Tuesday, September 11, 2007

Healing you windows after Skype-virus

I do not have PC, what for? Mac is cool enough.
But since I just healed two PC of my friends, a short description on what to do when you catch the Skype virus yourself:

Expert users — and only expert users — who know what they’re doing can also remove the worm manually.

1. Restart the PC in safe mode
2. Run regedit
3. Go to HKLM/software/microsoft/windows/currentversion/runonce find entry with mshtmldat32.exe. Delete this entry.
[Actually there might be some other *.exe reference there - remove it just in case]
4. Go to Windows\System32 directory and delete following files: wndrivs32.exe, mshtmldat32.exe, winlgcvers.exe, sdrivew32.exe
5. Go to windows/system32/drivers/etc
6. Find file hosts
7. Open it with notepad, ctrl+a and delete all entries (this will resume your antivirus updates), save, close.
8. Restart the PC.

[Source: http://heartbeat.skype.com/2007/09/the_worm_that_affects_skype_fo.html]

No comments: