Welcome Guest ( Log In | Register )




                Web Hosting

 
Reply to this topicNew Topic
Using Regedit To Remove Viruses, How to remove specific viruses using regedit
vyas4u
post Mar 6 2008, 06:50 AM
Post #1


Newbie [ Level 1 ]
Group Icon

Group: Members
Posts: 2
Joined: 6-March 08
Member No.: 28,919


How to remove particular type of viruses from your system? Will using Regedit help???If so how to do it using regedit?For instance my system is affected by NTdetect virus so what should i do to remove it???
Go to the top of the page
 
+Quote Post
faulty.lee
post Mar 6 2008, 12:11 PM
Post #2


Super Member
Group Icon

Group: [HOSTED]
Posts: 500
Joined: 5-November 06
Member No.: 17,016
myCENTs:79.88


QUOTE(vyas4u @ Mar 6 2008, 02:50 PM) [snapback]120027[/snapback]
How to remove particular type of viruses from your system? Will using Regedit help???If so how to do it using regedit?For instance my system is affected by NTdetect virus so what should i do to remove it???


NTDetect virus would be hard to remove, if I'm not wrong, it's loaded even before the windows itself, thus, it has nothing to do with registry. As for basic removal of virus - I would rather call it malware, since viruses are less nowadays, and virus don't goes through the registry to infect. To remove malware from the registry normally means removing it from the autoruns entries, so that it won't load itself the next time windows start, that way you can remove the malware itself by deleting it. If you don't do so, you won't be able to delete it while it's still running.

In order to properly do that, you need to start windows in safe mode, by pressing F5 during startup of windows. You can keep pressing F5, in case you miss it. By using safe mode, windows will not automatically load any non default app, services or driver. Then you can easily remove those malware. I wouldn't recommend editing the registry directly, as it's quite hard to explain everything here, and it's error prone. Instead, you should use msconfig. Just goto Start\Run then type in "msconfig", and windows tools that help you manage your system config, startups services. Goto Startup, then look under the list from any suspicious apps. Uncheck it then click ok. After that just restart your computer and verify it. If you're not sure which one, then you might have to diesable all, and then slowly enable one by one to find out which is the one.

The easier way would be to download virus scanner, run it in safe mode to fully detect and remove the malware. Worse case, you might need to burn a bootable virus scanning cd, then scan from it. Or if you know how to take out your hard disk, and have another pc around the house or office, just plug in there and scan from there. That's one of the cleanest way, since nothing loads from that harddisk, so you can clean properly.

Good luck
Go to the top of the page
 
+Quote Post
yordan
post Mar 7 2008, 07:27 PM
Post #3


Way Out Of Control - You need a life :)
Group Icon

Group: [MODERATOR]
Posts: 2,292
Joined: 16-August 05
Member No.: 7,896
myCENTs:99.39


I would strongly suggest to use Mc Afee free online scan, at least for diagnostic purposes.
here it is : http://fr.mcafee.com/root/mfs/default.asp
Of course, if you use it too often, you will be gently asked to buy the product. But at least from time to time, it's really useful.
Go to the top of the page
 
+Quote Post
coolblinger
post Mar 17 2008, 04:23 PM
Post #4


Newbie [ Level 2 ]
Group Icon

Group: Members
Posts: 13
Joined: 17-March 08
Member No.: 29,189


QUOTE(yordan @ Mar 7 2008, 08:27 PM) [snapback]120083[/snapback]
I would strongly suggest to use Mc Afee free online scan, at least for diagnostic purposes.
here it is : http://fr.mcafee.com/root/mfs/default.asp
Of course, if you use it too often, you will be gently asked to buy the product. But at least from time to time, it's really useful.

Yes, MCafee is usefull but you need to buy each your a copy and fully reinstall it.
Go to the top of the page
 
+Quote Post
xboxrulz
post Mar 17 2008, 05:35 PM
Post #5


Colonel Panic
Group Icon

Group: [MODERATOR]
Posts: 2,939
Joined: 25-March 05
From: Toronto, Ontario, Canada
Member No.: 3,233
myCENTs:38.79


Ummm... this isn't a virus, it's a hoax:

http://us.mcafee.com/virusInfo/default.asp...;virus_k=100355

xboxrulz
Go to the top of the page
 
+Quote Post
wutske
post Mar 20 2008, 07:05 AM
Post #6


Way Out Of Control - You need a life :)
Group Icon

Group: [HOSTED]
Posts: 1,141
Joined: 2-August 05
From: Kapellen (Antwerp, Belgium)
Member No.: 7,585
myCENTs:26.62


Please, don't go messing around with your registry if you don't know what your doing. Someone I know started deleting stuff in his registry to get rid of some malware and after rebooting almost nothing worked ... explorer wouldn't start, MMC couldn't load modules, regedit missed a DLL file, folder would appear empty, browsing to some folder was a hell and even system restore wouldn't start anymore making it almost impossible to fix the problem dry.gif .
Lucky for him I had a windows xp live that could restore his pc (okay, I was realy lucky to find the right tool, didn't even know it was in there doing that tongue.gif )
Go to the top of the page
 
+Quote Post
levimage
post Mar 20 2008, 07:29 PM
Post #7


Advanced Member
Group Icon

Group: [HOSTED]
Posts: 174
Joined: 1-October 07
From: United States
Member No.: 25,237


You might need to use a program called HiJackThis. Have it scan you computer. Then you are probably going to have to check your startup entries to see if there are think loading up that are out of the ordinary (not specific to your system or software you installed/use). Then delete the entries if it pertains to your problem. You might have to do some research to narrow down the problem. It might take awhile. A web site called Castlecops might have some resources for bad entries to look out for. It will take some time but It is work it.

Then after that you might want to scan your computer with an antivirus software like AVG Free Edition', and another software for spyware call 'Spybot S&D'. When all that's done download yet another program called 'CCleaner' to remove unnecessary files and registry entries.

Finally you might want to check your temp folder locations for traces of spyware, viruses, trojans.

Last if you have XP/Vista you might want to get rid of your System Restore Points that may have been infected. (by they way It also helps if you disable system restore before you start cleaning up your PC. Many Online Security suites recommend this if their software installation has been compromised.)

Hope this helps.
Levimage smile.gif
Go to the top of the page
 
+Quote Post
edmundlim
post Mar 21 2008, 10:25 PM
Post #8


Newbie [ Level 1 ]
Group Icon

Group: Members
Posts: 3
Joined: 21-March 08
From: Kuala Lumpur
Member No.: 29,292


I suggest that you visit http://www.symantec.com and search up for the virus which your system is infected with. There you will find the ways to remove them manually and automatically. Hope you find this useful.
Go to the top of the page
 
+Quote Post
tansqrx
post Jun 23 2008, 09:21 PM
Post #9


Super Member
Group Icon

Group: [HOSTED]
Posts: 566
Joined: 25-April 05
Member No.: 4,374
myCENTs:33.04


My suggestion is to reformat if you know that you have been infected by any type of malware. This excludes some of the less lethal varieties such as tracking cookies or the sort but anything that you have to ask if you need to modify the registry certainly deserves a reformat.

The first reason is that you can never trust your system after you have been infected. This wasn’t necessarily the case several years ago but with the rapid proliferation of rootkits, you simply can not trust what your computer is telling you. A rootkit (http://en.wikipedia.org/wiki/Rootkit) is a piece of software that is designed to alter the way the operating system kernel works. A classic example is hiding files from the system. A rootkit will insert itself on the same level as the operating system and hook into the Windows APIs responsible for displaying files and directories. When requesting a file or directly the rootkit will remove certain entries (namely its own files and anything else you want hidden). This means that the rootkit and payload is hidden from Explorer and even antivirus programs. If the antivirus program can’t even see the file or know if is on the system, how is it supposed to clean your system?

The second reason for a reformat is time. In the end you will spend hours (days most likely) tracking down registry entries, randomly named files, and a whole slew of other ways that malware stays persistent on your system. After you think you have finally cleansed your system of the blight, the malware reappears and you are in the exact same position you were in before the hours of work Before you know it, is has taken longer than a reformat and complete installation of programs and settings.
Go to the top of the page
 
+Quote Post

Reply to this topicNew Topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members: