Remove / Delete Ahsan Computer Virus | Kill Ahsan Virus

by Rohit Khurana on February 23, 2009

Advertisement

Trouble:

Recently my desktop was infected with this Ahsan computer virus, the virus came from my cousin mobile phone memory card. I was quite happy as after a long time I had to deal with this virus called Ahsan Virus which was quite easy to remove. I removed this virus without any anti virus in around 5 minutes only.

 

It was not as much fun as this ahsan was quite easy to remove even with out any help of any antivirus. Let’s see what are the most common symptoms of ahsan virus on a windows computer.

Ahsan's-Computer

Ahsan virus renames My computer to Ahsan’s Computer, renames Recycle Bin to G. W. Bush

, disables registry editing and don’t allow you to show hidden files and folders through folder options.

 

Let’s discuss the full step by step procedure to remove ahsan virus, and you don’t have to boot in safe mode to remove this ahsan virus

1. Download process explorer from here, extract the .zip archive and run it by clicking procexp.exe make sure to kill all the process with name Firewall.exe , CSRSS.exe shown in process explorer.

ahsan-virus-process

Ahsan's-virus-process

Advertisement

2. Now, download Everything search tool from here, and find and delete all the files with following names.

Type these files names in the search tool and delete all the files.

 

Note: Delete csrss.exe files found outside C:\Windows only and autorun.inf files in C:\Windows and in the root directory of all the drive like C, D, E drive and your removable pen drive etc

system.exe
csrss.exe
Home video.avi.exe
autorun.inf

 

3. Go to Start >> Run and copy and paste the following command given below and press enter.

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

 

4. Now go to Start >> Run and type regedit and press enter,

Search and delete all entries with name "Ahsan" , site 110mb.com and Bush.

 

5. Navigate to the following registry path and delete any key value names with NoFolderOptions

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Policies\Explorer

 

6. Navigate to the following registry path

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced. Find the value "Hidden" .

Right click it and modify it to 1. If Key value hidden is not present there then you will need to create it and close registry

7. Again open Start >> Run and type msconfig and press Enter.

Locate the startup entries by ahsan virus and uncheck these entries and also make sure you remove any thing suspicious in Start Menu >> All Programs >> Startup Folder

msconfig-Ahsan-virus

Uncheck the entries named CRSS and A.M.K.B_Pk and click apply and Ok.

 

8. That’s it done, restart now.

If you like this article or this article helped you, you can +1 to recommend this article on google plus.

You can follow us on Twitter or join our Facebook Fan Page. If you have a question to ask us, submit your question at Answers By Trouble Fixers.

Looking for something else? Search here :

{ 15 comments… read them below or add one }

Jerrime March 19, 2009 at 4:59 am

Hi. . . .

Thx for this tips and guidelines. . .

saif April 7, 2009 at 10:39 am

when ever i kill the csrss.exe my pc restarts

saif April 7, 2009 at 10:39 am

please kindly tell me and i can’t move my mouse normally i have to do this in safe mode

Dirc April 20, 2009 at 1:07 pm

you’re great….Many thanks!!!

Simple but powerful…

umair April 21, 2009 at 11:00 pm

thanks for help
ahsan viru killing in my computer

teslim June 12, 2009 at 3:27 am

thanks very much u r far too kind.

nitin June 26, 2009 at 10:56 am

mind blowing performance, i remove it completely

thanks

nitin June 26, 2009 at 12:42 pm

it comes back again

js wang August 11, 2009 at 3:14 am

when i try to open regedit in the command prompt it wont open.. it says it has been disabled by the administrator… and even task manager wont open

fevfdggfgfd September 25, 2009 at 12:59 am

it not working its just an old solution just go to the system32 in windows file and delete the file nAmed Home Video its tested and work for furher enquiry you my contact me through ishaqly@yahoo.com

shazia December 11, 2009 at 12:40 pm

hello
in my mc due to Ahsan’s computer virus run option is not displying then how i rove it

Arif February 3, 2010 at 10:59 am

when I m removing csrss.exe, my pc gets restart every time, so how I can remove Ahsan virus?

muzaffar March 9, 2010 at 3:11 pm

when i removing a crss.exe file my computer has come an blue screen for 1 second and then my computer restart automaticly and i run any game in computer the game was automaticly closed.

Denisa April 13, 2010 at 4:24 am

i got a problem.when i try to remove crss.exe he says :access is denied
Please help me

Vikram July 20, 2010 at 3:23 pm

Probably you have killed the process which has same name ” crss.exe”
you have to kill the process which having Windows Media Player icon

Leave a Comment

Previous post:

Next post:

© TroubleFixers – All about fixing computer troubles2007-2014 . All Rights Reserved.