Wednesday, April 13, 2005

WORM_RANDEX.BN - Description and solution

WORM_RANDEX.BN - Description and solution:

Terminating the Malware Program

This procedure terminates the running malware process.

Open Windows Task Manager.
» On Windows 95, 98, and ME, press
CTRL+ALT+DELETE
» On Windows NT, 2000, and XP, press
CTRL+SHIFT+ESC, then click the Processes tab.
In the list of running programs*, locate the process:
SCardClnt.exe
Select the malware process, then press either the End Task or the End Process button, depending on the version of Windows on your system.
To check if the malware process has been terminated, close Task Manager, and then open it again.
Close Task Manager.

Removing Malware Entries from the Registry

Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>System>CurrentControlSet>
Control>SafeBoot>Minimal
Locate and delete the subkey:
ScardClnt
Still in the left panel, double-click the following:
HKEY_LOCAL_MACHINE>System>CurrentControlSet>
Control>SafeBoot>Network
Locate and delete the subkey:
ScardClnt
Close Registry Editor.