🚀 go-pugleaf

In article <zzFF4.6513$Q5.23128@stones>, William Allen
<mail@mayfly13.fsnet.co.uk> writes
>Do this:
[...]
>======
>REGEDIT4
>
>
>[HKEY_CLASSES_ROOT\exefile\shell\open\command]
>@="\"%1\" %*"
>======
>
>This file should rebuild enough of the EXE association to get EXEs
>working 

Sadly not; though the other solution offered elsewhere in this thread
fixed that problem.

[...]
>Now you have to start clearing up the mess the
>trojan left.  You could try an AV scanner to do this (**NOT** the one
>that got you in this mess), 

Norton (which was the software use din this case) now reports that
Subseven is still infecting c:\WINDOWS\MSREXE.EXE, which it cannot fix;
it recommends deleting this file. The file cannot be deleted (nor even
renamed, as a backup) as it is "in use by Windows". Will Sophos Sweep
fix it (I won't have chance to try that until tomorrow night), or is
there some other solution.

>or email me for more details.

Thanks again - copy e-mailed.
-- 
Andy Mabbett
"Give a man a fish, feed him for a day; teach a man to fish, 
 feed him for life"  - Chinese proverb (500 B.C.)
"Teach him to use the 'Net and he won't bother you for weeks." - Les King