How to Remove Ahsan and G.W.Bush virus

Razbaan used Ask the Experts™
how can remove Ahsan virus?
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Mohamed OsamaSenior IT Consultant

All solutions seem to direct to SDFix after the below solution

keep in mind all cleanup should be done in safe mode from a different user than the previously infected user, after cleanup of Ahsan , Combofix should be able to close this issue & remove the other one.

Good luck, as it seems like a nasty one.
Top Expert 2007

Also called W32/Autorun.worm.ct

If problem persists,
Flash_Disinfector might also help.
but Combofix is a good idea, you also need to attach the log to make sure there are no other bad files left.

IF you had run rootkit scanners e.g IceSword etc on this session, you must reboot first before running Combofix.

Please download ComboFix by sUBs:

You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log and attach it in your next reply by pasting it in the "Code Snippet" or "Attach File" window.
Re-enable all the programs that were disabled during the running of ComboFix..

Do not mouse-click combofix's window while it is running. That may cause it to stall.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial