Previous Topic Next Topic

Lord Ganesh Cool

Closed
Benjamin - 23 Mar 2011 à 05:48
Ambucias Posts 47312 Registration date Monday 1 February 2010 Status Moderator Last seen 28 March 2026 - 23 Mar 2011 à 05:56
Hi,
From few days back one message "Lord Ganesh Cool " came to the title bar of my Internet explorer....How can I remove it.....I try to remove it from registry -> current user -> software s->Microsoft->main-> start page and title....but it is reappearing.....

what is the solution....an help from other end is highly appreciative....

Thank You


Benjamin
Related:

1 response

Réponse 1 / 1
Ambucias Posts 47312 Registration date Monday 1 February 2010 Status Moderator Last seen 28 March 2026 11,166
23 Mar 2011 à 05:56
Stardard procedure

1. go to task manager and end process the wscript

2. delete rahul vbe file from c:\windows\system32

3. go to HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\ Window Title : Lord Ganesh Cool '''clear this value''

4. Empty recycle bin
delete this values into registry

5.Start>>Allprograms>>RUN

6.and type REGEDIT into run window

7.to this KEYS into registry editor

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\
-------------------------------------------------------------

8. delete the key value
Window Title : Lord Ganesh Cool '''delete this value or change it.

Not so standard


1) In Windows Explorer
Tools -- Folder Options --View
Show hidden files and folders ---check this one
Hide prorected operation system file(Recommended) --Uncheck this one

2) GO TO C:\windows\ system32
find this file "LordganeshVirusprotection.vbe" and delete this one,
if u can't do that follow the below steps

2)open the TaskManager(press control+Shift+Escapte key) then in
process Tab find ths Process "wscript.exe" and delete this one
or



3) Type Regedit.exe into RUN Command
HKEY_CURRENT_USER\ SOFTWARE\ MICROSOFT\ INTERNET EXPLORER\MAIN
[Window Title = ""]
[Start Page = "www.google.com"]
HKEY_LOCAL_MACHINE\SOFTWARE\ MICROSOFT\Windows NT\ CurrentVersion
\Winlogon
[Userninit = "C:WINDOWS\system32\userinit.exe"]