You can remove a banner from your computer in different ways. The fact is that there are many varieties of this banner, so each should, so to speak, have its own approach.
Instructions
Step 1
First of all, it should be taken into account right away that the appearance of such a banner in the operating system indicates ineffective protection. Therefore, to prevent such excesses, you should install effective protection (for example, antivirus Kaspersky Internet Security).
Step 2
The easiest way to remove the banner is if it doesn't block the registry, Windows Task Manager, and other custom commands. This is the initial version of the banner, which is not too difficult to handle even manually. First of all, you should go to the task manager (simultaneously press ctrl + alt="Image" + del). Find a banner there (as a rule, a suspicious name of a small size, works from the user). It should be disabled. Then go to: My computer - Operating system disk - WINDOWS - system32 - drivers - etc. From there, you need to delete the Hosts file. Then go to the registry: Start - Run - regedit - HKEY_LOKAL_MACHINE - Software - Microsoft - Windows NT - Current Version - Winlogon. Click on Winlogon twice, look at the Shell parameter. The path to the virus is indicated there (which must be removed in the usual way). And instead of the address of the virus, you should enter Explorer.exe.
Step 3
At the same time, you should make a full system diagnosis, in particular, using an antivirus (one that does not require the installation of CureIt), the CCleaner utility. You also need to temporarily disable System Restore, which is located: Start - All Programs - Accessories - System Tools - System Restore. If desired, the system recovery can be turned on again after the banner has been eliminated. After the performed diagnostics, the computer needs to be restarted. In theory, all traces of the banner should disappear.
Step 4
There are also especially dangerous versions of banners that simply block user actions. Including: task manager, antivirus. It is advisable to solve this problem with the help of another computer with Internet access. You need to write down the banner codes and enter them here from another computer: https://virusinfo.info/deblocker/. Then it will be possible to unlock. Then you should do a full computer diagnostics (as in the case of a banner that does not block system processes).
