Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Hello and can ypu help?

  • Please log in to reply
1 reply to this topic

#1 drog1998


  • Members
  • 1 posts
  • Local time:06:07 AM

Posted 04 March 2005 - 02:42 PM

Hi all, handy site - just hope it can help me and i might be able to help others at some point.

Im having trouble following these steps below form this post on this forum:

To remove this infection you must remove the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\drct16

Ok I can do this bit no problem but the paragraph below i dont understand how to do. How do i remove permissions then add permission and then take ownership? And what is sc delete? is that a registry command?

These keeps need to be removed first but you must remove all permissions to the keys, then add everyone to it with full permission and then take ownership to delete them:


This can be accomplished easily in Windows XP by running:

sc delete winlow
sc delete VDMT16

and then delete the Winlogon Notify key.

Id be grateful for any help, apologies if i'm being a newb.

BC AdBot (Login to Remove)


#2 Grinler


    Lawrence Abrams

  • Admin
  • 43,665 posts
  • Gender:Male
  • Location:USA
  • Local time:06:07 AM

Posted 06 March 2005 - 10:42 PM

Are you using XP? If so then just click on start, then run, and type:

sc delete winlow

and press the ok button.

Then click on start, run, and type:

sc delete VDMT16

and press the ok button.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users