Removal instructions for W32.Lentin.m (aka Yaha.k)

First make sure that the most recent version of F-Prot Antivirus is installed and that the virus definition files for Application and Script viruses and Trojans are not older than December 31st 2002.

Find scan in DOS or CMD mode. Select one of the following procedures, depending on what operating system you are using:

For Windows 95/98/ME:

Please Start your computer into DOS mode and use F-Prot for DOS. To boot into DOS press START \ SHUT DOWN \ RESTART IN MS-DOS MODE.

Windows ME users need to use a Windows startup disk.

In DOS mode at the command prompt type:


cd \                          [ENTER]
cd progra~1                   [ENTER] 
cd fsi                        [ENTER] 
cd f-prot                     [ENTER] 
f-prot.exe                    [ENTER] 

We are assuming here that F-Prot Antivirus was installed in the default location. Set the scanner to "Automatic disinfection".

For Windows 2000/XP:

Click on START \ SHUT DOWN \ RESTART. As the computer is booting up press the F8 key and from the menu select:

"Safe mode with Command prompt"

At the command prompt type:


cd \                          [ENTER] 
cd "program files"            [ENTER] 
cd fsi                        [ENTER] 
cd f-prot                     [ENTER] 
fpcmd c: /disinf /auto /list  [ENTER]

(Please note that the scanning must be done for each drive individually.)

When the scanning is done and the system is clean, then restart the computer.

For Windows NT 4.0:

Restart the computer in SVGA mode (Safe Mode)

  1. Click "Start" / "Run" / type "cmd" [ENTER]
  2. Command prompt window appears
  3. Press "Ctrl-Alt-Del" once and click on "Processes"
  4. In "Processes" find "Explorer.exe" and select "End process". The Desktop will disappear and only the background/wallpaper and the command prompt window will be visible.
  5. In the command prompt window type the following:
    
    cd \                          	[ENTER] 
    cd "program files"          	[ENTER] 
    cd fsi                        	[ENTER] 
    cd f-prot                   	[ENTER] 
    fpcmd c: /disinf /auto /list    [ENTER]
    

    (Please note that the scanning must be done for each drive individually.)

  6. When the scanning is done and the system is clean, then restart the computer.
  7. Double-click the file EXEFIX.REG on your desktop. Select Yes if prompted for confirmation.

Problems:

If you have problems running the registry file it is because Lentin.m has modified the registry so that you cannot run .exe files. If that is the case you have to make a copy of regedit with the .com extension and then run this file.

  1. Select one of the following procedures depending on what operating system you are using:

    Windows 95/98: Click 'Start', select 'Programs', and then click the 'MS-DOS Prompt'. Proceed to step 2 of this section.

    Windows Me: Click 'Start', select 'Programs', select 'Accessories', and then click the 'MS-DOS Prompt'. Proceed to step 2 of this section.

    Windows NT/2000:

    1. Click 'Start', then click 'Run'.
    2. Type command [ENTER]
    3. Type cd \winnt [ENTER]
    4. Proceed to step 2 of this section.

    Windows XP:

    1. Click 'Start', then click 'Run'
    2. Type command [ENTER]
    3. Type the following lines
    4. 
      cd\ 			[ENTER]
      cd \windows		[ENTER]
      
    5. Proceed to step 2 of this section.

  2. Type the following and press ENTER:
  3. 
    copy regedit.exe regedit.com
    
  4. Type the following and press Enter:
    
    start regedit.com
    

This opens the registry editor window. You can now click and drag the file EXEFIX.REG into this window. This will then make the changes needed to fix the execution of applications.

The registry editor opens in front of the DOS window. After you finish editing the registry, exit the registry editor, and then exit the DOS window.

2014 © CYREN · Privacy Statement