Results 1 to 4 of 4

Thread: sub7 removal

  1. #1
    haraam77
    Guest

    Cool sub7 removal

    I've read much about this sub7.....now I'm taking noted on the removal. I found this one site that has a download and is supposed to automatically remove it. I know there are many experts here and I was wondering if someone would check out this site and tell me what you think. Also, if this is not a reliable way to remove it.....what is? Thank you....

    www.europe.f-secure.com/v-descs/subseven.shtml

  2. #2
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    I told you in your last thread how to completely remove it from your harddrive. Guess you didnt pay attention or you were more concerned with how to send it out and infect some little kids. But I am not going to tell you that.If you dont know then i guess your going to have to find another place to get that info. Now that you have been infected yourself you want it out. SO LISTEN UP!

    When the server is executed, the name of the file is changed from what ever it was when you downloaded it.To a random name.(Usually) Example: ksjdhfiuh.exe

    The default Server settings tell the server to run in the Win.ini file, and tell to start up @ Windows startup. find it like this.

    START>FIND>win.ini>FIND NOW
    open the win.ini file and you should see this, on the first few lines.

    [windows]
    load=
    run=ksjdhfiuh.exe
    NullPort=None
    device=HP LaserJet 2200 Series PCL 6,HPBF3220,\\EVNET6\HPLaserJ2200

    You must delete this file from the win.ini file and restart your computer.Just hilight it and select cut. At this point , as windows starts back up, do this.

    START>FIND>ksjdhfiuh.exe>FIND NOW

    It should find the file. Go-ahead and try to delete it. If that doesnt work, if you cant delete it,
    then the program is still running. In this case you should run MSCONFIG.

    START>RUN>msconfig
    (this is your computers start up utility) Look for the ksjdhfiuh.exe make sure its not set to run at startup.ANYWHERE! Then restart. I would advise checking registry aswell, but I'm not real sure YOU should be poking around there.
    Haraam, this is going to be my last reply to your sub7 questions. I have twice now replied with usfull info, and your asking the same questions. Copy this to a txt file, if you can't remember.
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2

  3. #3
    Senior Member
    Join Date
    Jan 2002
    Posts
    218
    also, there are these things i heard about called antivirus software. some damn new fangled technology those crazy young whipper snappers created. you might want to give that a try. most updated virus sig files can find the piece of shite sub7.

  4. #4
    haraam77
    Guest

    Red face whatever

    Ok then, "Dr Toker" , the information you gave me was something I already knew. I ask questions to go more indepth not to hear things repeated by some egotistical fool such as yourself. Granted, ur reply may have been helpful in the past, but this time I was asking about "software" to help remove it. I have found at least a dozen good sites for sub7 removal...yet only one deals with some sort of download, which seems a bit odd. Oh but anyway, thanks for the personal insults.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •