How to Fix http://67.201.36.16/nolink.html Redirect Virus

Does your computer open three or four internet browser windows every now and again? Is one of the links http://67.201.36.16/nolink.
You are infected with a Win32/Kryptik variant. A very nasty and well hidden virus that is not caught by many anti-virus programs.

Scan

• Create a System Restore Point Guide Here
• Download and Install NOD32 from here
• Scan the following directory

c:\windows\system32\drivers

• This trojan usually replaces atapi.sys (Even if it doesn’t show its best to replace atapi.sys)
• Make a note of any infected files Do Not Delete

Removal

• search the following folder for backup (clean) copies of the sys files

c:\windows\winsxs

• Copy any files and replace the infected files (Only in the “c:\windows\system32\drivers” folder)
• If you make a mistake please use the system restore point to recover and try again
• Reboot

Clean Up

• Delete any restore points (These will have copies of the trojan)

• Scan your whole computer for any traces