Desktop

Ask something
Discussion Locked

Virus attack and infection

0 helpful
5 replies

by sevine

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I've been working with Win 2000. Today I received e-mail which is included virus. And I had already installed an antivirus program (norton antivirus) Althougt it found virus, virus infected my computer. Within a minute I couldn't run any .exe(alsoregedit.exe) file which is already installed on my computer.
VIRUS: W32.YahaF@mm
I realize that "HKEY_CURRENT_CONFIG" and "HKEY_CURRENT_USER deleted in the registry. I display registy on network. Now some of system files are working and someofthem are not working.
Is there any solution to rescue all installed programs(not only data)?Or sould install win 2000 again?

5 replies

by sevine

I tried to Symantec web site instead of Mcafee. So I found proper answer and I applied step by step.Now my computer was cleaned and all my applications is working.
Thans your concern.

by grey_woolf

The HKEY_CURRENT_CONFIG and HKEY_CURRENT_USER registry keys are actually files SYSTEM.DAT and USER.DAT respectively. They have the attribs of RHSA.

You can return to the last known good config by deleting them and renaming their counterparts. SYSTEM.DA0 and USER.DA0 respectively.

From the System prompt:
- Remove the attribs RHS on both .DAT files.
- Delete the files.
- Remove the attribs RHS on the .DA0 files.
- Rename the .DA0 files to .DAT
- Add attribs RHS to the .DAT files.
- Reboot.

This discussion is closed to new replies.