Incoming Security Alerts to Keep Your PC Healthy
 
Trojan.Abwiz.F
 
This virus can allow a remote attacker to access your PC.
 
A quick way to discover if your PC is infected is to search for the
following file(s):
Windows XP: C:\Windows\System32\taskdir.exe
Windows 2000: C:\Winnt\System32\taskdir.exe
Windows Me/98SE: C:\Windows\System\taskdir.exe
 
or
 
Windows XP: C:\Windows\System32\zlbw.dll
Windows 2000: C:\Winnt\System32\zlbw.dll
Windows Me/98SE: C:\Windows\System\zlbw.dll
 
To remove this virus, first back up your registry...
 
To backup the registry in Windows XP, by setting a Manual System
Restore Point:
1.  Click Start > All Programs > Accessories > System Tools >
    System Restore.
2.  Select Create a Restore Point and click Next.
3.  Type a memorable name for your restore point.
4.  Click Create.
5.  Click Close.
 
To backup the registry in Windows 2000, using the Backup Wizard:
1.  Click Start > All Programs > Accessories > System Tools >
    Backup > Welcome > Backup Wizard.
2.  Click Next.
3.  Select Only back up the System State data and click Next.
4.  Click Browse.
5.  If the Insert Disk warning message is displayed, click Cancel.
6.  From the Look in drop-down box, choose Desktop.
7.  In the File name field, type a suitable file name.
8.  Click Open > Next > Finish.
9.  When you see the message The backup is complete, click Close.
10. Close the Backup Utility window.
 
To backup the registry in Windows Me/98SE (using the Windows Registry
Checker - SCANREGW.EXE):
1.  Click Start > Run.
2.  Type: scanregw
3.  Click OK.
4.  Click Yes > OK.
 
Once you have backed up your registry, proceed as follows:
1.  Click Start > Run.
2.  Type: regedit and press [Enter].
3.  Go to the registry subkey:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\
    CurrentVersion\Run
4.  In the right pane, delete the value:
    "taskdir" = "%System%\taskdir.exe"
5.  Go to the registry subkey:
    HKEY_CURRENT_USER
6.  In the right pane, delete the values:
    "ColorTable19" = "[TROJAN DATA]" "ColorTable20" = "[TROJAN DATA]"
7.  Exit the Registry Editor.
 
         -------------------
 
W32.Beagle.DZ
 
This beastie is usually contracted from file sharing networks and will
attempt to download and execute a malicious program.
 
A quick way to discover if your PC is infected is to search for the
following file(s):
Windows XP: C:\Windows\System32\wintems.exe
Windows 2000: C:\Winnt\System32\wintems.exe
Windows Me/98SE: C:\Windows\System\wintems.exe
 
To remove this virus, first back up your registry using the
instructions given above.
 
Once you have backed up your registry, proceed as follows:
1.  Click Start > Run.
2.  Type: regedit and press [Enter].
3.  Go to the registry subkey:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\
    CurrentVersion\Run
4.  In the right pane, delete the values:
    "drvsyskit" = "%Userprofiles%\Application Data\
    hidires\hidr.exe"
    "german.exe" = "%System%\wintems.exe"
5.  Exit the Registry Editor.
 
         -------------------