Ihedont manual removal:
Kill processes:
rundlls.exe, sydneylove.exe, sydneyloves.exe, windows.exe
Delete files:rundlls.exe, sydneylove.exe, sydneyloves.exe, windows.exe, sydneyloves.dll, winsys.dll, iloveyou.vbs
Misc:The windows.exe file arrives attached to Ihedont e-mail messages.
The worm modifies essential configuration file of Windows 95/98/ME systems. Open the win.ini located in C:\Windows\System or C:\Windows\System32 folder and delete the following line:
run=C:\Windows\rundlls.exe
Exact file location:
rundlls.exe - C:\Windows, C:\Winnt, C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
sydneyloves.exe, windows.exe, sydneyloves.dll, winsys.dll - C:\Windows or C:\Winnt
sydneylove.exe - C:\Windows\Start Menu\Prorams\Startup or C:\Documents and Settings\All Users\Start
iloveyou.vbs - C:
Post Comment: