xp_clean_kwbot.vbs - Removes remnants of KWBot.Worm from the Registry and File System.
© 2003 - Doug Knox - 4/5/2003
This VB Script will the common Registry entries and files created by the KWBot.Worm. This worm causes an error message that "CMD32.EXE" cannot be found on startup. The error message may also be that "system32.exe" cannot be found.
To use: Download the xp_clean_kwbot.vbs file and save it to your hard drive (you may want to right click and use Save Target As). Double-click the xp_clean_kwbot.vbs file. You will be prompted when the repairs have been completed. This script can be viewed in Notepad or any text editor, as to the specific Registry key and value that are updated.
After running this script, you'll need to go to Control Panel, System, System Restore. Once there, turn off System Restore and click Apply. Then turn it back on, adjust your settings as desired and click Apply again. This flushes out any copies of the worm that may be in the System Restore Point files.
This page last updated 06/03/2011 06:11
All material © Doug Knox