Thread: strange virus
View Single Post
Old 05-25-2003, 04:45 PM  
SABAI
Confirmed User
 
Join Date: Jan 2001
Location: footmaniac.com
Posts: 2,880
Description:

The Trojan, TROJ_WORTRON.10B generates this worm, which propagates via email. It sends copies of itself to all email recipients listed in the infected user's Windows Address Book.

Solution:



Open the Registry Editor. Click Start>Run, type REGEDIT then hit the enter key.
In the left panel, double click the following:
HKEY_CLASSES_ROOT>exefile>shell>
open>command
In the right panel, locate and modify the "(Default)" entry, with the data value is "%sysdir%\wininet.exe "%1" %*" into "%1" %*".4. gain in the left panel, double click the following:
HKEY_LOCAL_MACHINE>Software>CLASSES>exefile>
shell>open>command
In the right panel, locate modify the "(Default)" entry with the data value, "%sysdir%\wininet.exe "%1" %*" as "%1" %*".
Restart your system.
Scan your system with Trend Macro antivirus and delete all files detected as WORM_WORTRON.10B. To do this Trend Micro customers must download the latest pattern file and scan their system. Other email users may use HouseCall, Trend Micro's free online virus scanner.
__________________
SABAI is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote