In XP home when trying to change the value from 1 to 0 to enable it, it does not save the value and automatically defaults back to 1. Tryed deleting as well does not delete.Any help would be appriciated
Hi, I think the virus is MUHAHAHA Virus, I havent deleted the virus as to do that i need to get into my task manager and end svchost.exe one with user name as your login name of computer and end those processes. So the first step is enable task manager and I cant do that even changed the properties os regedit save to 0 still no luck.
mfletch i followed the steps in the link but it registry comes back even after deleting. :-(
This is the (in)famous USB spreading virus. Not very harmful, lets you know that your computer is infected, the moment it gets in.
The key point in removing this virus is turning off the system restore feature on windows, otherwise no matter how many times you delete it, it will reappear. Just turn off system restore, boot in safe mode and delete the exe file (excluding the one in windows/system32, which is a windows system file).
You may also need to tweak the registry values (like view hidden files setting) which have been changed due to the infection.
And one more word, there is no need to avoid the usb drive usage on your machines, but just turn off the auto run features on the external drives, and it should take care of the autorun.ini in the thumb drive, which brings the virus to life.