Manual Removal

This is a virus that has to be removed manually. 1: Close the IE browser. Log out messenger / Remove Internet Cable. 2: To enable Regedit Click Start, Run and type this command exactly as given below: (better - Copy and paste) REG add HKCU\Software\Microsoft\Windows\CurrentV... /v DisableRegistryTools /t REG_DWORD /d 0 /f 3: To enable task manager : (To kill the process we need to enable task manager) Click Start, Run and type this command exactly as given below: (better - Copy and paste) REG add HKCU\Software\Microsoft\Windows\CurrentV... /v DisableTaskMgr /t REG_DWORD /d 0 /f 4: Now we need to change the default page of IE though regedit. Start>Run>Regedit From the below locations in Regedit chage your default home page to google.com or other. HKEY_CURRENT_USER\SOFTWARE\Microsoft\I... Explorer\Main HKEY_ LOCAL_MACHINE\SOFTWARE\Microsoft\Interne... Explorer\Main HKEY_USERS\Default\Software\Microsoft\... Explorer\Main Just replace the attacker site with google.com or set it to blank page. 5: Now we need to kill the process from back end. Press Ctrl + Alt + Del Kill the process svhost32.exe . ( may be more than one process is running.. check properly) 6: Delete svhost32.exe , svhost.exe files from Windows/ & temp/ directories. Or just search for svhost in your comp.. delete those files. 7: Go to regedit search for svhost and delete all the results you get. Start menu > Run > Regedit > 8: Restart the computer. That�s it now you are virus free. 9969040784.muthu_selvsm80