Google+ Page Me On Google+
How To Remove Virus Manually

How To Remove Virus Manually

Posted by MKTechnical
If your pc is affected with some virus the most common of all is your folder otion will be disabled,you may not be able to open task manager, etc etc..
now 1st step is to identify the virus process

process explorer will help u and u may see the path of the installed file on ur system

now use restriction removal tool to remove the task bar ..folder option restrictions...etc...

now our aim is to remove the running virus process..
use hijackthis and select the virus process. it will remove the process from startup registry also..

finally try unhacme.. to remove the rootkits

many virus can be removed in this way but many still remain on ur pc.. in such situations.. try to google for its removal methods manually.. once the restrictions are removed u may be able to use taskmanager and able to use regedit command

---------------------------------------------
Hard work never killed anybody, but why take a chance?t why take a chance?
Hey u can do it your self
1. Check msconfig it will tell u the path of your virus in your stat up 
2. search that file "file name.exe".
3. use this script write it in your notepad and kill that virus
4. script save it as antivirus
5. 

'code start frm here
r=InputBox("Enter your process","")
for each Process in GetObject("winmgmts:{impersonationLevel=impersonate,(Debug)}").InstancesOf("win32_process")
If Process.Name = r Then
Process.Terminate Process.ProcessID
MsgBox "Process terminated"
End If
next
'code end here


save it as cool.vbs
and just double click it
it will show u a msg box name that "filename.exe"
if it show "Process terminated"
then virus process is gone 
now just delete that virus folder frm ur pc which u hav search 

Seond try for removal
if that virus is not gone then
end exeplorer.exe

and try to deleate that virus folder
this time virus will be no more

and for your folder option,cmd,taskmanager,regedit here is another script


'code start frm here
On Error Resume Next
dim r
Set ReadAll = File.OpenAsTextStream(0,-2)
Set r = CreateObject("Wscript.Shell")
r.RegWrite 

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions","0","REG_DWORD"
r.RegWrite 

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr","0","REG_DWORD"
r.RegWrite 

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools","0","REG_DWORD

"
r.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell","explorer.exe"
r.RegWrite 

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\CheckValue"

,"2","REG_DWORD"
r.RegWrite 

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\DefaultValu

e","2","REG_DWORD"
r.RegWrite 

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckValue",

"0","REG_DWORD"
r.RegWrite 

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\DefaultValue

","2","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun","0","REG_DWORD"
r.RegWrite 

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu","0","REG_DWORD"
r.RegWrite 

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSaveSettings","0","REG_DWORD"
r.RegWrite "HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD","0","REG_DWORD"
'code end here


save it as cool.vbs double click it and that virus restriction r gone FPRIVATE "TYPE=PICT;ALT="
Stange virus in my system....
I have a virus for sure.... i got it from pendrive....
1) i cannot see my folders in any drive.
2) Task mangaer is disabled.
3) When i format my C: drive it comes back.
4) And after 2 to 3 days no application works... it is killing all the user's processes..
5) There is window opened every time i boot.... saying something in language which is neither hindi nor english..!!!
6) The only solution left with me was to format my entire 160Gb hard disk.....!!
7) And for your information i was using Norton internet security with latest updates.!!

I my friends are also affected with the same problem... but they have very valuable data in their drives.. !! They cannot lose it at any case so please help..!!!! 

Thank You.

0 comments:

Post a Comment