Stupid Worms

Anybody come across this pair of worms: Bron_Spizaetus & Tok_Cirrhatus. My friend's photolab has a network of 4 PC's were infected by these worms. These PC's were not connected to the Internet & these worms came from customer's media. I use ZoneAlarm initially to scan but couldn't detect anything. AdAware detected 4 similar spyware in all the PC & they all reside in the Registry but couldn't delete them. Norton 2005 detected & remove almost 1000+ virus from each PC but couldn't touch those within the Registry. McAfee ver 7.0 also can delete a lot of virus but also couldn't clean the Registry. I wonder whether Norton 2006 or a later version of McAfee can do a better job.
In the meantime, these worms keep on multiplying. Anyone have a solution?

 

Ok get a HJT log and then we'll sort the reg.

Bron_Spizaetus and Tok_Cirrhatus will be in the start up so to get rid of that start>run>msconfig and clikc the start up tab and uncheck Bronstab.exe and tok.exe or somthing.

 

Hey, download HiJack This from: http://koti.mbnet.fi/pattaya1/HijackThis.exe

Install it to folder c:\hjt\

Open it and press the "Do a system scan and save a logfile"

Copy the log and post it to here and we will check it out.

 

Yeh do that if you dont already know about HJT.

 

I know they are in the Startup program but they already disabled the Regedit. The moment I open msconfig, the system will do a reboot. Anyway I did a reformat of the C drive for all 4 PC's & use Spy Remover to safeguard the Registry - no worm can get in anymore & use Norton to remove all the worms in the other drives.

 

Yeh you could do that but it'll be a big job.

 

What choice do I have? The Registry is under their control. Unless there's a virus scanner that can reach them & cleaned them out.