text: It has to be removed manually.\nSo how to remove this manually from your computer ?\n\n1: Close the IE browser. Log out messenger / Remove Internet Cable.\n\n2: To enable Regedit\n\nClick Start, Run and type this command exactly as given below: (better - Copy and paste)\n\nREG add HKCU&#92;Software&#92;Microsoft&#92;Windows&#92;CurrentVersion&#92;Policies&#92;System /v DisableRegistryTools /t REG_DWORD /d 0 /f\n\n3: To enable task manager : (To kill the process we need to enable task manager)\n\nClick Start, Run and type this command exactly as given below: (better - Copy and paste)\n\nREG add HKCU&#92;Software&#92;Microsoft&#92;Windows&#92;CurrentVersion&#92;Policies&#92;System /v DisableTaskMgr /t REG_DWORD /d 0 /f\n\n4: Now we need to change the default page of IE though regedit.\n\nStart>Run>Regedit\n\nFrom the below locations in Regedit chage your default home page to google.com or other.\n\nHKEY_CURRENT_USER&#92;SOFTWARE&#92;Microsoft&#92;Internet Explorer&#92;Main\n\nHKEY_ LOCAL_MACHINE&#92;SOFTWARE&#92;Microsoft&#92;Internet Explorer&#92;Main\n\nHKEY_USERS&#92;Default&#92;Software&#92;Microsoft&#92;Internet Explorer&#92;Main\n\nJust replace the attacker site with google.com or set it to blank page.\n\n5: Now we need to kill the process from back end. Press Ctrl + Alt + Del\n\nKill the process svhost32.exe . ( may be more than one process is running.. check properly)\n\n6: Delete svhost32.exe , svhost.exe files from Windows/ & temp/ directories. Or just search for svhost in your comp.. delete those files.\n\n7: Go to regedit search for svhost and delete all the results you get.\n\nStart menu > Run > Regedit >\n\n8: Restart the computer. That’s it now you are virus free.