Welcome Guest [Log In] [Register]
Viewing Single Post From: Virus Troubleshooting Tutorial
samundra
Member Avatar
RiskyBoy
[ *  *  * ]
Finally, the solution is found. Though I found this solution earlier but I delayed posting it here, I thought I would better post it.

The virus makes the registry entry
[red]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon == > Shell [/red]


Shell = Explorer.exe "SomeScriptsHere"

Each time the computer is started, anything here in shell will also get executed. So Remove the part SomeScriptsHere and keep only Explorer.exe

Shell= Explorer.exe

There might be one more addition in Userinit

Keep only

Userinit = C:\WINDOWS\system32\userinit.exe

and remove the rest part.

This will solve the problem of that annoying dialog box.


Offline Profile Quote Post
Virus Troubleshooting Tutorial · Computer Problems / Alerts