"sujin.com" Removal with Ultimate Flash Drive Protection Tool v1.0 (UPDATED LINK)
Wednesday, December 5, 2007So I made a JavaScript that is designed to run and use local desktop resources to remove the "sujin.com" worm after reading a comment from a blog reader asking for suggestions to remove the worm. Hey dude, here's for you. ^_^.
Be sure that you're logged as Administrator before running this tool.
Download "sujin.com" Removal with Ultimate Flash Drive Protection Tool v1.0
http://www.2shared.com/file/2584042/d9cac703/ATool.html
(Look for "Save file to your PC" and click the link on its right)
Feel free to distribute and please report any bugs found.
Related article here.
UPDATE: Fixed
Previous Comments
It’s up there. Link is fixed. 
Hello wounderfull person (if it is you) that have made the sujin.com.np program that could get rid or this worms or what ever it was on my laptop - it has taken me forever to try to get rid of this problem and then I found your “tool” - thank you SOOO much.
:-) Peter
Posted by peter at December 6, 2007, 6:18 pmOh. Hi peter. The Atool.zip removes the “sujin.com.np” worm and protects your desktop to be potentially infected by other Flash Drive worms. I hope you liked it and please spread the news.
yeah men it removes the sujin.com.np from
explorer and i hav ditributed all over the town
but one of the guy is saying that this tool will
not remove the virus but it will invite viruses
what do you think about his say plez reply me soon
Hi Paljor.
Many people consider “sujin.com.np” vbs worm as an annoyance. They want it to be removed from their computers so I just made something that will do so.
My removal tool also makes sure that your computer won’t be infected by any USB flash drive upon insertion.
And hey, there are lots of antivirus packages out there and I don’t get it when a visual basic script claims to remove other viruses.
Regards,
Posted by boyutal at December 13, 2007, 3:52 amthanks bro, your tool is great and I’m glad that now I can say bye bye to this problem. 
Thanks a LOT 
i got rid of the problem bcoz of ur tool.
again thanks a LOT
hi boyutal,
i ran your A-tool to remove the sujin.com worm -thanks for that!- but now when i insert my flash drive which has the U3 smart drive thing, the U3 launchpad (the software) does not launch at all.. and i need it to install software on it and stuff.. is there a way to reverse what the a-tool did?? please help!
thanks!
Hi, ik.
There’s 3 things that you can do to solve that.
1.) Manually start the executable in the root of your flash drive by double clicking it. I don’t know exactly the file name of the U3 loader but I’m sure it’s an .exe or .com file.
(and if you want to activate the AutoRun feature of your PC or flash drive, which will again make you vulnerable from worm attacks unless you have a reliable virus protection application installed)
2.) Rebuild the autorun.inf in your flash drive. Running Atool.js assumes that you want to convert your flashdrive to pure data storage so it deleted the autorun.inf in there. To rebuild it, just do this
a)Open notepad
b)Type this
[autorun]
open=(Name of the U3 loader)
shell\open=Open
shell\open\Command=(Name of the U3 loader)
c) Save as autorun.inf
3.) Atool.js modified the registry so that your pc won’t be at risk of getting a flash drive worm.
To revert,
a) Open regedit.exe
b) Go to Hkeylocalmachine\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\IniFileMapping key
c) Delete Autorun.inf value
And your pc will make sure that it reads the autorun.inf of every removable media that you inserted, which includes flashdrives.
For more questions, just let me know ok?
Regards.
Posted by boyutal at December 22, 2007, 2:46 amhi boyutal, thanks very much for that! My U3 drive works now! just to let u know (or to anyone who had the same problem), i didnt have my flash drive connected when i ran the a-tool, so i didnt have to rebuild the the autorun.inf on it. I just deleted the registry value.. and now the U3 launcpad works!
thanks again!
a
Posted by km at December 26, 2007, 9:02 pmI am really happy and thank you for this tool. This error of sujin has now been sorted. Thank you for developing this and sharing with everyone.
Wish you all the best
Posted by Jasjit at January 10, 2008, 4:17 pmThank you so much…your tool really works…
Posted by Rajeev at January 11, 2008, 1:11 amYou rock.
Posted by a1 at February 21, 2008, 5:47 pmHey! affirmative strike! my fooken nepalese worm was sucessfully eradicated! Loads of thanks for the script lad! Keep on rockin’ mate! Yet, Another Brilliant Mind From The Philippines.. MABUHAY!!
Posted by Chris Barnett Cornrows at March 25, 2008, 3:50 pmJust download a scanner for this virus from http://worldlink.com.np/support/download… and run a scan and this virus will be easily removed
It took me 10 seconds to do it this way.
I cant believe it that this sucking thing is gone which was there since 5 months(as i dont use explorer much)…..hehehhehehe
thank u very much this tool works great…..i am really impressed……
Posted by Chaitanya at April 22, 2008, 10:23 pmHi boyutal,
I right-clicked the ATool.htm and saved it on my computer. Forgive me but I cant figure this out since am not as tech savvy. Do i need to change the file extension to .exe and run it or what?
This sujin virus killing me 
Please help
Posted by Sean at May 8, 2008, 1:31 pmhi boyutal thanqs man i was fighting with this problem 4 so many days once again thanqs dude problem solved
Posted by sai at May 10, 2008, 8:55 pmplese give me nvr.xpc.co.in removel tools
Posted by Arun at May 12, 2008, 3:39 pmHints taken from
http://www.spywareinfoforum.com/index.php?showtopic=114500
Start command prompt in your computer
cd c:\windows\system32\
C:\WINDOWS\system32>attrib -H -A -S -R NewVirusRemoval.vbs (to unhide the file)
In Windows Task Manager in the processes tab end the task named “wscript.exe”.
C:\WINDOWS\system32>del NewVirusRemoval.vbs
Start Registry Editor (regedit), find Key “Winlogon”
HKLM > Software > Microsoft > Windows NT > Current Version >
Delete the value name “userinit” containing valuedata “C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\NewVirusRemoval.vbs”
Restart the system after this
thanks a lot my friend ,, what a great Help ..
thanks a lot from my heart,,,,
keep it on ,,helping others,,,
regards
Posted by sahil at June 5, 2008, 1:29 pmi have no administrator log in on my pc.each time wen i run this Atool it says permission denied.what should i do plz tell me
Posted by Cool Buddy at June 14, 2008, 9:18 pmhey it worked yaar.thanx a lot. i really mean it. i was so tensed u really helped me yaar
Posted by Cool Buddy at June 14, 2008, 9:23 pmSir,
I want your most popular sujin.com.np removal software .
k.n.shukla
can not find script file “c:\WINDOWS\system32\NewVirusRemoval.vbs”
Posted by pawan rohilla at July 29, 2008, 3:50 pmcan not find script file “c:\WINDOWS\system32\NewVirusRemoval.vbs”
appearing on startup, need solution.
Posted by pawan rohilla at July 29, 2008, 3:52 pmMalwarebytes.org is the removal of spyware n others
just try once and reply
Visit Technize.com T remove certain viruses in your computer Click Smart Virus Remover Which is Faded below Home
Posted by prakash at October 22, 2008, 11:36 pmUse Kaspersky antivirus To Protect Your computer
N Keeep updating it
Other wise it wont work
Start command prompt in your computer
cd c:\windows\system32\
C:\WINDOWS\system32>attrib -H -A -S -R NewVirusRemoval.vbs (to unhide the file)
In Windows Task Manager in the processes tab end the task named “wscript.exe”.
C:\WINDOWS\system32>del NewVirusRemoval.vbs
Start Registry Editor (regedit), find Key “Winlogon”
HKLM > Software > Microsoft > Windows NT > Current Version >
Delete the value name “userinit” containing valuedata “C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\NewVirusRemoval.vbs”
Restart the system after this
AKa
Posted by prakash at October 22, 2008, 11:39 pmthanks
Posted by Francis at March 11, 2010, 11:47 pm
hi pls give me rimovel tool for this link
Posted by deep at December 5, 2007, 5:29 pm