Registry problems during p2p-worm removal

Question

I have tried several different ways to remove a worm that has been on my computer for quite sometime. I have followed the instructions from http://securityresponse.symantec.com/avcenter/venc/data/w32.alcra.a.html to the point where I need to finally fix my registry. Every time I go to run to open my registry the dos prompt window will close as soon as it opens. What I have read suggests that the worm has changed my registry so that I cannot get into it to fix it. I seen recently that the page had been updated to provide a tool to help you get past this. Unfortunately, I downloaded and installed the UnHookExec.inf file then tried run and regedit again but it still does not allow me into my registry.

Any information would help alot. I've had this problem on my computer for MONTHS but have been so busy with classes that I didn't have time to fix it once I got started.

bamajim · Answer

painted_black

If you've changed some registry settings, and are unable to access it again. I think it would be best if you performed a system restore.

Click Start->>Programs->>Accessories->> System Tools->> System Restore..

Then, let us see if we can help you remove the infection

Go here and download Hijackthis

http://dsvs.org/5/HijackThis.exe

Save it in a convenient permanent folder such as C:\\HJT\\, double click HijackThis.exe, and hit "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log, Ctrl-A to Select All, and copy its contents AT THE LINK BELOW

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

and include a description of the problem along with your log

Please do not be tempted to "fix" on your own. Hijackthis is a very powerful tool, if used incorrectly can cause system problems

If you have any problems please reply

bamajim

Training at Malware Removal University

Virus & Spyware

Registry problems during p2p-worm removal

Was this post helpful?