one click away

Sabtu, 06 Oktober 2012

How To Delete Watermark.exe Virus

I beat this virus once, and i want to share it to the world. This virus is located in C:\Program Files\Microsoft\Watermark.exe. If you find this file in your program files folder, then your registry is already infected. To be precise, you will find it on this section of registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit.


This virus will make you cannot logon into windows. Every time you try to logon, you will be kicked back to logon screen. So, before you thinking to restart or shut down your computer, think twice.

This virus also can regenerate it self, if you don't delete it perfectly. I suggest to wipe clean all those infected file once for all.

This is how to clean watermark.exe virus
  1. Open Task Manager (press Crtl+Alt+Del) >> Click on Processes tab.
  2. Search image name svchost.exe with user name as your computer name. It means, not LOCAL SERVICE, SYSTEM, or NETWORK SERVICE scvhost. 
  3. End Process all scvhost.exe that the username is your computer name.
  4. Now, you can delete Watermark.exe. Open folder C:\Program Files\Microsoft\Watermark.exe. permanently delete (press Shift+Del) Watermark.exe and those folders.
  5. In many cases, 3rd step and 4th step have to be done fast. Because, I afraid this virus will regenerate it self again.
  6. Open RegEdit (Start >> Run >> type 'regedit' without quote >> press Enter)
  7. Search for Userinit registry. ( HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit )
  8. Right click on Userinit >> choose Modify >> change its value into 'C:\Windows\system32\userinit.exe,' without quote >> then refresh registry ( press F5 ).
  9. if the value is stay on  C:\Windows\system32\userinit.exe. Its a good sign for you. it mean the virus is already deleted.
  10. Congratulation... Your computer is clean again, once more.

If you still have a question, don't hesitated to ask me..
Thank You...

Tidak ada komentar:

Posting Komentar

Silahkan anda berikan komentar tapi sopan ya