W32.TZET.WORM

  • Thread starter Thread starter Matt L
  • Start date Start date
M

Matt L

My Antivirus SW has detected W32.tzet.worm. Instructions
for removal say to delete the value "WUPD"="%
\iglmtray.exe" from a particular place in the Registry.
This value does not exist in that location. Additionally,
a search of all files does not find that data. Any
Suggestions?
 
Matt,

Common locations in the Registry are:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

See www.dougknox.com, Win XP Utilities, Startup Programs Tracker. This
small utility scans your system for startup programs and running processes.
It also allows you to create a log file that can be copied and pasted into a
newsgroup post. The contents of the program window are also copied to the
Windows Clipboard, automatically. Each Startup program found will be listed
under the relavant Registry/Start Menu location.
 
Back
Top