10/15/2005

w32.alcra.b XP fix

i got hit with this worm. tricky little f*cker.

to get rid follow the instructions at symantec's security response site here

one addition. the worm disabled regedit on my XP box. Start->Run->"regedit" simply pulls up a dead MS-DOS box. this is fixed by creating a renamed copy of regedit. alternatively use the utility provided by Ramesh Srinivisan at ToolsQuit

alternatively simply type the explicit executable name i.e. "regedit.exe" in Start->Run.

b VERY careful editing the registry - BACK IT UP FIRST!!! obviously, i cannot take any responsibility for your tinkering in your own registry.

hope this helps.