Editing Registry

Remove remnants of KWBot.Worm from the Registry and File System
http://www.dougknox.com/xp/scripts_d...lean_kwbot.htm

(Courtesy of MS-MVP Doug Knox)


--
Nicholas

-----------------------------------------------------------------------------------

<*Bones <@spamcrypt.com>> wrote in message:
news:jcu1jv80fmh3notf5cicvdbjs61o0rjdb5@4ax.com...

| Need to delete files related to W32Spybot.worm ... never edited
| Registry before and anxious not to create worse problem.
|
| I've backed up the 2 Reg files that are usually implicated, as
| suggested by Symantec also backed up the System State files and
| disabled System Restore .
|
| Now when it comes to "deleting any values that refer to the file name
| that was detected as infected by the W32 Spybot Worm", I'm confused.
|
| I'm not sure whether to edit the Registry with Regedit and Notepad
| (please tell me how) or just in the Registry itself and what is "the
| value" to be deleted?
|
| Any input would be greatly appreciated except references to MS and
| Symantec ... I read them and just don't have the "expertise" to
| understand them.
|
| TIA
| Howard