Sub7@Chatx.net virus
January 18, 2008 – 2:53 amI’ve been hit by Sub7@Chatx.net virus.. I got it from my friend’s flashdrive.. huhu.. The virus was really irritating because it opens a new window everytime you open your drives(C: ug D: sako).. sucks! Moreover,my Anti-Virus (which is nod32) wasn’t able to detect nor delete the said virus.. screenies here!
The virus is getting into my nerve.. 
Luckily I’ve got my friend google at my side! cheers! 
type..search..find..
until I got into aron’s blog which happens to be my "kainuman" at fwendz diner.. he was once a victim of this virus and he has formulated a cure for it.. hoooraay!!
I followed the steps and tadda!! my pc is good to go! all thanks to aron! visit his blog! lots of goodies out there..
2 Responses to “Sub7@Chatx.net virus”
very easy!
1).Download this file from my website and double click on it. Here is the link
http://autorunvirus.googlepages.com/Removesub7chatx.netVirus.vbs
OR
Copy below code.
Paste in notepad or Wordpad.
Save As yourname.VBS
Double click on it to run that script.
Dim ObjFileSys, VirusFileNames, Dimension
CONST FolderSystem32 = 1
VirusFileNames = Array(”autorun.inf”,”mma.bat”,”mma.rar”,”mma.reg”,”mma.vbs”)
Set ObjFileSys = CreateObject(”Scripting.FileSystemObject”)
Call DeleteRegistry()
Call CleanSystem32()
Call CleanAllDrives
Set ObjFileSys = Nothing
MsgBox “Done”
WScript.Quit
Sub CleanSystem32()
Dim SysFolder
Set SysFolder = ObjFileSys.GetSpecialFolder(FolderSystem32)
For Dimension = LBound(VirusFileNames) To UBound(VirusFileNames)
if ObjFileSys.FileExists(SysFolder.Path & VirusFileNames(Dimension)) Then DeleteThisFile SysFolder.Path & VirusFileNames(Dimension)
Next
Set SysFolder = Nothing
End Sub
Sub CleanAllDrives()
Dim Drive, Drives
Set Drives = ObjFileSys.Drives
For Each Drive in Drives
For Dimension = LBound(VirusFileNames) To UBound(VirusFileNames)
if ObjFileSys.FileExists(Drive.Path & VirusFileNames(Dimension)) Then DeleteThisFile Drive.Path & VirusFileNames(Dimension)
Next
Next
Set Drives = Nothing
End Sub
Function DeleteThisFile(FileName)
Dim File
Set File = ObjFileSys.GetFile(FileName)
File.attributes =0
File.Delete True
Set File = Nothing
End Function
Sub DeleteRegistry()
Dim WSHShell, SysFolder
Set SysFolder = ObjFileSys.GetSpecialFolder(FolderSystem32)
Set WSHShell = WScript.CreateObject(”WScript.Shell”)
WshShell.RegWrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonUserinit”, SysFolder.Path & “userinit.exe”
WScript.DisconnectObject WSHShell
Set WSHShell = Nothing
End Sub
2). Restart your system and right-click on your drives to verify that this virus has been removed.
3). If the Sub7@Chatx.net still remains after restart, try repeating the whole process again.
By autorunvirus on Mar 7, 2008
no
By jasem on May 3, 2008