Ahsan’s Computer Virus Solution

by on April 19th, 2009

ahsan computer virusIf your my computer icon has changed to “Ahsan’s Computer” and recycle bin icon to G.W.Bush. That’s the Ahsan’s Computer Virus. All executable files fail to run. It continually checks floppies / floppy disk, You can not install antivirus, Current antivirus gets corrupted and if you type antivirus in internet explorer, it gets closed. You can’t do anything, it irritates you in every 5 seconds. If you will reinstall the operating system and when you will open your hard disk drives, you will get infected again.

No antivirus runs for it, no new installation works. Everything turns to Ahsan’s name and you can not do anything. Computer programs just become a mess. Ahsan’s Computer Virus disables registry editor and disables the Run command. The virus creates a file named “HOMEVIDEO.AVI.EXE” and “CSRSS.EXE” on all the available drives. CSRSS.EXE is basically a worm called AHLEM.A. There has been funny names in the background of this problem as well e.g. ahsan manan khan butta virus, ASHAN & KABIRWALA VIRUS along with ahsan virus or Ahsan Computer Worm etc. Lets get rid of this Ahsan’s Computer Virus.

How to get rid of Ahsan’s Computer Virus

There are many solutions out there. You will have to delete registry keys associated with the name ahsan, delete some hidden files from every hard disk drive of your PC, delete running processes related to Ahsan from task manager being in safe mode. You can do it manually or you can just download some software to do that, which I am going to recommend.

Remove Ahsan’s Computer Virus – Method 1

  • Download Process Explorer, extract the archive and run it by clicking procexp.exe. Kill all the process with name Firewall.exe , CSRSS.exe shown in process explorer.
  • Download Search Everything Tool, find and delete all the files with following names.
    system.exe
    csrss.exe
    Home video.avi.exe
    autorun.inf

    Note: Delete csrss.exe files found outside C:\Windows only and autorun.inf files in C:\Windows and in the root directory of all the drive like C, D, E drive and your removable pen drive etc. If you reinstall OS again as a fresh, this virus will be still there in other drives. Unhide system hidden files and enable option “show hidden files”. If you will now visit other computer drives, there will be Home video.avi.exe and csrss.exe. Delete these.

  • Log in to safe mode as Administrator
  • Go to Start > Run. Copy and paste the following command given below and press enter.
    REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
  • Go to Start > Run. Type regedit and press enter.
  • Search and delete all entries with name “Ahsan”, “site 110mb.com” and “Bush”.

  • Navigate to the following registry path and delete any key value names with NoFolderOptions
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Policies\Explorer
  • Navigate to the following registry path
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced. Find the value "Hidden"
  • Right click it and modify it to 1. If Key value hidden is not present there then you will need to create it.
  • Go to Start > Run. Type msconfig and press Enter.
  • Locate the startup entries by ahsan virus and uncheck these entries.
    Also make sure you remove any thing suspicious in Start Menu > All Programs > Startup Folder
  • Uncheck the entries named “CRSS” and “A.M.K.B_Pk”. Click apply and Ok.
  • Restart now.

Remove Ahsan’s Computer Virus – Method 2

Download Ahsan’s Computer Process Killer
Run this tool and all running processes by Ahsan virus will be demolished.
Download Search Everything Tool
Find and delete all files specified below:

system.exe
csrss.exe
Home video.avi.exe
autorun.inf

Note: The original csrss.exe file is only placed in System32 directory. You should NOT delete that file placed in C:\Windows\System32 directory because its the system file. Delete all other files named as csrss.exe at other locations.

Go to Start > Run > Regedit > Enter. Press F3 and the Find dialog box will appear. Find and delete the reference to all the following:

system.exe
csrss.exe
Home video.avi.exe

Note: You should NOT delete the registry key which specifies csrss.exe in System32 directory. Delete all other file values for other locations.

Use the Smart Virus Remover to reset the Windows settings to default.

Remove Ahsan’s Computer Virus – Method 3

Download and run True Sword Threat Remover (Trial) by Security Strong Hold. True Sword will find and fully remove AHLEM.A (csrss.exe) and other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers, viruses and other kinds of malicious programs in several seconds.

Remove Ahsan’s Computer Virus – Method 4

System Restore to previous date can also remove this infection.

Goto start menu > All Programs > Accessories > System Tools > System Restore.

Remove Ahsan’s Computer Virus – Spyware Removal Free Tools

Download and run Spybot – Search & Destroy
Download and run Spywareblaster.

Remove Ahsan’s Computer Virus – RRT Tool

A tool to protect from and remove the most common restrictions made by malware. RRT re-enables all what a virus had previously disabled, and gives you back the control over your own computer. These restrictions are most often: – Disable Folder Options >> so the user can’t set the option to show hidden files! – Disable Registry Tools >> so the user can’t see what is going on during system startup! – Disable Ctrl+Alt+Del >> so the user can’t see the virus and the other applications running! It also protects you from any further infections that come from removable media. RRT with AutoRemove enabled monitors your system and detects any flash disk as soon as it gets plugged in, blocks and remove any infection before it makes any harm to your computer. RRT also protects you from any further infections that come from removable media. Since we noticed that most of the malware nowadays spread via removable media (Flash disks in specific).

Download RRT Virus Removal Tool

Download RRT

Run RRT and disable virus effects: check all check boxes and press ‘remove’.

SDFix Trojan Removal Tool

SDFix is a program written by AndyManchesta that can remove many different types of Trojans and Worms. SDFix will remove the known Trojans and Worms found on your computer.

The tool has been removed because it was detected as a virus by McAfee Antivirus.

Remove Ahsan’s Computer Virus – Instructions

Scan your system with any online virus scanner to make sure that you’re clean. Here’s a list of online virus scanners:

Free Online Virus Scanners

Symantec Security Check
Panda ActiveScan
Kaspersky Online Scanner
Mcafee FreeScan
Avast Online Scanner
F-Secure Online Scanner
Trend Micro Online Scan

Share

11 Reviews

  1. DANISH ESSANI says:

    Hey….. Thx for all who helped us in removal ahsan virus….
    u did a great job… Thanx 4 all…

  2. Hiroshi says:

    @mickey: Welcome lad. Cheers…

  3. mickey says:

    thank you…

  4. Ghulam Hussain says:

    Helpfull tools and successfully removed Ahsan and Bush from my computer.

  5. Kamran says:

    thank youuuuuuuuuuuuuuuu nice i really thanks for your fixes

  6. Kamran says:

    Wow good thank you very very very much :d I really happy :d how i can thanks for ur Tricks wow thanxxxxxxxxxxxxxxxxxxxxxx Good man :d nice u have nice tricks :D thank you ;) now my pc is clear from ahsan’s fuck computer :D thank you I Really thanks full of your ;)

    Good bye
    Tc
    and thanks Again:d

  7. Jabir says:

    Thank you.

  8. Sanix says:

    @Hiroshi:
    Thanks but no need to link back. I just wanted the updated versions of the tools available to your users as well. Smart Virus Remover has been updated today. So please update.

  9. Hami says:

    I liked the way you described it to remove, following you.

  10. Hiroshi says:

    @Sanix: Well said. Okay, Updates about Smart Virus Remover and Ahsan’s Computer Process Killer will be available at its author’s site: http://www.technize.com

  11. Sanix says:

    Good fixes. Actually a very detailed article about the fixing of this malware. It would be good if you could give the original links for Smart Virus Remover and Ahsan’s Computer Process Killer because if they’re updated, your links will be outdated.