How to Uninstall the Navidad Trojan Virus

By DiDill

The Navidad Trojan virus infects computers via email. The Navidad Trojan virus infects computers via email.

Rate: (0 Ratings)

The Navidad Trojan virus is a relatively new Internet threat. This virus infects computers via email. The subject of the email will read “RE:” and the email has an attachment called. Navidad.exe. On execution, a message box appears and maps the opening of Windows executables. This causes the file to be executed whenever an EXE file is opened, causing most Windows programs to not work properly. In order to delete the Navidad Trojan horse, you will need to edit the registry. Read on to learn how to do this manually or using a tool called "fix_navi.com" :

Instructions

Difficulty: Moderate

Manually Remove the Navidad Trojan Virus

Step1
Change the file extension of The Registry. You need to do this because the Navidad disables all executable files and the Registry Editor is an executable file.
Step2
Click on the START button located at the bottom-left corner of the desktop. Click "Search" in the Start menu. Search for the following file: "regedit.exe."
Step3
Change the file extension from ".exe" to ".com" To do this, right-click on the file and click "Rename." Rename this file from "regedit.exe" to "regedit.com."
Step4
Run the Registry Editor by clicking on the "Start" button and then clicking "Run." Type in regedti.com and then click "OK." The Registry Editor should open. Go to the left pane and click the plus signs to navigate to the following registry entry: HKEY_CLASSES_ROOT\exefile\shell\open\command.
Step5
Look in the right-hand pane and double-click the entry that's named: (Default) = "\WINNT\SYSTEM32 WINSVRC.EXE"%1"%*". This will open the "Edit" window. Delete the first part of the string, leaving only "%1"%*".
Step6
Navigate to the following registry entry: HKEY_LOCAL_MACHINE\ Software\Microsoft\Windows\CurrentVersion\Run. Click Delete Win32BaseServiceMOD = WINNT\SYSTEM32\WINSVRC.EXE. Navigate to the following registry entry: HKEY_CURRENT_USER\Software\Navidad. Delete this registry key.
Step7
Close the Registry Editor and restart your computer. After your computer reboots, use an up-to-date antivirus to scan your computer.
Step8
Make sure you rename the file from regedit.com back to regedit.exe.

Use fix_navi.com to Remove the Navidad Trojan Virus

Step1
Download the Fix Navi tool (See Resources below for the download link). This is the easiest and most straightforward solution to removing the Navidad Trojan, particularly if you do not want to edit your registry.
Step2
Run the tool, and it will automatically clean up the registry entries and delete the winsvrc.vxd file.
Step3
Reboot your computer and run an up-to-date antivirus program to remove any infected files. And you are done.

Tips & Warnings

  • Viruses that attempt to disguise themselves as harmless files are called Trojan horses.
  • Registry editing can cause irreversible damage. If you are not familiar with what the registry is or if you are not comfortable editing your registry, then it is essential that you find someone who is, so as to avoid crashing your system. Alternatively, follow the steps in Section #2 above to fix the problem automatically with the fix_navi.com tool.

Photo/Video Credit

author: biberta - image courtesy of www.morguefile.com, under the morgue file license

Post a Comment

POST A COMMENT

Request a New How-To Article

Looking for more How To information? Chances are there’s an eHow member who knows how to do what you’re looking to do. Submit an article request now!

eHow Article: How to Uninstall the Navidad Trojan Virus

eHow Member: DiDill

DiDill

Novice Novice | 0 Points

Category: Computers

Articles: See my other articles

Related Ads