FLASH: Solution for the LoveYou virus

[dirk.vael]

MuMIlS1shcsL3Nx1egw9VdV2

Content-type: text/plain; charset=iso-8859-1

Content-Disposition: inline

Content-transfer-encoding: quoted-printable

Sender:

ownerchinwag [dot] com

Precedence: bulk

Reply-To:

flasherchinwag [dot] com

X-Website: http://www.chinwag.com


What I did to repair:


do NOT reboot


close ms internet explorer and do not open until this solution is execu=

ted


**run regedit.exe


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\

delete value: WIN-BUGSFIX


HKCU\Software\Microsoft\Internet Explorer\Main\Start Page

replace adress with something like "http://www.hotmail.com" (without br=

ackets)


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKern=

el32

delete key!


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunService=

s\Win32DLL


delete key!


HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Ti=

meout

delete key!


if using MS Outlook, check root key of HKCU\Software\Microsoft\WAB\ for=


anomalies (normally there shouldn't anything there)

I'm not an Outlook user, so I cannot give much more tips


**in File Explorer:


search anything on C:\ with *.vbs & erase it

(everything of visual basic, java & jpeg is lost, MP3 or MP2 still ther=

e but

with an 11K copy with same name plus .vbs extension)


if you have mIRC32, erase script.ini file !


Now you have repaired all damage which is repairable, remember anything=

 with

.vbs, .vbe, .js, .jse, .css, .wsh, .sct, .hta, jpg, .jpeg is LOST



|-------------------------+-------------------------+------------------=

-------|

|                         |   tloenders@interconnect|                  =

       |

|                         |   .be                   |   =A0 =A0 =A0 =A0=

 To:           |

|                         |                         |   flasher@chinwag=

.com,  |

|                         |   05/04/00 04:19 PM     |   belrave@amphion=

.be    |

|                         |   Please respond to     |   =A0 =A0 =A0 =A0=

 cc:           |

|                         |   owner-belrave         |   (bcc: Dirk Vael=

)      |

|                         |                         |   =A0 =A0 =A0 =A0=

 Subject:      |

|                         |                         |   BelRave : FW: W=

ARNING:|

|                         |                         |   e-mail bomb ale=

rt !!  |

|                         |                         |   Solution for th=

e      |

|                         |                         |   LoveYou virus, =

       |

|                         |                         |   ADMIN, READ FIR=

ST     |

|                         |                         |   PLEASE!!       =

       |

|-------------------------+-------------------------+------------------=

-------|




flasher is generously supported by...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 Get the last 100 messages from the flasher list NOW

    http://www.chinwag.com/flasher/last100.shtml


 Flash books http://www.chinwag.com/flasher/books.shtml

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

To unsubscribe or change your list settings go to

http://www.chinwag.com/flasher or email

helpchinwag [dot] com