fjernenlsaf w32 worm

Disable System Restore (Windows Me/XP).
Update the virus definitions.
Restart the computer in Safe mode or VGA mode.
Run a full system scan, and delete all files that are detected as W32.Spybot.Worm.
Delete the value that was added to the registry.
Delete any zero-byte files in the Startup folder

i din reg edit kig efter:

Adds a variable registry value to one or more of the following registry keys:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_CURRENT_USER\Software\Microsoft\OLE

For example:

"Microsoft Update" = "wuamgrd.exe"

or

"Microsoft Macro Protection Subsystem" = "bling.exe"

DU HAR sansynligvis MERE uønsket 'snavs' på din spand:

Adaware:
http://www.spywarefri.dk/vaerktoj.htm#adaware

Spybot:
http://www.spywarefri.dk/vaerktoj.htm#spybot

Hent denne scanner:
http://www.spywareinfo.dk/download/mwav.exe
Inde i opsætningen sætter du den til at scanne alt
Kør scanneren.

Indtil en HiJackThis expert kommer så rul HiJackThis proceduren:
http://www.spywarefri.dk/vaerktoj.htm#hijackthis
http://www.spywarefri.dk/hijackthis.man.htm

Ikke nødvendigvis mig der følger op..

??? Hvor blev du af ???