SoFunction
Updated on 2025-04-14

104 manual methods for removing *s


1. Glacier v1.1 v2.2
Glacier is the best * horse in China
Clear * v1.1
Open RegeditHot Network
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Find the following two paths and delete
" C:\windows\system\ "
" C:\windows\system\ "
Close Regedit
Restart to MSDOS mode
Delete C:\windows\system\ and C:\windows\system\ *s
Restart. OK
Clear * v2.2Hot Network
Server programs and path users can define them at will, and the key names written to the registry can also be defined by themselves.
Therefore, it cannot be clearly stated.
You can view the registry and delete suspicious file paths.
Restart to MSDOS mode
Delete the * program corresponding to the registry
Restart Windows. OK

2. Acid Battery v1.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the Explorer on the right ="C:\WINDOWS\"
Close Regedit
Restart to MSDOS mode
Delete c:\windows\* program
Note: Do not delete the correct program, there is only the difference between i and L.
Restart. OK
3. Acid Shiver v1.0 + 1.0Mod + lmacid
Steps to clear *s:

Restart to MSDOS mode
Delete C:\windows\
Then return to Windows
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the Explorer on the right = "C:\WINDOWS\"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Delete the Explorer on the right = "C:\WINDOWS\"
Close Regedit
Restart. OK

Restart to MSDOS mode
Delete C:\windows\ and then return to Windows system
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete Wintour on the right = "C:\WINDOWS\"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Delete Wintour on the right = "C:\WINDOWS\"
Close Regedit
Restart. OK
4. Ambush
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the zka on the right = ""
Close Regedit
Restart to MSDOS mode
Delete C:\Windows\
Restart. OK
5. AOL *
Steps to clear *s:

Start to MSDOS mode
Delete C:\ (Cancel the file's implicit properties before deletion)
Note: Do not delete real files.
Delete C:\americ~1.0\buddyl~ (cancel the file's implicit attributes before deletion)
Delete C:\windows\system\norton~1\regist~ (cancel the file's implicit attributes before deletion)

Open the file
Under [WINDOWS] "run=" and "load=" both load the paths of the * horse program, they must be cleared:
run=
load=
save

Also need to correct the registry Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete WinProfile on the right = c:\
Close Regedit and restart Windows. OK
6. Asylum v0.1, 0.1.1, 0.1.2, 0.1.3 + Mini 1.0, 1.1
Steps to clear *s:

Note: The default file name of the * program is, but the program can change the file name at will.
We can clear the * based on the * modified and two files.
Open the file
There is a "shell=filename" under [BOOT]. The correct file name is
If it is not "", then that file is a * program, find it out and delete it.
Save Exit
Open the file
There is a run= under [WINDOWS]
If you see = there is a path file name after it, you must delete it.
The correct thing should be run=There is nothing afterwards.
=The file name of the path afterward is a *. Find it out and delete it.
Save and exit.
OK
7. AttackFTP
Steps to clear *s:

Open the file
Under [WINDOWS] there is load=
Delete, correctly load=
Save and exit.

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the Reminder="/s" on the right
Close Regedit and restart to MSDOS system
Delete C:\windows\system\
OK
8. Back Construction 1.0 - 2.5
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the "C:\WINDOWS\" on the right
Close Regedit and restart to MSDOS system
Delete C:\WINDOWS\
OK
9. BackDoor v2.00 - v2.03
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the 'c:\windows\ /o=yes' on the right
Close Regedit and restart to MSDOS system
Delete c:\windows\
Note: Do not delete real notebook programs
OK
10. BF Evolution v5.3.12
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the right (Default)=" "
Close Regedit and restart the computer again.
Set C:\windows\system\.exe (space exe file)
OK
11. BioNet v0.84 - 0.92 + 2.21

Version 0.8X is running on Win95/98
Version 0.9X or above has two software running on Win95/98 and WinNT
The client-server protocol is the same, so NT customers can blacken 95/98 infected machines, which is exactly the same as Win95/98 customers can blacken NT infected systems.
Steps to clear *s:
First prepare a 98 startup disk, start it with it, enter the c:\windows directory, and use attrib libupd~ -h
The command makes the * visible and then deletes it.
After extracting the floppy disk, restart, enter 98, and find it in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
The subkey of WinLibUpdate = "c:\windows\ -hide"
Delete this subkey.


12. Bla v1.0 - 5.03
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete Systemdoor on the right = "C:\WINDOWS\System\"
Close Regedit and restart the computer.
Find C:\WINDOWS\System\ and
C:\WINDOWS\system\
Note: Do not delete C:\WINDOWS\correct file.
And delete two files.
OK
13. BladeRunner
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
System-Tray = "c:\something\" can be found
The path to the right may be anything, you don't need to delete it at this time, because the * will be automatically added immediately. What you need is to record the *'s name and directory, and then return to MS-DOS, find the * file and delete it.
Restart the computer, and repeat the first step, locate the * file in the registry and delete the key.

14. Bobo v1.0 - 2.0
Clear * v1.0
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the DirrectLibrarySupport on the right ="C:\WINDOWS\SYSTEM\"
Close Regedit and restart the computer.
DEL C:\Windows\System\
OK

Clear * v2.0
Open Regedit
Click the directory to:
HKEY_USER/.Default/Software/Mirabilis/ICQ/Agent/Apps/ICQ Accel/
ICQ Accel is a "illusion" primary key. Select the ICQ Accel primary key and delete it.
Restart the computer. OK
15. BrainSpy vBeta
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
On the right there is ??? = "C:\WINDOWS\system\BRAINSPY.exe"
???The label selection is changed at will.
Close Regedit and restart the computer
Find and delete C:\WINDOWS\system\BRAINSPY.exe
OK
16. Cain and Abel v1.50 - 1.51
This is a password *

Enter MS-DOS mode
Find C:\windows\
And delete it. OK
17. Canasson
Steps to clear *s:

Open the file
Find c:\, delete all primary keys
save
Restart the computer
Delete c:\* file
OK
18. Chupachbra
Steps to clear *s:

Open the file
There are two lines below [Windows]
run=
load=
delete
run=
load=
Save, then open the Registration
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\Run
Delete the 'System Protect' on the right =
Restart Windows
Find C:\windows\system\ and delete it.
OK
19. Coma v1.09
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\Run
Delete the 'RunTime' on the right = C:\windows\
Restart Windows
Find C:\windows\ and delete it.
OK
20. Control
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\Run
Delete the Load MSchv Drv on the right = C:\windows\system\
Save Regedit and restart Windows
Find C:\windows\system\ and delete it.
OK
21. Dark Shadow
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\RunServices
Delete winfunctions="" on the right
Save Regedit and restart Windows
Find C:\windows\system\ and delete it.
OK
22. DeepThroat v1.0 - 3.1 + Mod (Foreplay)
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\Run
Version 1.0
Delete the project on the right ‘System32’=c:\windows\
Version 2.0-3.1
Delete the item on the right ‘SystemTray’ = ‘’
Save Regedit and restart Windows
Version 1.0 delete c:\windows\
Version 2.0-3.1
Delete c:\windows\system\
OK
23. Delta Source v0.5 - 0.7
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\Run
Delete the project on the right: DS admin tool = C:\
Save Regedit and restart Windows
Find C:\ and delete it.
OK
24. Der Spaeher v3
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\Run
Delete the project on the right: explore = "c:\windows\system\"
Save Regedit and restart Windows
Delete the c:\windows\system\* file.
OK
25. Doly v1.1 - v1.7 (SE)
Clear * V1.1-V1.5 version:

These * versions of * programs are placed in three places, adding two registered items, and adding them to the project.
First, enter the MS-DOS mode and delete three * programs, but V1.35 version has one more * file.
Delete all the following:
C:\WINDOWS\SYSTEM\
C:\WINDOWS\Start Menu\Programs\Startup\
c:\Program Files\
c:\Program Files\
Restart Windows.

Next, open the file
Find the following load=c:\windows\system\project, delete the path, and change it to load=
Save the file.

Finally, modify the registry Regedit
Find the following two items and delete them
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Ms tesk = "C:\Program Files\"
and
HKEY_USER\.Default\Software\Microsoft\Windows\CurrentVersion\Run
Ms tesk = "C:\Program Files\"
Find HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ss
This group is the server for selecting and setting all parameters of the * horse, and deletes all items of this ss group.
Close Save Regedit.
Also open C:\file and delete
@echo off copy c:\ c:\windows\StartMenu\Startup Items\
del c:\
Close Save.
OK

Clear * V1.6 version:
When this * is running, it cannot be turned off through normal operation of 98, and can only be RESET key. The steps to completely clear are as follows:
1. Open the control panel - add and delete programs - delete memory manager 3.0. This is the * program, but it will not delete the * EXE file.
2. After starting with 98 or DOS boot disk (using RESET key), go to C:\ and edit AUTOEXEC. BAT, delete the following content:
@echo off copy c:\ c:\windows\startm~1\programs\startup\
del c:\
Save AUTOEXEC. After the BAT file and return to DOS, delete the * file in the C:\root directory:
del
del windows\startm~1\programs\startup\
del progra~1\
3. Extract the floppy disk and restart it. After entering 98, delete the memory manager directory under the c:\program files\ directory.

Clear * V1.7 version:
First, open C:\file and delete
@echo off copy c:\ c:\windows\startm~1\programs\startup\
del c:\
Close Save

Then open the registry Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\MicroSoft\Windows\CurrentVersion\Run
Find the c:\windows\system\path and delete the project
Click the directory to:
HKEY_USER/.Default/Software/Marabilis/ICQ/Agent/Apps/
Find the "C:\windows\system\" path and delete the project
Close Save Regedit. Restart Windows.

Finally, delete the following * program:
c:\
c:\
c:\windows\start menu\programs\startup\
c:\program files\
c:\windows\system\
c:\windows\system\
Note: kernel32 is A
OK

26. Donald Dick v1.52 - 1.55
Clear * V1.52-1.53 ​​version:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\VxD\VMLDIR\
Delete the item on the right: StaticVxD = ""
Close Save Regedit and restart Windows
Delete C:\WINDOWS\System\
OK

Clear * V1.54-1.55 version:

These two versions are different from the above version just have the default file names, and the others are the same.
Just change it to.
27. Drat v1.0 - 3.0b
Steps to clear *s:

Open Regedit
Click the directory to: hkey_classes_root\exefile\shell\open\command
Find @=SHELL32 \"%1\" %* Change it to @="%1" %*
Close Save Regedit and restart Windows.
Find c:\windows\shell32. * File and delete it.
OK
28. Eclipse 2000
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: bybt = "c:\windows\system\"
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ RunServices\
Delete the project on the right: cksys = "c:\windows\system\ could be anything.exe"
Close Save Regedit and restart Windows
Find the * file and delete it

29. Eclypse v1.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Rnaapp ="C:\WINDOWS\SYSTEM\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\SYSTEM\
Note: Do not delete
OK
30. Executer v1
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Find "C:\windows\" in the project on the right and delete it.
Close Save Regedit and restart Windows
Delete the * program file accordingly.
OK
31. FakeFTP beta
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: Rundll32 = /h
Close Save Regedit and restart Windows
Find the three files under the C:\windows\ folder and delete them
- -
OK
32. Forced Entry
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Microsoft Registration32 = "C:\somepath\"
Close Save Regedit and restart Windows
Since the path is easy to change, just find it and delete it.
33. GateCrasher v1.0 - 1.2
Clear * v1.0:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Explore='c:\windows\'
Close Save Regedit and restart Windows
Then, delete the corresponding * program.
OK

Clear * v1.1:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: Inet=''
Close Save Regedit and restart Windows
Then, find the corresponding * program and delete it.
OK

Clear * v1.2:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Command = ‘c:\windows\’

Close Save Regedit and restart Windows
Then, find the corresponding * program and delete it.
OK
34. Girlfriend v1.3x (Including Patch 1 and 2)
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: ="C:\windows\"
Regedit also saves server data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\General
Delete General Project Title
Close Save Regedit and restart Windows
Then, find the corresponding * program and delete it.
OK
35. Golden Retreiver v1.1b
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Task Manager="c:\"
Close Save Regedit and restart Windows
Then, find the corresponding * program and delete it.
OK
36. Hack`a`Tack 1.0 - 2000
Clear * v1.0-1.2:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Explorer32 ="C:\windows\"
Close Save Regedit and restart Windows
Then, find the corresponding * program and delete it.
OK

Clear * v2000:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Configuration Wizard = c:\windows\
Close Save Regedit and restart Windows
Delete c:\windows\
OK
37. Hack99 KeyLogger
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: HKeyLog = "C:\Windows\System\"
Close Save Regedit and restart Windows
Delete C:\Windows\System\
OK
38. HostControl v1.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: RegClean = "c:\windows\inf\"
Close Save Regedit and restart Windows
Delete c:\windows\inf\
OK
39. Hvl Rat v5.30
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Explorer = "C:\WINDOWS\system\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\system\
OK
40. ik97 v1.2
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: ik = ‘c:\progra~1\ik\’
Close Save Regedit and restart Windows
Delete C:\Program Files\ik\
OK
41. InCommand v1.0 - 1.5
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Find the item on the right: AdvancedSettings = *
Note: * means the storage path and file name of the *. Write it down and delete this key.
Close Save Regedit and restart Windows
Delete the * program according to the * path and file name I just wrote down.
42. IndocTrination v0.1 - v0.11
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce\
Each title includes the Msgsrv16 ="Msgsrv16" project
Delete each item
Close Save Regedit and restart Windows
Delete C:\windows\system\
OK
43. inet v2.0 - 2.0n
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Explorer = "C:\WINDOWS\system\"
Close Save Regedit and restart Windows
Delete "C:\WINDOWS\system\"
Delete "C:\WINDOWS\system\"
OK
44. Infector v1.0 - 1.42
Steps to clear *s:

Open the file
Find shell= c:\path\to\project
Change to: shell=
Save the closed file and restart Windows
Delete c:\path\to\
OK
45. iniKiller v1.2 - 3.2 Pro
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Explore="C:\windows\ "
Close Save Regedit and restart Windows
Delete C:\windows\
OK
46. Intruder
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: PPModule1 = ‘‘
Close Save Regedit and restart Windows
Delete C:\windows\system\
Delete C:\windows\system\
OK
47. IRC3
Steps to clear *s:

Open the file
Find the load=closew project and change it to: load=
Save Close, restart Windows
Find these two files ‘' , ‘'
and delete them.
OK
48. Kaos v1.1 - 1.3
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Sys="c:\windows\"
Close Save Regedit and restart Windows
Delete c:\windows\
OK
49. Khe Sanh v2.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: TBoot0001="c:\windows\system\"
Close Save Regedit and restart Windows
Delete c:\windows\system\
OK
50. Kuang logger
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: ="C:\WINDOWS\SYSTEM\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\SYSTEM\
OK
51. Kuang Original - 0.34
Clear * v Original version:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Temp$ = "c:\windows\system\temp$"
Clear * v version 0.20-0.21:
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: = "c:\windows\system\"
Clear * v version 0.30-0.34:
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: K2PS_full.task = "c:\windows\system\k2ps_full.exe"

Close Save Regedit and restart Windows
Find the corresponding * program and delete it.
OK
52. Logger
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right:??? = "C:\windows\system\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\SYSTEM\
OK
53. Magic Horse
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SpoolerService="c:\windows\"
Close Save Regedit and restart Windows
Delete c:\windows\
OK
54. Malicious
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\
Delete the five items on the right: DisableRegistryTools NoRun NoFind NoDesktop NoClose
Close Save Regedit and restart Windows
OK
55. Masters Paradise
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SYSEDIT = c:\windows\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Delete the project on the right: Explorer = c:\...\
Close Save Regedit and restart Windows
Find the *s and delete them.
Note: c:\windows\system\The file below is not 19KB. If it is not specified, it is infected by the *, delete it.
OK
56. Matrix v1.0 - 2.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right:??? ="C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK

57. MBK
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Find and delete the item on the right: Explorer =" "Following it is ""
Close Save Regedit and restart Windows
Find and delete
OK
58. Millenium v1.0 - 2.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Millenium = "C:\windows\system\"
Close Save Regedit and restart Windows
Delete C:\windows\system\
OK
59. Mine
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Windows = ‘c:\’
Close Save Regedit and restart Windows
Delete c:\
Open the file
Find run=c:\windows\
Change to: run=
Close Save and restart Windows
del c:\
del c:\windows\uninst~
del c:\windows\system\
OK
60. MoSucker
Steps to clear *s:

Open the file
Find shell=
Change to: shell=
Close Save and restart Windows
Delete C:\windows\
OK
61. Naebi v2.12 - 2.40
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ICQ
v2.12 delete the project on the right: path= "C:\windows\"
v2.15 delete the project on the right: path= "C:\windows\"
v2.19 delete the project on the right: path= "C:\windows\"
Delete the project on the right: path= "C:\windows\" The file name may still be , , ns227, ns231, ns234
Close Save Regedit
v2.34 is the same as above, but it is adding startup
Open the file
Delete the path after run=
Close Save and restart Windows
Find the corresponding * program and delete it
OK
62. NetController v1.08
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: System = ‘c:\windows\’
Close Save Regedit and restart Windows
Delete c:\windows\
OK
63. NetRaider v0.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Rsrcnrs = ‘C:\windows\’
Close Save Regedit and restart Windows
Delete C:\windows\
OK
64. NetSphere v1.0 - 1.31337
Clear * v1.0-1.30:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: NSSX ="C:\WINDOWS\system\"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_USERS\****\Software\Microsoft\Windows\CurrentVersion\Run
Delete the item as above.
Close Save Regedit and restart Windows
Delete C:\WINDOWS\system\
OK
Clear * v1.30-1.31337:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: ExecPowerProfile ="C:\WINDOWS\system\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\system\
OK
65. NetSpy v1.0 - 2.0
Clear * v1.0:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SysProtect = "c:\windows\system\"
Close Save Regedit and restart Windows
Delete c:\windows\system\
OK
Clear * v2.0:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Netspy = ""
Close Save Regedit and restart Windows
Find and delete
OK
66. Net* v1.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: *** = "C:\WINDOWS\System\"
Close Save Regedit
Open the file
Find run=c:\windows\
Delete the path after run=
Close Save and restart Windows
Find the corresponding * program and delete it
OK
67. Nirvana / VisualKiller v1.94 - 1.95
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: TheDoor = ‘c:\windows\fonts\’
Close Save Regedit and restart Windows
Delete c:\windows\fonts\
OK
68. Phaze Zero v1.0b + 1.1
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: MsgServ = ""
Close Save Regedit and restart Windows
Find the corresponding * program and delete it
OK
69. Prayer v1.2 - 1.5
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SysFiles = "C:\WINDOWS\System\"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SysFiles = "C:\WINDOWS\System\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\System\
OK
70. PRIORITY (Beta)
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Services
\
Delete the project on the right: "PServer"= C:\Windows\System\
Close Save Regedit and restart Windows
Delete C:\Windows\System\
OK
71. Progenic Password Thief / Keylogger v1.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: pwt ="C:\WINDOWS\SYSTEM\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\SYSTEM\
OK
72. Progenic v1.0 -3.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Scandisk = "C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
73. Prosiak beta - 0.70 b5
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Delete the project on the right: Microsoft DLL Loader = ""
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
74. Retrieve v1.3
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Microsoft Access ="C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
75. Revenger v1.0 - 1.5
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: AppName ="C:\...\"
Close Save Regedit and restart Windows
Find the corresponding * program in c:\windows and delete it
OK

76. Ripper
Steps to clear *s:

Open the file
Turn shell=
Change to shell=
Close Save and restart Windows
Find the corresponding * program in c:\windows and delete it
OK
77. Satans Back Door v1.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Delete the project on the right: sysprot protection ="C:\windows\"
Close Save Regedit and restart Windows
Delete C:\windows\
OK
78. Schwindler v1.82
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: = "C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
79. Setup * (Sshare) +Mod Small Share
This * shared a hidden disk
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Network\LanMan\
Select the items with 'C$' on the right and delete them all
Close Save Regedit and restart Windows
OK
80. ShadowPhyre v2.12.38 -
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: WinZipp = "C:\WINDOWS\SYSTEM\ /nomsg"
Or WinZip = "C:\WINDOWS\SYSTEM\ /nomsg"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\ or C:\WINDOWS\
OK
81. Share All

Steps to clear *s:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Network\LanMan\
Here you will see all your hard drive symbols shared by *s and delete them one by one.

82. ShitHeap
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Delete the project on the right: recycle-bin = "c:\windows\system\"
Or recycle-bin = "c:\windows\"
Close Save Regedit and restart Windows
Delete c:\windows\system\or c:\windows\
OK
83. Snid v1 - 2
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: System-tray = ‘c:\windows\temp$’
Close Save Regedit and restart Windows
Delete c:\windows\temp$
OK
84. Softwarst
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: NetApp = C:\windows\system\
Close Save Regedit and restart Windows
Delete C:\windows\system\
OK
85. Spirit 2000 Beta - v1.2 (fixed)
Clear * v Beta version:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: internet = "c:\windows\"
Close Save Regedit
Open the file
Find run=c:\windows\
Change to: run=
Close Save and restart Windows
Delete c:\windows\ and c:\windows\
OK

Clear * v version 1.2:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SystemTray = "c:\windows\"
Close Save Regedit and restart Windows
Delete c:\windows\
OK

Clear * v 1.2 (fixed) version:
Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Server 1. = "c:\windows\server 1."
Close Save Regedit and restart Windows
Delete c:\windows\server 1.
OK
86. Stealth v2.0 - 2.16
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Winprotect System = "C:\WINDOWS\
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
87. SubSeven - Introduction
Clear * v1.0 - 1.1:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: SystemTrayIcon = "C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK

Clear * v1.3 - 1.4 - 1.5:

Open the file
Find run=nodll
Change to run=
Close Save and restart Windows
Delete c:\windows\
OK

Clear * v1.6:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: SystemTray = ""
Close Save Regedit and restart Windows
Delete C:\windows\
OK

Clear * v1.7:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
\
Find the project on the right: C:\windows\ and delete it
Close Save Regedit and restart Windows
Delete C:\windows\
OK

Clear * v1.8:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
\
Find the project on the right: c:\windows\. and delete it
Close Save Regedit.
Open the file
Find run=
Change to run=
Close Save.
Open the file
Find shell=
Change to shell=
Close Save and restart Windows
Delete C:\windows\
OK

Clear * v1.9 - 1.9b:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
\
Delete the item on the right: RegistryScan = ""
Close Save Regedit and restart Windows
Delete C:\windows\
OK

Clear * v2.0:

Open the file
Find shell=
Change to shell=
Close Save and restart Windows
Delete c:\windows\
OK


Clear * v2.1 - 2.1 Gold + SubStealth - 2.1.3 Mod + 2.1.3 MUIE + 2.1 Bonus:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
\
Delete the item on the right: WinLoader =
hkey_classes_root\exefile\shell\open\command
Change the item on the right to: @="\"%1\" %*"
Close Save Regedit.
Open the file
Find run= and
load=
Change to run=
load=
Close Save.
Open the file
Find shell=
Change to shell=
Close Save and restart Windows
Delete C:\windows\
C:\windows\system\
OK

Clear * v2.2b1:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and
Delete the project on the right: Loader = "c:\windows\system\***"
Note: The loader and file names are changed at will.
Close Save Regedit.
Open the file
Change to run=
Close Save.
Open the file
Change to shell=
Close Save and restart Windows
Delete the corresponding * program
OK

88. Telecommando 1.54
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: SystemApp=""
Close Save Regedit and restart Windows
Delete C:\windows\system\
OK
89. The Unexplained
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: InetB00st = "C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
90. Thing v1.00 - 1.60
Clear * v1.00-1.12:

Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: (Default) = "C:\some\path\here\"
Some are also in:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\SessionManager\Known16DLLs\
Delete the item on the right: = ""
Close Save Regedit and restart Windows
Delete C:\some\path\here\
OK

Clear * v version 1.20:
Enter MS_DOS mode:
del
del
Open the file
Find shell=
Change to: shell=
Close Save and restart Windows
OK

Clear * v1.50 version:
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
The path and file name of this project are changed randomly. Check the suspicious file path and delete it.
Close Save Regedit.
Open the file
Find shell=After it is a * file
Change to: shell=
Close Save and restart Windows
Delete the corresponding * file
OK

Clear * v1.50 version:
Enter MS_DOS mode:
del
del
Open the file
Find shell=After it is a * file
Change to: shell=
Close Save and restart Windows
Delete the corresponding * file
OK
91. Transmission Scount v1.1 - 1.2
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Kernel16" = C:\WINDOWS\
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
92. Trinoo
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: System Services =
Close Save Regedit and restart Windows
Delete C:\windows\system\
OK
93. * Cow v1.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SysWindow = "C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
94. TryIt
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Rc5Dec = C:\Program Files\Internet Explorer\_.exe -guistart
Close Save Regedit and restart Windows
Delete C:\Program Files\Internet Explorer\_.exe
OK
95. Vampire v1.0 - 1.2
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: Sockets="c:\windows\system\"
Close Save Regedit and restart Windows
Delete c:\windows\system\
OK
96. War* v1.0 - 2.0
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: Kernel32 = "C:\somepath\"
Close Save Regedit and restart Windows
Delete C:\somepath\
OK
97. wCrat v1.2b
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: MS Windows System Explorer ="C:\WINDOWS\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\
OK
98. WebEx (v1.2, 1.3, and 1.4)
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: RunDl32 = "C:\windows\system\task_bar"
Close Save Regedit and restart Windows
Delete C:\windows\system\task_bar.exe and c:\windows\system\
OK
99. WinCrash v2
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: WinManager = "c:\windows\"
Close Save Regedit
Open the file
Find run=c:\windows\
Change to: run=
Save Close, restart Windows
Delete c:\windows\
OK
100. WinCrash
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the item on the right: MsManager =""
Close Save Regedit and restart Windows
Delete C:\windows\system\
OK
101. Xanadu v1.1
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: SETUP = "c:\somepath\"
Close Save Regedit and restart Windows
Delete c:\somepath\
OK
102. Xplorer v1.20
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: PCX = "C:\WINDOWS\system\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\system\
OK
103. Xtcp v2.0 - 2.1
Steps to clear *s:

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delete the project on the right: msgsv32 = "C:\WINDOWS\system\"
Close Save Regedit and restart Windows
Delete C:\WINDOWS\system\
OK
104. YAT
Steps to clear *s:Hot Network 

Open Regedit
Click the directory to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Delete the item on the right: Batterieanzeige = ‘c:\pathnamehere\ /nomsg’
Close Save Regedit and restart Windows
Delete c:\pathnamehere\
OK