How do i remove this virus "Ahsan Mana Khan Bhutta" from my system. whenever i open my internet it always attach it sel to the heading. e.g if I open nairaland.com, it will apear as Nairaland-Ahsan Manan Khan Bhutta*Internet Explorer*

Want to knw how i can remove it b4 it destroys my sustem as i have scanned my system with Norton but it didnt see any virus.

Thanks

The label you see on your internet explorer really does no harm to your system. Its only a customization/personalization option that must have been set by a malware (probably still lurking on your system).

To clear all customizations (Branding Text/logo) from Internet Explorer, copy the code below into a text editor (notepad) and save it as "clearBranding.vbs", with the "Save As Type" option set to "All Files". Doing this creates a VB script file.

Dim myShell

Set myShell = CreateObject("WScript.Shell"
myShell.Run("rundll32.exe iedkcs32.dll,Clear"

MsgBox "All IE Custom Branding Cleared!", 4096,"Finished"

Now, locate the file you just saved (clearBranding.vbs) on your computer and click it. When prompted for execution permission, just click "Open" and continue and the branding messages will be cleared once you restart Internet Explorer.

Cheers!!

N.B: If the branding messages shows up after you carry out the process above, then the malware/virus is still on your system. I'D suggest a scan with a good AV program.

@ Maleeq

Thanks. I will try it

Most times, some very powerful viruses, trojans and the likes, are hard at scanning out of your system, and even when you slave your harddisk to another PC, and scan it out, the damage they have done cannot be repaired, even after using the repair tool in ur OS disk, so its simple,, REFORMAT!

these are steps on how to remove this wicked virus on you computer, try it,remove Ahsan's virus :

1. start windows in safe mode with command prompt(user:admin, preferably a user other than having attacked)

2. use RRT Tool to enable run " if disabled".

3. Enable regediting if disabled with following reg key.


REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f



4. Open regedit, search and delete all entries with name "Ahsan" , site 110mb.com and Bush.

5. If your folder option is disabled enable it with following reg key "


HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Policies\Explorer

Check if a DWORD value named NoFolderOptions exists in the pane on the right hand side of the screen
Delete it



6. If you are still unable to view the hidden files, which is disabled by virus, enable it with following proc and key.


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced. Find the value "Hidden" . Rightclick it and modify it to 1. If Key value hidden is not present create it




7. Check the following registery values and set the values given below in each registery key.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]
"CheckedValue"=dword:02
"ValueName"="Hidden"
"DefaultValue"=dword: 02

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword: 01
"ValueName"="Hidden"
"DefaultValue"=dword:02


8. Now enable "show all hidden files / Hidden system files and folders", and search for following files and delete them all.

system.exe
csrss.exe
Home video.avi.exe
autorun


Note: these files will be in parent drives (D:, C and in windows folder.

9.Now you are done !

goto start>run , type regedit , from the menubar goto edit>find , and type Ahsan , after getting the result click on Ahsan and right click to modify its name. Cut AHSAN MANAN KHAN BHUTTA *INTERNET EXPLORER* and type INTERNET EXPLORER, and its done, ITS 100% tested and i resolved the same problem by this method.

my guy if you eventally succeded in getting rid of the virus call 08068944517 to get a registered anti virus.(you will have to make your choice between avast and AVG.)

if you are always making use of the free anti virus you may never know that the producers are not stupid.they are not even crazy.
infact those white guys are th most soffisticated gurus in the world. Some of the free anti viruses are actually programmed to permit some viruses so thst eventually you will come back to them and get the paid one!Thats business.
But as helpless as a nigerian is on the internet many people dont have the means to purchase on the internet.
Including you maybe. So if you want to get a paypal account to be able to make your own purchases call 08068944517.N3000
if you want the anti virus key which will enable all your anti virus keys call 08068944517 cost N1200

Chookym:

How do i remove this virus "Ahsan Mana Khan Bhutta" from my system. whenever i open my internet it always attach it sel to the heading. e.g if I open nairaland.com, it will apear as Nairaland-Ahsan Manan Khan Bhutta*Internet Explorer*

Want to knw how i can remove it b4 it destroys my sustem as i have scanned my system with Norton but it didnt see any virus.

Thanks

Format your system end of the problem

I actually ended up formating my system. This was a hard desition to make. thanks for all the contributions. that virus most be a very strong one.

Final Solution
i developed a tool for removing this virus
Use this tool to completely remove the virus and Fix all problems caused by this virus in less that a second ,
its amazing ,


use this link

download Ahsan virus remover tool |4shared

or

download Ahsan virus remover tool |Rapidshare

Hope you like it

khalat:

Final Solution
i developed a tool for removing this virus
Use this tool to completely remove the virus and Fix all problems caused by this virus in less that a second ,
its amazing ,


use this link

download Ahsan virus remover tool |4shared

or

download Ahsan virus remover tool |Rapidshare

Hope you like it

My system was also infected with this virus. It's most damaging effects seem limited to XP as it doesn't change obvious file names on Vista.
I also went online to find the fix and I repeatedly ran into the above poster named khalat. Check any forum connected to this "Ahsan" virus and he's everywhere advising others to download his "Fix". I strongly believe that this guy is the virus creator and stand to be corrected. I'm waiting for anyone who has successfully tried and used his fix to bear witness so I can eat my words, or else I suggest the moderators should look into this chap.

Enough is Enough, Virus developers must be crazy.
Don't FORMAT that system!
Get "Ahsan Mana Khan Bhutta Virus removed today!
- We ave the SOLUTIONS.

Nja4Life: 01-8710126, [/color][color=#990000][/color][color=#990000]talk2meyemi@yahoo.com

format the entirely system, end of story.

rotflmao at the name of the virus
@ op eyaa. i hope u do get it removed soon.

Enough is enough. All Virus developers! 

Poor sales for you guys in Nigeria!

Our revolution is to reduce Virus infections leading to System Format!

Eliminate  " Odinga Virus"  "ahsan Mana Khan Bhutta" etc.

Request for the codes and parameters today.

Nja4Life: 01-8710126, talk2meyemi@yahoo.com 

hmmmmmmmmmmmm

guys selling antivirus dey did not develop,

Hey guys
Before U come out here to complain of any virus
Be sure U have done the followings
1. Download the latest antivirus (be it Avira, AVG or Avast)
2. Install it and perfom update ( be sure Ur antivirus is it). Any antivirus that is not updated is as good as having none installed.
3. Perfom a full system scan. After then, restart ur PC.
4. If virus persist, install Malware Byte and use it scan ur system. MalwareByte is an antispyware solution.

Out of all these antiviruses, I recommend Avira as an antivurus. Norton is totally out of the race.
And make it an habit to always update ur antivirus daily.

If after all these, ur virus still persist, then U can come for professional advice.
U can download and use Avira 9 classic for free without much limitation.

As for me, I use Avira  9 Premium + Malaware Byte Antispyware

hello oyinda, this deji2009. how were you ?

I have been carrying this virus on my hp pav DV 6000 for the past 3weeks, the new development now is, the names icons on my desktop have changed to past american presidents. But the virus is in no way affecting the perfomance of my system for now.

how bout you look for a book to prevent viruses from entering your system in the first place?

Happy new year 
I guess u guys had a wonderful time.

For this Year, don't be bugged[/color][color=#990000][/color] with VIRus issues.

Nija, stay protected. No more merger payment to AntiVirus Developers

For any ViRus related issues, don't be panic, be HAppY. [color=#990000]We have helped others

We will be glad to help you OUt. -

Nja4life, talk2meyemi@yahoo.com, 01-8710126

if the virus defies antivirus, u will have to format the system before the virus finally crashes the hard drive