Welcome Guest ( Log In | Register)



 
Reply to this topicStart new topic
> How To Manually Remove Viruses!, a short tutorial
seargentpepper7
post Apr 16 2007, 01:02 AM
Post #1


Newbie [Level 1]
*

Group: Members
Posts: 12
Joined: 16-April 07
Member No.: 41,710



How to manually remove viruses!

Have you ever been in the possition that you know you have an virus but you dont have any antivirus?? Its almost impossible to remove it manual without knowing about a few tips & tricks.
After reading this turtorial im sure you will know how to manual remove most of the virus lurking around. But that dosnt mean you shouldnt have any anti virus on you computer!
Anyway, lets get starting with the turtorial.. I suppose you already know what safe mode is. If you dont try pressing the F8 key some times when you start your computer. You havto do this when your computer is about to start the first windows components. In win2k or xp i think you can press space and then F8 when it ask you if you want to go back to previous working setting.
Enough talk about how to start you computer in safe mode, but if you want to manual remove viruses you almost everytime haveto do this in safe mode becouse in safemode most viruses dosnt start. Only some few windows component is allowed to run in safemode. So here is what to do.
Step: 1: Start your computer in safemode.
2: If you know where the virus are hiding delete the executable file.
3: Open the registry and go to the keys below and add an : in front of the value of the string that you think its the virus. Like this, if string is "virus" and its value is "c:\virus.exe" change its value to ":c:\virus.exe". The : is like comenting out the value. But if you are sure its the virus you can just delete the string.
Here are the keys you maybe want to look at:
CODE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Runonce

4: The virus can start itself from some other places to. win.ini is the most common files that viruses can use. Soo you should find the files named win.ini and system.ini and look through them and see if you find anything.
5: Look through the startup folder that is normaly located in your profile directory \Start Menu\Programs\Startup.
6: Try searching for the virus executable to see if its hiding some other place.
7: Finally look through the list of services that windows is running. This list is often located under control panel - administrative tools - services. After this 7 steps just reboot your computer in normal mode and try to figure out if the virus is still there.. If not SUCCESS if yes, try to go back to safe mode and hunt some more. Off course this 7 steps will not work on every virus out there, but many of them.

WARNING: Be careful when in the registery because you can cause serious damage to your system in there.
Go to the top of the page
 
+Quote Post
mrhesham
post Apr 16 2007, 07:00 PM
Post #2


Newbie
*

Group: Members
Posts: 1
Joined: 16-April 07
Member No.: 41,746



you can try avast anitvirues is very fast and very eazy in use and u can try kaspersky its very fast too but make sure u update the
programme to find any virus in your system and scan your computer full scan and try to close all programme to
be sure you will find all virus fast and easy and remove it easy biggrin.gif and scan your computer evry time ....
Go to the top of the page
 
+Quote Post
X_X
post Apr 16 2007, 10:13 PM
Post #3


Newbie
*

Group: Members
Posts: 9
Joined: 16-April 07
Member No.: 41,750



Viruses hide themselves in computers.. its pretty hard for a normal user to find it.. and if he/she does find it.. now comes deleting it.... when you try to delete it something will pop-up saying you cant..

and ..ect
Go to the top of the page
 
+Quote Post
csp4.0
post Apr 16 2007, 10:36 PM
Post #4


NERVE: Interception
*********

Group: [HOSTED]
Posts: 579
Joined: 14-April 07
From: Holy Terra
Member No.: 41,610



Thats why you always delete viruses when you're in safe mode, or you end the virus' process first
Go to the top of the page
 
+Quote Post
Tetraca
post Apr 16 2007, 10:51 PM
Post #5


Privileged Member
*********

Group: Members
Posts: 628
Joined: 20-May 06
Member No.: 23,968



You don't need to deal with problems such as virii through safe mode nor antivirii programs. If you setup a limited user account like you should have for security and did all the proper settings to keep you perfectly safe(unless you do something inherintly stupid), then, most likely, you will:
a) Prevent a virus from being installed on your computer without your consent
cool.gif Quarantine a virus to nothing more than your account if you ran the setup program within your account. What this means is if anything goes wrong, you can just back up your data, delete your limited user account through your administrator account, recreate it, and you've removed the virus. However, if you ran as an administrator the process gets a bit complex, especially if you have one of the active virii that will hide themselves even in safe mode, or run as a protected process so you are unable to shut it down to delete it. At that point is when you should start digging for your backup CD and buy that DVD burner.
All antivirus programs are are a waste of money! Setup a router, limited user account, complex password on your administrator account, use a browser with few security holes and be careful what you install on your computer(Even if you just to the last two), you will be safe, and not sacrifice your processor speed for a process which your computer does not need. In addition you don't have to deal with the amount of space wasted by the antivirus software or the consistent nagging of it.

Funny thing is this is exactly how Unix systems are setup, and that's half the equation of why they are more secure.
Go to the top of the page
 
+Quote Post
webointer
post Jun 1 2007, 08:25 PM
Post #6


Newbie [Level 2]
**

Group: Members
Posts: 29
Joined: 30-May 07
Member No.: 43,924



QUOTE(seargentpepper7 @ Apr 16 2007, 03:02 AM) *
How to manually remove viruses!

Have you ever been in the possition that you know you have an virus but you dont have any antivirus?? Its almost impossible to remove it manual without knowing about a few tips & tricks.
After reading this turtorial im sure you will know how to manual remove most of the virus lurking around. But that dosnt mean you shouldnt have any anti virus on you computer!
Anyway, lets get starting with the turtorial.. I suppose you already know what safe mode is. If you dont try pressing the F8 key some times when you start your computer. You havto do this when your computer is about to start the first windows components. In win2k or xp i think you can press space and then F8 when it ask you if you want to go back to previous working setting.
Enough talk about how to start you computer in safe mode, but if you want to manual remove viruses you almost everytime haveto do this in safe mode becouse in safemode most viruses dosnt start. Only some few windows component is allowed to run in safemode. So here is what to do.
Step: 1: Start your computer in safemode.
2: If you know where the virus are hiding delete the executable file.
3: Open the registry and go to the keys below and add an : in front of the value of the string that you think its the virus. Like this, if string is "virus" and its value is "c:\virus.exe" change its value to ":c:\virus.exe". The : is like comenting out the value. But if you are sure its the virus you can just delete the string.
Here are the keys you maybe want to look at:
CODE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Runonce

4: The virus can start itself from some other places to. win.ini is the most common files that viruses can use. Soo you should find the files named win.ini and system.ini and look through them and see if you find anything.
5: Look through the startup folder that is normaly located in your profile directory \Start Menu\Programs\Startup.
6: Try searching for the virus executable to see if its hiding some other place.
7: Finally look through the list of services that windows is running. This list is often located under control panel - administrative tools - services. After this 7 steps just reboot your computer in normal mode and try to figure out if the virus is still there.. If not SUCCESS if yes, try to go back to safe mode and hunt some more. Off course this 7 steps will not work on every virus out there, but many of them.

WARNING: Be careful when in the registery because you can cause serious damage to your system in there.


ADVICE for delete virus manually, install NOD32 (in my opinion best antivirus program), put your computer in Safe Mode and last step is to start up NOD32, begin with "On-Demand Scan".
Go to the top of the page
 
+Quote Post
Tramposch
post Jun 1 2007, 08:39 PM
Post #7


Super Member
*********

Group: Members
Posts: 223
Joined: 27-May 07
From: SOME WHERE
Member No.: 43,760



Very nice tutorial, not for me though... Im not greates with whatever you just said..

I just use an anti virus programm. i hear norton sucks? and slows u down? is that true

This post has been edited by Tramposch: Jun 1 2007, 08:42 PM
Go to the top of the page
 
+Quote Post
Azeri_boy
post Jun 1 2007, 09:10 PM
Post #8


Newbie [Level 1]
*

Group: Members
Posts: 23
Joined: 10-April 07
From: Azerbaijan
Member No.: 41,391



Norton is powerfull antivirus but really slows computer down. NOD32 is the best antivirus. and among free antivirs Avast is good. AVG is also not bad.
This tutorial is fine for newbies. But most viruses can not be so easily found and deactivated. Use ANTIVIRUS instead!!!
Go to the top of the page
 
+Quote Post
iGuest
post May 27 2008, 03:09 AM
Post #9


Trap Double Mocha Member
***************

Group: Members
Posts: 2,360
Joined: 21-September 07
Member No.: 50,369



Is this safe?
How To Manually Remove Viruses!

I deleted two cookies and a misleader downloader app that was infecting my computer; I ran AVG Free, it told me the virus and its location, but said I had to download the pro to have them delete it. So I followed the path, read something like "C:///Windows/temp/mssole.Dll" (Thats not correct but its approximate), found the file, and deleted it. I just wondered, did it remove it all? I don't have any trouble with it, but I didnt before either, it just said it was high r