|
|
|
|
![]() ![]() |
Apr 16 2007, 01:02 AM
Post
#1
|
|
|
Newbie [Level 1] ![]() Group: Members Posts: 12 Joined: 16-April 07 Member No.: 41,710 |
How to manually remove viruses!
Have you ever been in the possition that you know you have an virus but you dont have any antivirus?? Its almost impossible to remove it manual without knowing about a few tips & tricks. After reading this turtorial im sure you will know how to manual remove most of the virus lurking around. But that dosnt mean you shouldnt have any anti virus on you computer! Anyway, lets get starting with the turtorial.. I suppose you already know what safe mode is. If you dont try pressing the F8 key some times when you start your computer. You havto do this when your computer is about to start the first windows components. In win2k or xp i think you can press space and then F8 when it ask you if you want to go back to previous working setting. Enough talk about how to start you computer in safe mode, but if you want to manual remove viruses you almost everytime haveto do this in safe mode becouse in safemode most viruses dosnt start. Only some few windows component is allowed to run in safemode. So here is what to do. Step: 1: Start your computer in safemode. 2: If you know where the virus are hiding delete the executable file. 3: Open the registry and go to the keys below and add an : in front of the value of the string that you think its the virus. Like this, if string is "virus" and its value is "c:\virus.exe" change its value to ":c:\virus.exe". The : is like comenting out the value. But if you are sure its the virus you can just delete the string. Here are the keys you maybe want to look at: CODE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Runonce 4: The virus can start itself from some other places to. win.ini is the most common files that viruses can use. Soo you should find the files named win.ini and system.ini and look through them and see if you find anything. 5: Look through the startup folder that is normaly located in your profile directory \Start Menu\Programs\Startup. 6: Try searching for the virus executable to see if its hiding some other place. 7: Finally look through the list of services that windows is running. This list is often located under control panel - administrative tools - services. After this 7 steps just reboot your computer in normal mode and try to figure out if the virus is still there.. If not SUCCESS if yes, try to go back to safe mode and hunt some more. Off course this 7 steps will not work on every virus out there, but many of them. WARNING: Be careful when in the registery because you can cause serious damage to your system in there. |
|
|
|
Apr 16 2007, 07:00 PM
Post
#2
|
|
|
Newbie ![]() Group: Members Posts: 1 Joined: 16-April 07 Member No.: 41,746 |
you can try avast anitvirues is very fast and very eazy in use and u can try kaspersky its very fast too but make sure u update the
programme to find any virus in your system and scan your computer full scan and try to close all programme to be sure you will find all virus fast and easy and remove it easy |
|
|
|
Apr 16 2007, 10:13 PM
Post
#3
|
|
|
Newbie ![]() Group: Members Posts: 9 Joined: 16-April 07 Member No.: 41,750 |
Viruses hide themselves in computers.. its pretty hard for a normal user to find it.. and if he/she does find it.. now comes deleting it.... when you try to delete it something will pop-up saying you cant..
and ..ect |
|
|
|
Apr 16 2007, 10:36 PM
Post
#4
|
|
|
NERVE: Interception ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: [HOSTED] Posts: 579 Joined: 14-April 07 From: Holy Terra Member No.: 41,610 |
Thats why you always delete viruses when you're in safe mode, or you end the virus' process first
|
|
|
|
Apr 16 2007, 10:51 PM
Post
#5
|
|
|
Privileged Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 628 Joined: 20-May 06 Member No.: 23,968 |
You don't need to deal with problems such as virii through safe mode nor antivirii programs. If you setup a limited user account like you should have for security and did all the proper settings to keep you perfectly safe(unless you do something inherintly stupid), then, most likely, you will:
a) Prevent a virus from being installed on your computer without your consent All antivirus programs are are a waste of money! Setup a router, limited user account, complex password on your administrator account, use a browser with few security holes and be careful what you install on your computer(Even if you just to the last two), you will be safe, and not sacrifice your processor speed for a process which your computer does not need. In addition you don't have to deal with the amount of space wasted by the antivirus software or the consistent nagging of it. Funny thing is this is exactly how Unix systems are setup, and that's half the equation of why they are more secure. |
|
|
|
Jun 1 2007, 08:25 PM
Post
#6
|
|
|
Newbie [Level 2] ![]() ![]() Group: Members Posts: 29 Joined: 30-May 07 Member No.: 43,924 |
How to manually remove viruses! Have you ever been in the possition that you know you have an virus but you dont have any antivirus?? Its almost impossible to remove it manual without knowing about a few tips & tricks. After reading this turtorial im sure you will know how to manual remove most of the virus lurking around. But that dosnt mean you shouldnt have any anti virus on you computer! Anyway, lets get starting with the turtorial.. I suppose you already know what safe mode is. If you dont try pressing the F8 key some times when you start your computer. You havto do this when your computer is about to start the first windows components. In win2k or xp i think you can press space and then F8 when it ask you if you want to go back to previous working setting. Enough talk about how to start you computer in safe mode, but if you want to manual remove viruses you almost everytime haveto do this in safe mode becouse in safemode most viruses dosnt start. Only some few windows component is allowed to run in safemode. So here is what to do. Step: 1: Start your computer in safemode. 2: If you know where the virus are hiding delete the executable file. 3: Open the registry and go to the keys below and add an : in front of the value of the string that you think its the virus. Like this, if string is "virus" and its value is "c:\virus.exe" change its value to ":c:\virus.exe". The : is like comenting out the value. But if you are sure its the virus you can just delete the string. Here are the keys you maybe want to look at: CODE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Runonce 4: The virus can start itself from some other places to. win.ini is the most common files that viruses can use. Soo you should find the files named win.ini and system.ini and look through them and see if you find anything. 5: Look through the startup folder that is normaly located in your profile directory \Start Menu\Programs\Startup. 6: Try searching for the virus executable to see if its hiding some other place. 7: Finally look through the list of services that windows is running. This list is often located under control panel - administrative tools - services. After this 7 steps just reboot your computer in normal mode and try to figure out if the virus is still there.. If not SUCCESS if yes, try to go back to safe mode and hunt some more. Off course this 7 steps will not work on every virus out there, but many of them. WARNING: Be careful when in the registery because you can cause serious damage to your system in there. ADVICE for delete virus manually, install NOD32 (in my opinion best antivirus program), put your computer in Safe Mode and last step is to start up NOD32, begin with "On-Demand Scan". |
|
|
|
Jun 1 2007, 08:39 PM
Post
#7
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 223 Joined: 27-May 07 From: SOME WHERE Member No.: 43,760 |
Very nice tutorial, not for me though... Im not greates with whatever you just said..
I just use an anti virus programm. i hear norton sucks? and slows u down? is that true This post has been edited by Tramposch: Jun 1 2007, 08:42 PM |
|
|
|
Jun 1 2007, 09:10 PM
Post
#8
|
|
|
Newbie [Level 1] ![]() Group: Members Posts: 23 Joined: 10-April 07 From: Azerbaijan Member No.: 41,391 |
Norton is powerfull antivirus but really slows computer down. NOD32 is the best antivirus. and among free antivirs Avast is good. AVG is also not bad.
This tutorial is fine for newbies. But most viruses can not be so easily found and deactivated. Use ANTIVIRUS instead!!! |
|
|
|
May 27 2008, 03:09 AM
Post
#9
|
|
|
Trap Double Mocha Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 2,360 Joined: 21-September 07 Member No.: 50,369 |
Is this safe? How To Manually Remove Viruses! I deleted two cookies and a misleader downloader app that was infecting my computer; I ran AVG Free, it told me the virus and its location, but said I had to download the pro to have them delete it. So I followed the path, read something like "C:///Windows/temp/mssole.Dll" (Thats not correct but its approximate), found the file, and deleted it. I just wondered, did it remove it all? I don't have any trouble with it, but I didnt before either, it just said it was high r |