virus triggers executables, can't use regedit or system restore

[LARay]

A virus that AVG calls I-Worm/VB.II has been “quarantined” but its damages
remains. A number of executables created by the virus continue to execute at
bootup, using so much memory that a balloon says “Virtual Memory Too Low.”
One of the green “thinking” lights blinks constantly. It is impossible to
use memory-intensive applications like watching DVDs.

On bootup, an error message appears that the system cannot find
C:\Windows\KesenjanganSosial.exe (an executable created by the virus). I
assume that a command to trigger the program remains in the registry. When I
tried to edit the registry, a message advised that I am not authorized to
edit the registry, though I am the administrator and sole user.

The computer will not shut down normally; it “hangs” on the desktop
background and I have to turn it off by pulling out the plug.

I tried using System Restore, but because the computer will not shut down
normally, System Restore won’t work.

When I boot up in safe mode, the same message appears: that the system can’t
find C:\Windows\KesenjanganSosial.exe.

My notebook has Windows XP System Pack 2.

My request: to be able to edit the registry or otherwise alter the bootup
routine so that the computer does not look for KesenjanganSosial.exe. Also,
to delete the executables created by the virus and triggered with bootup,
which use up most of the memory. Or to be able to use System Restore
successfully to turn back the clock to a time when the computer worked
without problems.

Thanks for any and all help!

Ray Stevens

[Andrew Wan]

Use sfc from commandline.

"LARay" <LA...@discussions.microsoft.com> wrote in message
news:132B6315-E9F7-44F2...@microsoft.com...