Interlaced
In Runtime
- Messages
- 163
Yea the virus i had was a bit of a pain in the ass, did u remove the sites and then save?, oh yea if i had the same virus that u have check this out.
To reverse the changes made to the registry
Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.
Click Start > Run.
Type regedit
Then click OK.
Navigate to the key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
In the right pane, delete the following values, if present:
"Microsoft System Checkup"="ntsysmgr.exe"
"Microsoft System Checkup"="libsysmgr.exe"
Navigate to the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
In the right pane delete the value:
"NT Logging Service"= "syslog32.exe"
Exit the Registry Editor.
Restart the computer in Normal mode. For instructions, read the section on returning to Normal mode in the document, "How to start the computer in Safe Mode."
I believe u have to do this in safe mode, but moswell check normally first if u have those registry entries.
Source - Symantec
To reverse the changes made to the registry
Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.
Click Start > Run.
Type regedit
Then click OK.
Navigate to the key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
In the right pane, delete the following values, if present:
"Microsoft System Checkup"="ntsysmgr.exe"
"Microsoft System Checkup"="libsysmgr.exe"
Navigate to the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
In the right pane delete the value:
"NT Logging Service"= "syslog32.exe"
Exit the Registry Editor.
Restart the computer in Normal mode. For instructions, read the section on returning to Normal mode in the document, "How to start the computer in Safe Mode."
I believe u have to do this in safe mode, but moswell check normally first if u have those registry entries.
Source - Symantec