Procedure to remove Khatra.exe virus manually
1)Go to task manager and select regsvr.exe(if found), gHost.exe , khatra.exe , Xplorer.exe rt click and select end process tree.
press WIN+r or start>RUN
2)type cmd and hit enter
3)GO to the the drive where your OS is installed
4)In the command prompt make sure you get the command line as c:\ or d:\ (this can be achieved by the command "cd .." without quotes)
5)Type attrib -s -h -r khatra.exe
Repeat the same process for the location c:\windows\system32
6)type del khatra.exe
7)Follow the same process for gHost.exe & Xplorer.exe as they are also part of the virus.
To make sure that the virus is out of you pc , check your registry
1)win+R type regedit
2)ctrl+F type in search one by 1 the names of the 3 processes i.e khatra,gHost,Xplorer
3)search the entire registry n go-on deleting the values you find.
Is your registry blocked by viruses?
Do you get the message "registry editing has been disabled by your admin"? then follow the instructions below
Enable Registry Editor
1:Extract the file
2:Right click on the file unhook.inf and select install
Download Registry Editor below
http://sites.google.com/site/a.....edirects=0
Afterward download Malwarebytes Anti-Malware install then update then run program. You may need to reinstall your Anti-Virus program and do a update the run and remove any found virus.
1)Go to task manager and select regsvr.exe(if found), gHost.exe , khatra.exe , Xplorer.exe rt click and select end process tree.
press WIN+r or start>RUN
2)type cmd and hit enter
3)GO to the the drive where your OS is installed
4)In the command prompt make sure you get the command line as c:\ or d:\ (this can be achieved by the command "cd .." without quotes)
5)Type attrib -s -h -r khatra.exe
Repeat the same process for the location c:\windows\system32
6)type del khatra.exe
7)Follow the same process for gHost.exe & Xplorer.exe as they are also part of the virus.
To make sure that the virus is out of you pc , check your registry
1)win+R type regedit
2)ctrl+F type in search one by 1 the names of the 3 processes i.e khatra,gHost,Xplorer
3)search the entire registry n go-on deleting the values you find.
Is your registry blocked by viruses?
Do you get the message "registry editing has been disabled by your admin"? then follow the instructions below
Enable Registry Editor
1:Extract the file
2:Right click on the file unhook.inf and select install
Download Registry Editor below
http://sites.google.com/site/a.....edirects=0
Afterward download Malwarebytes Anti-Malware install then update then run program. You may need to reinstall your Anti-Virus program and do a update the run and remove any found virus.
No comments:
Post a Comment