|
Drat
This is a nasty trojan . Drat has the ability to attack every exe file on your computer so when you run a file that has .exe as its extension name it will run the trojan . Deleting the trojan will really screw your pc because it will disable all your executable files . It can be removed but shouldn't be tried by beginners
Removal :
Restart your computer in MS-DOS mode. All of the steps below will be carried out in DOS.
You should be at a C:\windows\> prompt.
Any text in blue means you should type it on the DOS line.
Make sure you are at the C:\Windows\> prompt now.
rename shell32.exe shell32.___
This is the trojan, and renaming it keeps windows from loading it again.
From this point on, windows cannot run .exe and .bat files.
cd ..
Simply to move back one dir into C:\
regedit /e file.reg hkey_classes_root\exefile\shell\open\command
This will export the registry key that needs to be edited, and place it in a file.
edit file.reg
Opens the file in your text editor.
In this file, look for the line that reads:
@="SHELL32 \"%1\" %*"
And edit so it reads:
@="\"%1\" %*"
Save the file and exit edit.
regedit file.reg
This imports the edit you just made Back into the registry.
exit
You will now be taken back to windows.
Verify that you can indeed run an .exe program, without windows asking to find shell32.
If windows asks to find shell32, you will need to attempt these directions again.
Now you will need to delete shell32.___
|
|
