How to Manually Remove Viruses From Your System
Note: This solution will work only against those Viruses which does not infect Windows own Exe files e.g like explorer.exe
Virus Symptoms
You may have seen some unexpected things that should not happen. Some of the symptoms of viruses are:
Disables Task Manager
Disables Registry Editor
Disables Command Prompt
Sometime you have no application open but CPU usage goes over 50%
My Computer Drives not opening by Double Click
Automatic Shutdown
Computer Slows down
Hidden Files will not be showing
Folder Options will be disappear
Manual Removal
If you have tried all the solutions listed on our site and still could not disinfect your system then try to manually remove the virus using the instructions below. There are four steps
Caution: While the manual
process is going on do not open any My Computer drive through My
Computer
1. Process Terminination
In order to compelete the
instructions below. You need to have Process Explorer and Autoruns.
Download them separately
PowerExes Pack (3.3 MiB, 12,818 hits)
Close and exit all programs (even from tray) except Internet Explorer
or your internet browser.
Run process explorer by typing procexp in the start menu
Run and do as illustrated.
After collapsing
procexp.exe is Process Explorer’s own process
All the system process are collapsed in the system tree, so if you see a process like winlogon.exe in explorer tree then it is surely a virus
If you do see any suspicious process, Processes can be sought for their suspiciousness at http://www.processlibrary.com/
Right click on it if the process is found and then properties. In the path: field copy the path and Open Run Dialogue and paste the path there
Now terminate the suspicious task in process explorer
If the same process starts again then suspend the process by right clicking on it and click suspend on the menu. Remove the name of the application from path now listing only folder.
e.g If you have copied C:WINDOWSsystem32mspaint.exe then remove mspaint.exe and you will see C:WINDOWSsystem32 this in the Run Dialogue.
2. File Deletion
The second step is deleting files. If you have installed powerexe, Start Menu–> 7-ZIP–> 7-ZIP File Manager which will show you all hidden files and go through the root path of every drive
Delete .exe and autorun.inf like
ravmon.exe, smss.exe,Funny UST Scandal.exe
But do not delete these files as these are system files
autoexec.bat, boot.ini, bootmgr,config.sys, io.sys, msdos.sys, ntdetect.com, pagefile.sys,ntldr, hiberfil.sys
3. Removal of startup entries
Now you have successfully terminated virus process the next thing is to remove those virus files which run upon system start.
Open Autoruns by typing autoruns in the Run Dialogue. Wait while refreshing completes.
In the Options –> Hide Microsoft Entries. And click Refresh button on the interface OR Close the program and start again
After scanning completes select Logontab and uncheck all the entries be sure do not unselect any Microsoft Entry.Restart system for the changes to take effect.
4. Restoring Windows Default settings
Use Smart Virus Remover to restore some settings
Smart Virus Remover (681.7 KiB, 442,828 hits)
Now scanning your system for an fully functional Anti-Virus will be the last suggestion as my own Anti-Virus can only catch almost 13 viruses
Troubleshooting
Incase of any problem. you did a wrong move. Open Autoruns, in the Options –> Unselect Hide Microsoft Entries. And click Refresh button on the interface OR and select all entries .Close the program and start your system again.
"startup.scr" virus, Anti-Virus Solutions, can u remove secuity tool now, how to remove viruses manually, how to remove your system is infected, khatra.exe manual removal, logo, malware, manually remove virus, my computer drives not opening, ntdetect.com, ravmon, selrahc.exe, smart, smart vir, smart virus, smart virus remove, Smart Virus Remover, Troubleshooting, ust scandal, virus, virus internet explorer open in background, Virus Remover, Windows Vista, Windows XP, your system is infected, your system is infected desktop background, your system is infected wallpaper, your system is infected wallpaper fix, your system is infected wallpaper solved
hello,
in my computer one of the viruses is active and I cannot clear that,
it makes autorun.exe in drivers & remove folder option, if I go in the folders, make it hidden at the return,
how can I remove this virus forever?
[...] 6. Use Autoruns to delete startup entries like. If you do not know how to do this step then see Manual Removal Process here [...]
When I open IE 7 the messege: Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…
This messege comes up at the top of Internet Explorer 7 just like my PopUp Blocker.
And this messege is in a Windows Secuity Alert box: Windows has detected an Internet attack attempt… Somebody’s trying to infect your PC with spyware
or harmful viruses. Run full system scan now to protect yourPC from Internet attacks, hijacking attempts and spyware! Chlick here to download spyware remover for total protection. (OK/Cancel)
These messeges pop up constantly and all they do is take me to antivirus websites.
Someone please help….. How to get rid of this
When I open and work in IE 7 the messege: Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…
This messege comes up at the top of Internet Explorer 7 just like my PopUp Blocker.
And this messege is in a Windows Secuity Alert box: Windows has detected an Internet attack attempt… Somebody’s trying to infect your PC with spyware
or harmful viruses. Run full system scan now to protect yourPC from Internet attacks, hijacking attempts and spyware! Chlick here to download spyware remover for total protection. (OK/Cancel)
These messeges pop up constantly and all they do is take me to antivirus websites.
Someone please Help….to get rid of this problem I tryed
AVG; AVAST; AD-AWARE AND A-SQUARED; SPYWARE DOCTER & HIJACKTHIS ALSO…
thxxxx this method is working
finally the virus is removed
This stuff is good!
how to remove The Indonesian Smile (your system safe) Virus ?
[...] http://technize.com/2007/07/24/how-to-manually-remove-viruses-from-your-system/ [...]
iqbal’s…
Interesting post. I came across this blog by accident, but it was a good accident. I have now bookmarked your blog for future use. Best wishes. Ragheb Alama Website Team….
Thanx for the help,
[...] Posts: Folder Options Missing In Windows XP How to manually remove viruses from your system Show Hidden Files And Folders Not Working Registry Editing Has Been Disabled By Your Administrator [...]
hi this os venki frm dsnr pls see this site raaaaaaaaaaaaaaaaaaaaa
hi!
I am not able to see my hidden files and folder, how can i remove index.dat file, how can i fat my pc also.
Abhay, please see the following article to get your hidden files and folder back:
http://www.technize.com/2007/05/13/show-hidden-files-and-folders-not-working/
how to remove Bhama.exe Virus From System
This is very helpful. My doubts have been cleared.
there is a virus in ”power exes pack”
hi sir,
my system is getting slow downat the start up.there r items on start up but still its getting slow down.i’m using avast antivirus
got a problem since yesterday. the so called virus remover 2008 is loaded in to my labtop while I was downloading materials. Then most of the system becomes unfunctional. Like Register editor, window task Manager , Display properties windowand others…..not working. Latter I tried to enable both …But this virus remover automatically poup different websites and loaded different malewares in to my PC and almost my pc is not working…….For this I tried to download spyHunter software and scan it. It shows me there are different viris in the registers, but it asked me to buy the licence to clean it. My problem is in our country there is NO systems to buy online …..and . Please could you tell me how to remove such things manualy from the registers? or any mechanisim that will remove……from my PC. My thesis document is in my Labtop and I am expected to present after two days. Please give me your hand as soon as possible.
this smart virus software is good but it has to improve. the softwre is still not remove some viruses. you should add more features in it so it can able to remove some more viruses.although i like this software.good luck keep it up.
Generally:
- Can viruses infect monitor or printer ?
- Does reformating the hard drive eliminates all viruses or some are so smart that they save themselves by re-installing themselves druring formating?
don
Most of the viruses are removed just by formatting. For some viruses, we have to repartition. If you are formatting all your hard drive, it’s better to repartition too.
hi this kundan singh
can u help me.
my ystem was so slow working and virus has affected my system .
windows shows the message “you may be a victimof software counterfiting ” ” this copy of windows didi not pass genuine windows validation ”
“wallpaper is change automaticaly and screen show blank (black colour)”
task manager not show .
I have tried all possible solutions (including yours) but it seems none of these really “actually” works. Yes, using PowerExes Pack kills the process, 7-zip removes the .exe file, and Autoruns prevents it from automatically opening. BUT THOSE DO NOT ENTIRELY REMOVE IT FROM THE SYSTEM.
Being desperate about the matter, what I did is I inserted the Windows CD in my CD drive, went to Recovery Console, and tried to delete the .exe file manually since I know the path, thanks to PowerExes Pack. Fortunately, after changing the attribute of the file before it can allow you to delete it, it was gone from my system.
On the other hand though, it left me with my Task Manager still disabled. Hope you can figure some tweaks to bring it back.
Still, nice work..
Dear Sir/ Madam
Please i would like to inquire to you regarding the problem on my compputer, if i stolled AUTOCAD software on my system the problem will appear this the problem – (AVG miniport driver #2)I can’t stolled the AutoCad software couse this problem. ANTIVIRUS GOLD I ALREADY DELETED FORM MY SYSTEM, kindly give me a answer how to solve this problem?
Hoping for your kind answer on this matter is highly appreciated,
Best regards,
Your faifhfully,
This solution looked like it worked for me. Great job!! Didnt see the symptoms of the virus again after doing all this but would want to wait for a day or two to see if this manual process has fully removed the virus from my system.
I have problem, my computer got infected with viruses, I think I have gotten them all taken off but not sure. The problem I have is I can not change my desktop background now. All I can do is change the color. Can you help me?
Kevin
Thanks a lot, you saved my hopeless hard disk from a certain format!!
I had a virus “Winfiles.exe” and I downloaded that pack and followed the procedure and it was more than effective in removing it
Thank you so much
my computer has been infected by kiddo,autolt,revmon and many more and has been disable control panel, network connection, wifi connection, and I cant install any tools that can help me to remove virus. and everytime I’m running my computer it take almost 10 min to get everythings done. I hope someone can help me. Please email me at khai90@yahoo.com
appy@uitmperak you should certainly scan your computer with an online virus scanner. Here are some online virus scanners which are free:
http://www.technize.com/2007/06/27/free-online-virus-scanners/
I did all the process but my system restarts when I click for one folder. In that folder I have downloaded some softwares from Internet. I think virus is hidden in that folder.
Ayub I think the folder that you’re clicking is not a folder. Infact it’s a virus. Open Windows Explorer (My Computer) –> Tools –> Folder Options –> View. Uncheck Hide extensions for known file types. Now you can easily differentiate between a file and a folder. Observe the folder you’re clicking closely and see if it’s a folder or some type of exe file. If it’s an exe file, your computer is infected with a virus. I would recommend installing some good antivirus and scanning your full system.
Please help………Here is my computer problems:
Open my PC one day found out got a virus. I ran McAfee for 5 mins and it shut down by itself couple mins after start scanning. Turn my PC on again and do scan online by TrendMicro HouseCall but same thing happened. It shut down by itself couple mins when I start scanning. Anyone have any advice how to deal with this? Many thanks.
@danny: You should make sure that it’s not a hardware problem. May be the processor is getting heated up and turning off. Otherwise you should scan with another online virus scanner like Kaspersky.
http://www.technize.com/2007/06/27/free-online-virus-scanners/
Pls i have go through your lesson and download all tool but when i try to run the files they all disappear and my avg 8.0, even if my browser should try to open any page concerning ahsan’s virus, the browser to will disappear.
Pls help me.
Hallo…
First of all I want to express my respect to all of your efforts…you are really doing a great job… I used this sites advice in many of the cases I got, and most of them worked!
BUT…this time, I am having a more complicated problem,
No Regedit
No Task Manager
No Folder Options
and many of the other problems…
I use your tools….and I am using MalewareBytes Remover (it is very useful to help me locate the viruses or the malewares and I go and delete them my self)
but I keep getting 3 different *.exe names every time i do my search and analysis and they are always located in the temp folder under administrator in the documents and settings folder.(obviously Generated randomly everytime I restart with a totally different names by a mother viruse that I am not able to locate at all using anytool… and I have doubts that it is in the system32 folder)
so even if i delete them and delete any suspicious objects … I believe there is one file causing all these problems and I am not able to find it….
please please please!!! I WILL REALLY Appreciate it if you came with any update or tips that might solve the problem!!
Thanks again for the Fantastic effort…
hello,
i hav a problem wid my system dat i m not able to connect to any antivirus site so please help me out
Hi, i have a terrible anoy virus in my removable flashdisk, how can i remove the virus it is always re-copying itself into funny folders that cant be opened with names like pornstar, sex pics, assingnment, work, nfs, chris brown, etc..
hai,i had a problem with hidden files.in my computer properties,views hidden and dont hide is not working and when i click on wav or other formate movie files,automatically closed every thing.plz suggest me,how can i remove the virus from my pc.
hi…my pc is infected with selrahc.exe, how can i remove this?thanx
Decreasing Free space of C: drive when I access folders in the C: drive.I’v noticed
that if folder contain images by opening that folder a file named Thumbs.db is created .I’v runned Eset and A-squared Anti Malware.Even after i the formatting and reinstallation of the OS the problem persists.Pls help …
I had a problem with my mouse being uncontrollable. when i unplug it from recharge it works fine. when it is plugged in it moves all over the page. After I completed a virus scan it came back with 1 infection called program files(x86)/cheat engine/dbk32 system is infected with hacktool.rootkit. will this method help?
This file contains the thumbnail previews of images. the small images for previews only
Have you cleaned the virus
[...] How to Manually Remove Viruses From Your System [...]