View Full Version : Post ad clicker virus quarantine
Torpedo
07-05-2004, 02:28 PM
I recently got infected with an "ad-clicker" virus. McAfee froze up and wouldnt work, I deleted the program then installed the latest version of Mcafee from their website. During installation it immediately caught the "ad-clicker" virus but would not load completely, I then ran it in safe mode and was able to quarantine the virus. Now, everything seems to be running normally however I feel as I have done this hap hazardly and would like to know if I should do anything else such as removing something from the registry, if so what?
Thanks
Copies itself to C:\Windows\Syslaunch.exe
in this reg key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run
it adds the vaule
Wardo"="C:\WINDOWS\syslaunch.exe
that allows it to start with windows
since you have updated and removed just make sure that reg entry is deleted, oh yea, if you are using winme or xp be sure to disable restore during this and then restore after. Keep checking for updates on definitions, if possible everyday.
Torpedo
07-06-2004, 12:29 AM
Thanks, i followed the registry key and could not find that value there. System restore had been disabled when I was trying to clean it up and it looks like it is taken care of.
Thank You
Very Much Appreciated!
vBulletin® v3.8.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.