Computing.Net > Forums > Windows XP > Subseven.22.plugin Removal Help

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Subseven.22.plugin Removal Help

Reply to Message Icon

Name: nick920
Date: March 18, 2004 at 16:32:16 Pacific
OS: Win XP
CPU/Ram: AMD 256K
Comment:

I ran a scan using Norton, and I found several files with "Subseven.22.plugin" as the name. I looked up past help on this virus, but nothing seems to remove it from my system, can anyone direct me to some help?

Thanks.



Sponsored Link
Ads by Google

Response Number 1
Name: RobbieDickon
Date: March 18, 2004 at 16:40:52 Pacific
Reply:

To remove this Trojan, delete any files detected as Backdoor.Subseven.22.a or Subseven.22.plugin, and delete the key that the Trojan added to the registry .

NOTE: Please make sure that the Trojan that was detected by NAV is Backdoor.Subseven.22.a. This should not be confused with the Backdoor.SubsevenTrojan. If you cannot open program files, the computer is probably infected with Backdoor.Subseven ,not Backdoor.Subseven.22.a.

To delete the files:

Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and then run a full system scan, making sure that NAV is set to scan all files.
Delete any files detected as Backdoor.Subseven.22.a and Subseven.22.plugin.


To edit the registry:

CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.

Click Start, and then click Run. The Run dialog box appears.
Type regedit and then click OK. The Registry Editor opens.
Navigate to and select the following subkey:

HKEY_LOCAL_MACHINE\Software\Microsoft\ENC

CAUTION: Make sure that you navigate all the way to the \Enc subkey.

Press Delete and then click Yes to confirm.
Close the Registry editor.




0

Response Number 2
Name: nick920
Date: March 18, 2004 at 16:42:22 Pacific
Reply:

I cannot delete the files that NAV picks up. It says that they are being used by the system.


0

Response Number 3
Name: RobbieDickon
Date: March 18, 2004 at 17:13:31 Pacific
Reply:

Okay then reboot

hit f8 and choose safe mode

go ahead and do it from there



0

Response Number 4
Name: nick920
Date: March 18, 2004 at 17:25:28 Pacific
Reply:

All of the infected files were coming in the same directory, but I mangaged to clean it out this time. I think that did the trick.


0

Response Number 5
Name: RobbieDickon
Date: March 18, 2004 at 17:36:50 Pacific
Reply:

Sweet......



0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: Subseven.22.plugin Removal Help

Subseven.22.plugin virus www.computing.net/answers/windows-xp/subseven22plugin-virus/52728.html

CWS.Searchx removal help www.computing.net/answers/windows-xp/cwssearchx-removal-help/111090.html

remove Help and Support from menu www.computing.net/answers/windows-xp/remove-help-and-support-from-menu/144093.html