Removal of Berbew virus

  • Thread starter Thread starter Marc
  • Start date Start date
M

Marc

I was infected by the Berbew virus which was removed by
Symanted Norton Antivirus.

It removed the file.

I also checked the registry, according to the
instructions on the Symantec side but the key which were
supposed to be removed were not there any more. Did
Symantec erase them as part of the virus removal?

The only thing among those desribed by the Symantec site
that are left in the Registry are the values
"FormSuggestPasswords"="yes"
"FormSuggest PW Ask"="yes"
"Use FormSuggest"="yes"
in the registry key
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main

Does any one know what these key values mean? Should they
be cancelled or changed?
 
As I said in my message, most of the changes in the
Registry were already done when the virus was removed,
except for the three values I mentioned. I would be
curious to know if it was the same for you.

As far as the System Restore is concerned, you do not
have to disable it but you cannot use it anymore to
restore to states before you got the virus because it
will restore the virus at the same time.

If I were you and I was reasonably satisfied that the
system is virus free and functions properly, I would do a
Restore immediately, so that I could use it in the future.
 
Back
Top