Services    Trojan info    Chat    Downloads      About Us      Contact  Us     Help Forum     Support Us    Search

Ftpsmtp 2.1b
This is basically subseven that has been renamed to something else

Removal
: The instructions here are for windows 95/98 and ME, I have written it this way because it is nearly impossible to boot into dos mode in windows ME. If you do not have a program that can kill running processes and are not using Windows ME then you can delete these files by booting into MS DOS and using the del command

Open up windows note pad and copy and past the below portions of text onto a blank pages (leave out the border lines i.e.------)
------------------------------------------------------------------------------------
REGEDIT4
[HKEY_CLASSES_ROOT\exefile\shell\open\command]@="\"%1\" %*"

[HKEY_LOCAL_MACHINE\Software\CLASSES\exefile\shell\open\command]@="\"%1\" %*"
------------------------------------------------------------------------------------
Save that file to your desktop as undo.reg   (when you save it don't save it as a text file save it as a .reg file)
Using a program that can kill running processes, kill and delete
c:\WINDOWS\run.exe
c:\WINDOWS\win16.com

Double click on the reg file you created and when it asks if you would like this info entered into your registry choose yes.

Now open up win.ini (go to start, run and type win.ini) and look for the following line:
run=win16.com, delete the win16.com part so that it only reads run=
Open up system.ini the same way and look for line that says
shell=explorer.exe win16.com, remove the win16.com part so it now reads shell=explorer.exe