HOW TO ELIMINATE VIRUSES FROM YOUR COMPUTER MANUALLY, WITHOUT ANTIVIRUS
It is always advisable to have an antivirus installed on your computer, and always updated so that the database takes into account the most recent malware threats. However, there are two factors that can lead you to have to remove an antivirus manually. On the one hand, not having installed an antivirus before for whatever reason, and on the other hand, simply that your antivirus is not able to find and eliminate this threat that you may be experiencing on your computer.
For that reason, it is not a bad idea, if we have a minimum knowledge in computer science and software, to resort to the elimination of an antivirus of manual form. The problem, obviously, is that there are many forms of malware, and sometimes it is really difficult to find what is causing problems in our computer.
Obviously, the first step is to find where the virus is that affects your computer
It may seem trivial, but the main thing is to know exactly where exactly the virus is that is causing problems in our system. And for that, the first thing we should know is that there are a series of registry keys in the system that, most often, are modified by the pieces of malware to run automatically at each start of our computer.
To check them, we will simply have to press the Win + R keys that will open the Execute box. In this box we will have to enter the text 'msconfig' and press enter, so that a new dialogue box is opened with the programs, processes and services that are executed automatically every time the system is started.
Once here, in the tab 'Services' we can see if there is any suspicious entry, and taking its name we can copy it and search in Google, which will probably let us know if, indeed, it is a malware, or is simply a normal system service. And in case it is a virus, it is as simple as unchecking your box to disable the automatic start of it. In addition, it is also convenient to review the following registry entries based on our version:
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ WinlogonHKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon
In the last two, the value of the Shell entry must be 'explorer.exe', or else we will have detected that there is malware that is taking advantage of the service to run automatically without leaving clues.
Another important step, if we have detected what is the process executed by the malware, is to press Ctrl + Alt + Delete to open the System Task Manager and, once here, locate the running process. When we have identified and located it, it is enough to select it and click on "Finish process".
If you can not find or stop the virus with the previous methods ...
In some cases, viruses are specially designed so that, even if the user finds the service or process that is making it work, it is not able to stop it, disable it or eliminate it completely. And for this, we can either run any Linux distribution compatible with NTFS - file system - from a pendrive or external unit, or restart the computer and force it to start in safe mode, with the essential services for its operation. This second case, however, can remain a strength for the best designed malware files.
Delete files that have been using the virus
To protect themselves from the user and their intention to delete the files manually, the viruses are designed to be displayed as hidden files, or even as files belonging to the system. In this way, even if the user knows the name of the files that are causing problems in his computer, it is impossible to locate them on the computer with a normal search on a regular basis.
To do this, we must open the Windows Explorer and in the top menu, click on the Tools option. Once here, you have to display the folder options and, on the option View, check the option Show hidden files and folders and uncheck the option Hide protected files from the system. After this, we can use the search button in the Start menu to explore, in the whole system, with the name of the file that causes the malfunction in our computer. And evidently, if we delete it, we will have to go to the recycling bin to make sure that it is completely eliminated and it does not stay there, with the possibility of being reinstalled in our team.
0 komentar:
Posting Komentar