[Jeff]

I'm trying to clean up after a virus infection on an XP Pro SP2 machine. I
have a list of all the registry entries added by the virus, and want to
manually delete them. I can find them easily enough, but when I try to
delete them I get an 'unable to delete all occurrences' message (or words
very similar!).

I'm not very experienced in editing the registry - I usually use a util to
keep it tuned - and I know how dangerous it can be. But although I've
removed the virus exe from the machine, and prevented firewall_anti from
loading or running, I still have all these registry entries that I'd like to
get rid of. What's the right way to do it please? I'm right-clicking the
reg entry concerned and choosing delete. Edit/Delete gives me the same
message. As I say, I have what seems like an accurate list of the reg
entries made by the virus (from Sophos).

Any pointers greatly appreciated, thanks

[mike.dee1]

Jeff wrote:
> I'm trying to clean up after a virus infection on an XP Pro SP2 machine. I
> have a list of all the registry entries added by the virus, and want to
> manually delete them. I can find them easily enough, but when I try to
> delete them I get an 'unable to delete all occurrences' message (or words
> very similar!).
>
> I'm not very experienced in editing the registry - I usually use a util to
> keep it tuned - and I know how dangerous it can be. But although I've
> removed the virus exe from the machine, and prevented firewall_anti from
> loading or running, I still have all these registry entries that I'd like to
> get rid of. What's the right way to do it please? I'm right-clicking the
> reg entry concerned and choosing delete. Edit/Delete gives me the same
> message. As I say, I have what seems like an accurate list of the reg
> entries made by the virus (from Sophos).
>
> Any pointers greatly appreciated, thanks
>
>


The simple answer might just be to import old registry that you know is
fine. If you have it. Otherwise I don't know. I had a similar problem
but with NOrton IS 2004.