|
|
|
|
![]() ![]() |
Mar 6 2008, 06:50 AM
Post
#1
|
|
|
Newbie [ Level 1 ] Group: Members Posts: 2 Joined: 6-March 08 Member No.: 28,919 |
How to remove particular type of viruses from your system? Will using Regedit help???If so how to do it using regedit?For instance my system is affected by NTdetect virus so what should i do to remove it???
|
|
|
|
Mar 6 2008, 12:11 PM
Post
#2
|
|
|
Super Member Group: [HOSTED] Posts: 500 Joined: 5-November 06 Member No.: 17,016 myCENTs:NEGATIVE[-20.12] |
How to remove particular type of viruses from your system? Will using Regedit help???If so how to do it using regedit?For instance my system is affected by NTdetect virus so what should i do to remove it??? NTDetect virus would be hard to remove, if I'm not wrong, it's loaded even before the windows itself, thus, it has nothing to do with registry. As for basic removal of virus - I would rather call it malware, since viruses are less nowadays, and virus don't goes through the registry to infect. To remove malware from the registry normally means removing it from the autoruns entries, so that it won't load itself the next time windows start, that way you can remove the malware itself by deleting it. If you don't do so, you won't be able to delete it while it's still running. In order to properly do that, you need to start windows in safe mode, by pressing F5 during startup of windows. You can keep pressing F5, in case you miss it. By using safe mode, windows will not automatically load any non default app, services or driver. Then you can easily remove those malware. I wouldn't recommend editing the registry directly, as it's quite hard to explain everything here, and it's error prone. Instead, you should use msconfig. Just goto Start\Run then type in "msconfig", and windows tools that help you manage your system config, startups services. Goto Startup, then look under the list from any suspicious apps. Uncheck it then click ok. After that just restart your computer and verify it. If you're not sure which one, then you might have to diesable all, and then slowly enable one by one to find out which is the one. The easier way would be to download virus scanner, run it in safe mode to fully detect and remove the malware. Worse case, you might need to burn a bootable virus scanning cd, then scan from it. Or if you know how to take out your hard disk, and have another pc around the house or office, just plug in there and scan from there. That's one of the cleanest way, since nothing loads from that harddisk, so you can clean properly. Good luck |
|
|
|
Mar 7 2008, 07:27 PM
Post
#3
|
|
|
Way Out Of Control - You need a life :) Group: [MODERATOR] Posts: 2,238 Joined: 16-August 05 Member No.: 7,896 myCENTs:34.00 |
I would strongly suggest to use Mc Afee free online scan, at least for diagnostic purposes.
here it is : http://fr.mcafee.com/root/mfs/default.asp Of course, if you use it too often, you will be gently asked to buy the product. But at least from time to time, it's really useful. |
|
|
|
Mar 17 2008, 04:23 PM
Post
#4
|
|
|
Newbie [ Level 2 ] Group: Members Posts: 13 Joined: 17-March 08 Member No.: 29,189 |
I would strongly suggest to use Mc Afee free online scan, at least for diagnostic purposes. here it is : http://fr.mcafee.com/root/mfs/default.asp Of course, if you use it too often, you will be gently asked to buy the product. But at least from time to time, it's really useful. Yes, MCafee is usefull but you need to buy each your a copy and fully reinstall it. |
|
|
|
Mar 17 2008, 05:35 PM
Post
#5
|
|
|
Colonel Panic Group: [MODERATOR] Posts: 2,870 Joined: 25-March 05 From: Toronto, Ontario, Canada Member No.: 3,233 myCENTs:2.01 |
Ummm... this isn't a virus, it's a hoax:
http://us.mcafee.com/virusInfo/default.asp...;virus_k=100355 xboxrulz |
|
|
|
Mar 20 2008, 07:05 AM
Post
#6
|
|
|
Way Out Of Control - You need a life :) Group: [HOSTED] Posts: 1,086 Joined: 2-August 05 From: Kapellen (Antwerp, Belgium) Member No.: 7,585 |
Please, don't go messing around with your registry if you don't know what your doing. Someone I know started deleting stuff in his registry to get rid of some malware and after rebooting almost nothing worked ... explorer wouldn't start, MMC couldn't load modules, regedit missed a DLL file, folder would appear empty, browsing to some folder was a hell and even system restore wouldn't start anymore making it almost impossible to fix the problem
Lucky for him I had a windows xp live that could restore his pc (okay, I was realy lucky to find the right tool, didn't even know it was in there doing that |
|
|
|
Mar 20 2008, 07:29 PM
Post
#7
|
|
|
Advanced Member Group: [HOSTED] Posts: 171 Joined: 1-October 07 From: United States Member No.: 25,237 |
You might need to use a program called HiJackThis. Have it scan you computer. Then you are probably going to have to check your startup entries to see if there are think loading up that are out of the ordinary (not specific to your system or software you installed/use). Then delete the entries if it pertains to your problem. You might have to do some research to narrow down the problem. It might take awhile. A web site called Castlecops might have some resources for bad entries to look out for. It will take some time but It is work it.
Then after that you might want to scan your computer with an antivirus software like AVG Free Edition', and another software for spyware call 'Spybot S&D'. When all that's done download yet another program called 'CCleaner' to remove unnecessary files and registry entries. Finally you might want to check your temp folder locations for traces of spyware, viruses, trojans. Last if you have XP/Vista you might want to get rid of your System Restore Points that may have been infected. (by they way It also helps if you disable system restore before you start cleaning up your PC. Many Online Security suites recommend this if their software installation has been compromised.) Hope this helps. Levimage |
|
|
|
Mar 21 2008, 10:25 PM
Post
#8
|
|
|
Newbie [ Level 1 ] Group: Members Posts: 3 Joined: 21-March 08 From: Kuala Lumpur Member No.: 29,292 |
I suggest that you visit http://www.symantec.com and search up for the virus which your system is infected with. There you will find the ways to remove them manually and automatically. Hope you find this useful.
|
|
|
|
Jun 23 2008, 09:21 PM
Post
#9
|
|
|
Super Member Group: [HOSTED] Posts: 557 Joined: 25-April 05 Member No.: 4,374 myCENTs:17.04 |
My suggestion is to reformat if you know that you have been infected by any type of malware. This excludes some of the less lethal varieties such as tracking cookies or the sort but anything that you have to ask if you need to modify the registry certainly deserves a reformat.
The first reason is that you can never trust your system after you have been infected. This wasn’t necessarily the case several years ago but with the rapid proliferation of rootkits, you simply can not trust what your computer is telling you. A rootkit (http://en.wikipedia.org/wiki/Rootkit) is a piece of software that is designed to alter the way the operating system kernel works. A classic example is hiding files from the system. A rootkit will insert itself on the same level as the operating system and hook into the Windows APIs responsible for displaying files and directories. When requesting a file or directly the rootkit will remove certain entries (namely its own files and anything else you want hidden). This means that the rootkit and payload is hidden from Explorer and even antivirus programs. If the antivirus program can’t even see the file or know if is on the system, how is it supposed to clean your system? The second reason for a reformat is time. In the end you will spend hours (days most likely) tracking down registry entries, randomly named files, and a whole slew of other ways that malware stays persistent on your system. After you think you have finally cleansed your system of the blight, the malware reappears and you are in the exact same position you were in before the hours of work Before you know it, is has taken longer than a reformat and complete installation of programs and settings. |
|
|
|
![]() ![]() |
Similar Topics
|
Lo-Fi Version | Time is now: 2nd December 2008 - 12:02 AM |