General discussion

Locked

netowkr wide registry search

By CGordon ·
I would like to search my all the computers no my LAN's registry and be able to delete a key. The w32.spybot.worm has added the key svchosting.exe in some of the computers registry and I need to delete the file and also the registry key. Is there a script to do this? If so can it be run before anything loads so that the file will not be in use?

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Corrielein In reply to netowkr wide registry sea ...

Not sure about running scripts, but you will also need to terminate the running malware process from memory before you can delete the registry key, otherwise it will just come back when you next restart the PCs. I know its not the answer you're looking for, but I hope it helps!

Collapse -

by aquias2000 In reply to netowkr wide registry sea ...

First thing to do, is to run a network wide virus scan to clean all the current virus' on your network off.

Next up, you can (although I recommend testing this thoroughly prior to attempting it) create a batch file with the correct registry settings and the commands to go out and delete the svchosting.exe file.

Back to Networks Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums