VBS.Illen - Removal

Risk Level 1: Very Low

Printer Friendly Page

Updated: February 13, 2007 11:33:35 AM
Type: Trojan Horse, Worm, Virus


Infected users should do the following:
  • Delete all files detected as VBS.Illen or Backdoor.TheThing.c
  • Restore any .vbs files from a clean backup.
  • Restore c:\mirc\script.ini and c:\mirc\mirc.ini from a clean backup.
  • Delete the c:\...\MyPicture.bmp.vbs value from the HKLM...\RunServices\Winload registry key.
  • Restore the Registry entries modified on December 31st to their correct values (if applicable).
Search by name
Example: W32.Beagle.AG@mm
Windows 7
Windows Vista Security