Clicky

How to Fix http://67.201.36.16/nolink.html Redirect Virus

Does your computer open three or four internet browser windows every now and again? Is one of the links http://67.201.36.16/nolink.
You are infected with a Win32/Kryptik variant. A very nasty and well hidden virus that is not caught by many anti-virus programs.

Scan

  • Create a System Restore Point Guide Here
  • Download and Install NOD32 from here
  • Scan the following directory
c:\windows\system32\drivers
  • This trojan usually replaces atapi.sys (Even if it doesn’t show its best to replace atapi.sys)
  • Make a note of any infected files Do Not Delete

Removal

  • search the following folder for backup (clean) copies of the sys files
c:\windows\winsxs
search atapi.sys
  • Copy any files and replace the infected files (Only in the “c:\windows\system32\drivers” folder)
  • If you make a mistake please use the system restore point to recover and try again
  • Reboot

Clean Up

  • Delete any restore points (These will have copies of the trojan)
delete restore points
  • Scan your whole computer for any traces