Backdoor.Subseven.22.a - Removal

To remove this Trojan, delete any files detected as Backdoor.Subseven.22.a or Subseven.22.plugin, and delete the key that the Trojan added to the registry .

NOTE: Please make sure that the Trojan that was detected by NAV is Backdoor.Subseven.22.a. This should not be confused with the Backdoor.SubsevenTrojan. If you cannot open program files, the computer is probably infected with Backdoor.Subseven ,not Backdoor.Subseven.22.a.

To delete the files:

1. Run LiveUpdate to make sure that you have the most recent virus definitions.
2. Start Norton AntiVirus (NAV), and then run a full system scan, making sure that NAV is set to scan all files.
3. Delete any files detected as Backdoor.Subseven.22.a and Subseven.22.plugin.

To edit the registry:

CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.

1. Click Start, and then click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to and select the following subkey:
   
   HKEY_LOCAL_MACHINE\Software\Microsoft\ENC
   
   CAUTION: Make sure that you navigate all the way to the \Enc subkey.
   
4. Press Delete and then click Yes to confirm.
5. Close the Registry editor.

Technical Details