How to remove Khatra.exe virus?

December 2016

With the advent of modern day computing and scripting, virus attacks have become more common these days. One such virus is khatra.exe which keeps creating multiple folders. If the computer is afflicted with this malware, then the user will also be unable to access Task Manger and Control Panel. To solve this problem one needs to remove any restrictions from the registry. After that, the user has to use the Regrun reanimator tool and scan all the hard drives. If khatra.exe is found, it is imperative that autoplay function for USB should be disabled for Autoplay function.

Issue



My PC has been infected by a strange virus which is creating multiple folders.
  • I'm unable to access Task Manager and Control Panel.

Solution


I finally solved Khatra.exe, Ghost.exe & Xplorer.exe viruses on my system from scratch (nothing remains of them now).
  • 1) If there are any restrictions to the Control Panel, Registry, Task Manager etc, use any free restriction removal tool ( RRT )
  • 2) Download free version of Regrun reanimator tool from Greatis software: http://greatis.com/security/reanimator.html
  • 3) Install and run this software
  • 4) Scan all your hard drives. This will detect all the above viruses and you can select 'Get it out' option to remove each one of them. This will also run during your startup and stop all detected viruses during your next boot.
  • 5) Disable Autoplay for USB storage devices. Follow procedure for different versions of Windows operating system as mentioned at http://antivirus.about.com/od/securitytips/ht/autorun.htm
  • 6) Final step: After completing all of the above, enable 'show all hidden files..' option in Windows Explorer view menu and search all your hard drive files and folders for '*.exe' and delete only '<folder name>.exe' folders

Note


Thanks to GMurthy for this tip on the forum.

Related :

This document entitled « How to remove Khatra.exe virus? » from CCM (ccm.net) is made available under the Creative Commons license. You can copy, modify copies of this page, under the conditions stipulated by the license, as this note appears clearly.