How to remove winthb.exe virus?

This is a trojan virus.
Effects
1)It will change C:\ drive's icon.
2)It will change C:\ drive's Label to %$thb$% or !@#thb!@#
How to remove
1)Open search and type winthb.exe and then search autorun.inf
2)If you find these files you'r computer is infected.
3)Now restart you'r computer and enter in safe mode.
4)After enter Click on Start/Run .
5)Type cmd.
6)Now make sure you are using infected drive (for example C:\ drive).
7)Now type attrib -h -r -s winthb.exe
8)Then type del winthb.exe
9)Again type attrib -h -r -s autorun.inf
10)Type del autorun.inf

Now enter windows normally
11)To make sure virus is deleted, click start/run.
12)Type regedit
13)clickHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Explorer\Advanced\Folder\Hidden\SHOWALL.
14)Right Click checked value.
15)click modify.
16)Change Hexadecimal value to 1 and click ok.
17)Now open My Computer and click on Tools and click folder options.
18)Now choose view tab and in Hidden files and Folders make "Show hidden Files and Folders".
19)look in C:\ drive (here C:\ drive) for autorun.inf and an icon named thb creations.
20)If no you'r computer is rescued otherwise call a mechanic.


Updates

Also do these to remove virus completely.


1) Press alt+ctrl+del key and click process tab.
2) Check for avgs.exe and win.exe processes.
3) Select these processes and click on end process.
4) Search for avgs.exe and win.exe.
5) Delete these files.



thx.


Add this code

Share
|