Tuesday, November 3, 2009

How Do I Remove This Virus "ahsan Manan Khan Bhutta" From My System?

goto start>run , type regedit , from the menubar goto edit>find,
and type Ahsan , after getting the result click on Ahsan and right
click to modify its name. Cut AHSAN MANAN KHAN BHUTTA

*INTERNET EXPLORER* and type INTERNET EXPLORER, and its done, ITS 100% tested and i resolved the same problem by this method.


These are steps on how to remove this wicked virus on you
computer, try it,remove Ahsan's virus :

1. start windows in safe mode with command prompt(user:admin,
preferably a user other than having attacked)

2. use RRT Tool to enable run " if disabled".

3. Enable regediting if disabled with following reg key.

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\
System /v DisableRegistryTools /t REG_DWORD /d 0 /f

4. Open regedit, search and delete all entries with
name "Ahsan" , site 110mb.com and Bush.

5. If your folder option is disabled enable it with following reg key "

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\

Check if a DWORD value named NoFolderOptions exists in the pane on
the right hand side of the screen
Delete it

6. If you are still unable to view the hidden files, which is disabled by
virus, enable it with following proc and key.

Explorer\Advanced. Find the value "Hidden" . Rightclick it and modify
it to 1. If Key value hidden is not present create it

7. Check the following registery values and set the values given
below in each registery key.

"DefaultValue"=dword: 02

"CheckedValue"=dword: 01

8. Now enable "show all hidden files / Hidden system files
and folders", and search for following files and delete them all.

Home video.avi.exe

Note: these files will be in parent drives (D:, C:) and in windows folder.

9.Now you are done !

No comments:

Post a Comment