i·me·michael

Some days you just can’t get rid of a bomb.¶

i·me·michael header image 2

worms and things

May 20th, 2002 · 3 Comments

Heads up for KaZaA users:

Sleeping software awakens

Benjamin worm targets Kazaa

You silly KaZaA users be careful.

Tags: General

3 responses so far ↓

  • 1 carey // May 22, 2002 at 11:39 am

    been there……..

    uninstalled that.

    no doubt.

  • 2 gddsg // Jul 15, 2002 at 3:52 pm

    I have a kazaa worm. if anyone is good can they help me? more details if there are any helpers

  • 3 michael // Jul 15, 2002 at 4:19 pm

    If it’s the Benjamin worm then you can do the following:

    Manual Removal
    If infected with the Benjamin worm, the following registry keys will have been modified to include the value shown:

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "System-Service"="C:\WINDOWS\SYSTEM\EXPLORER.SCR"
    [HKEY_LOCAL_MACHINE\Software\Microsoft]
    "syscod"="0065D7DB20008306B6A1"

    Locate and delete the values shown.
    Locate and delete the file EXPLORER.SCR.
    Locate and delete the Sys32 subfolder located in the Windows Temp folder.

You must log in to post a comment.