Worm/Agent.btk, qualcuno sa come debellarlo

[ste_95]

errore mio, questo è lo script:

Files to delete
C:\sys.exe
C:\WINDOWS\algsvr.exe
C:\WINDOWS\sys.exe
C:\WINDOWS\Help\winhelp.exe
C:\WINDOWS\security\discover.exe
C:\WINDOWS\system\infoman.exe
C:\WINDOWS\system32\expIorer.exe
C:\WINDOWS\system32\internat.exe
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe


registry values to delete:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run | "Algsvr"="C:\WINDOWS\algsvr.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run | "Internet"="C:\WINDOWS\system32\nternat.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run | "Explorer"="C:\WINDOWS\system32\expIorer.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run | "Host Info"="C:\WINDOWS\system\infoman.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run | "Help"="C:\WINDOWS\help\winhelp.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run | "Discovery"="C:\WINDOWS\security\discover.exe"

fixa inoltre queste voci:

O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe