Registry Editor (1 Viewer)

[CrashOveride]

Ok, so i formatted my comp, put win xp on and connceted to net before setting up any firewall. As a result, ive been infected by a couple of virii.....using norton 2004 anti virus i went thru all that and removed some. then some remained had to turn off system restore repeat bla bla

so its all clear from that side. i went to regedit cleared it all up there just one thing is annoying me and wont remove itself.

I've got:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_WUAMGRD

(ps. i was infected by a variant of wuamgrd.exe)

I want to remove this entire key and all of iuts subkeys but it wont let me.

Any ideas? :mad1:

 

[Jesus]

C-C-C-COMBO BREAKER



try safe mode

 

[CrashOveride]

Nope, didn't work.

 

[CrashOveride]

Anyone? I feel like i have to format again FFS

 

[sunny]

Try this
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

then this
http://www.sophos.com/virusinfo/analyses/w32rbota.html

 

[CrashOveride]

Ok i can easily remove all the keys identified on that site, sunny.

but there is one which has quite a few sub keys, that cannot be removed, gives error.

It's located at:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_WUAMGRD

Maybe it's because of its location that it wont let me get rid of it? LIke a more "sensitive" area or something.

Any ideas anyone ?