Home » Virus Protection » Removal of Trojan » 

Removal instructions:

1. Install VM ActiveX component security patch or install latest version of Internet explorer 6.0

2. Delete the file C:\%WINDOWS%\S.HTM and C:\%WINDOWS%\HOSTS in Windows folder. [example: C:\WINDOWS\S.HTM]

3. Open the Outlook express->Tools->Options->Signatures tab. Remove S.HTM and uncheck the Add signature option.

4. You have to set the Internet security settings to Medium. You can do this by following Start->Settings->Control Panel->Internet Options->Security->Medium.

5. You need to fix the registry to reset the Internet explorer home page and search page.

> HKEY_CURRENT_USER
> then Software
> then Policies
> then Microsoft
> then Internet Explorer
> then Control Panel
>
> You will see: [ab] default [ab] AdvancedTab [ab] SecurityTab
>
> Delete [ab] AdvancedTab and [ab] SecurityTab
> This one didn't change on mine... but you should check:
>
> click on the + by each of these:
>
> HKEY_LOCAL_MACHINE
> then SOFTWARE
> then Microsoft
> then Windows
> then CurrentVersion
> then URL
> then DefaultPrefix
>
> now on the right side is a file [ab] default... right click on that and
> choose "modify"
>
> you should just see http:// and nothing else


Mail this pageMail this page