX: Friday, January 30, 2004 at 5:06 pm) |
|
|
All messages in this thread [show all]
 | Tweak (AKB: Thu, Jan 29, 2004, 7:59 am) |
 |  | re: Tweak (werner: Thu, Jan 29, 2004, 9:57 am) |
|  | | re: Tweak (ColinB: Thu, Jan 29, 2004, 2:22 pm) |
| | | re: Tweak (AKB: Fri, Jan 30, 2004, 3:21 pm) |
| |
| |
Return to the Windows 2000 Discussion Forum
|
|
|
|
