Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I ran a scan using Norton, and I found several files with "Subseven.22.plugin" as the name. I looked up past help on this virus, but nothing seems to remove it from my system, can anyone direct me to some help?
Thanks.

To remove this Trojan, delete any files detected as Backdoor.Subseven.22.a or Subseven.22.plugin, and delete the key that the Trojan added to the registry .
NOTE: Please make sure that the Trojan that was detected by NAV is Backdoor.Subseven.22.a. This should not be confused with the Backdoor.SubsevenTrojan. If you cannot open program files, the computer is probably infected with Backdoor.Subseven ,not Backdoor.Subseven.22.a.
To delete the files:
Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and then run a full system scan, making sure that NAV is set to scan all files.
Delete any files detected as Backdoor.Subseven.22.a and Subseven.22.plugin.
To edit the registry:CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.
Click Start, and then click Run. The Run dialog box appears.
Type regedit and then click OK. The Registry Editor opens.
Navigate to and select the following subkey:HKEY_LOCAL_MACHINE\Software\Microsoft\ENC
CAUTION: Make sure that you navigate all the way to the \Enc subkey.
Press Delete and then click Yes to confirm.
Close the Registry editor.

All of the infected files were coming in the same directory, but I mangaged to clean it out this time. I think that did the trick.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |