download prevx 3.

0 to delete khatra
Procedure to remove Khatra.exe virus manually
1)Go to task manager and select regsvr.exe(if found), gHost.exe , khatra.exe , X
plorer.exe rt click and select end process tree.
press WIN+r or start>RUN
2)type cmd and hit enter
3)GO to the the drive where your OS is installed
4)In the command prompt make sure you get the command line as c:\ or d:\ (this c
an be achieved by the command "cd .." without quotes)
5)Type attrib -s -h -r khatra.exe
Repeat the same process for the location c:\windows\system32
6)type del khatra.exe
7)Follow the same process for gHost.exe & Xplorer.exe as they are also part of t
he virus.
To make sure that the virus is out of you pc , check your registry
1)win+R type regedit
2)ctrl+F type in search one by 1 the names of the 3 processes i.e khatra,gHost,X
plorer
3)search the entire registry n go-on deleting the values you find.
Is your registry blocked by viruses?
Do you get the message "registry editing has been disabled by your admin"? then
follow the instructions below
Enable Registry Editor
1:Extract the file
2:Right click on the file unhook.inf and select install
Download Registry Editor below
http://sites.google.com/site/a.....edirects=0
Afterward download Malwarebytes Anti-Malware install then update then run progra
m. You may need to reinstall your Anti-Virus program and do a update the run and
remove any found virus.

coolsudan (186) ranked 824 out of 8,237 in computers 8 months ago

u may be knowing this but still try it out .
start ur pc in safe mode and then run the antivirus.
another way is to format ur flash drive, lol unless u dont have anything importa
nt in it.

oke if this doesnt works then its time for some serious measurements .
follow the steps to first check wether it has infected ur pc or not:
1)go to task manager and in the processes select regsvr.exe(if found), khatra.ex
e and stop the process tree immediately.
2)next press win+r or go to start and press run
3)in the window type cmd and press enter
4) press cd.. and enter till u go to the drive in which ur os is installed.
5)now type "attrib -s -h -r khatra.exe" without the inverted commas and press en
ter
6)if no file is found its good that means it has not affected that drive .do the
same thing for c:\windows\system32 and other the other drives too.
7) if it shows the file name the type del khatra.exe
attention to be safe do this all in safe mode.
next to take it out of ur flash drive :
1)insert ur flash drive while pc is in safe mode
2)press win+r or go to start>run
3)type cmd
4)next go to the flash drive i.e. if the letter of ur flash drive is "f" then ty
pe f: and press enter.
5)follow the same pprocedure as done earlier i.e. type "attrib -r -h -s khatra.e
xe"
then type del khatra.exe
6) and thats it the virus will be deleted.
to make sure the virus is no more in ur pc :
1)in the run command(start>run)type regedit
2)press f1 and type in search the name of the virus i.e. khatra
3)go on deleting the values u find in this context.

Procedure to remove Khatra.exe virus manually

1)Go to task manager and select regsvr.exe(if found), gHost.exe , khatra.exe , X
plorer.exe rt click and select end process tree.
press WIN+r or start>RUN
2)type cmd and hit enter
3)GO to the the drive where your OS is installed
4)In the command prompt make sure you get the command line as c:\ or d:\ (this c
an be achieved by the command "cd .." without quotes)
5)Type attrib -s -h -r khatra.exe
Repeat the same process for the location c:\windows\system32
6)type del khatra.exe
7)Follow the same process for gHost.exe & Xplorer.exe as they are also part of t
he virus.
To make sure that the virus is out of you pc,check your registry
1)win+R type regedit
2)ctrl+F type in search one by 1 the names of the 3 processes i.e khatra,gHost,X
plorer
3)search the entire registry n go-on deleting the values you find.
Is your registry blocked by viruses?
Do you get the message "registry editing has been disabled by your admin"? then
follow the instructions below,
Enable Registry Editor
1:Extract the file
2:Right click on the file unhook.inf and select install.