xxx

February 4, 2008

Sub7@Chatx.net Virus - Easy Solution

Filed under: Support


source: The Power of Information Technology

 

Are you wondering why your hard disk or flash disk opens up in a new window when you double click it? And when you right click on the icon, the name "Sub7@Chatx.net" appears? Then probably you are infected with a virus. This virus mainly is a trojan that corrupts the autorun.inf of every disk drive.

Here are simple steps to cure the virus:

1.)  Run Task Manager (Ctrl-Alt-Del or right click on Taskbar)
2.)  Stop wscript.exe process if available by highlighting the process name and
      clicking End Process

3.)  Then terminate explorer.exe process
4.)  In Task Manager, click on File -> New Task (Run…)
5.)  Type “cmd” into the textfield and click OK
6.)  Type the following command one by one by pressing Enter after every line:
         del c:autorun.* /f /s /q /a
         del d:autorun.* /f /s /q /a del
         e:autorun.* /f /s /q /a
      c, d and e represents each drive letter on Windows system. If there are more
      drives or partitions infected, continue entering the commands, changing the
      drive letter only

7.)  In Task Manager, click on File -> New Task (Run…)
8.)  Type “regedit” into the textfield and click OK
9.)  Navigate to the registry key:
         HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows NT ->
         CurrentVersion -> Winlogon

10.) Check the value name and value data for the key:
       Incorrect: Userinit = "userinit.exe,autorun.exe"
       Correct:   Userinit = "C:WINDOWSsystem32userinit.exe,” (comma included)