A huge number of users have encountered a banner that appears when the operating system starts up. To remove such a virus, you need to try several different methods.
Necessary
CureIt
Instructions
Step 1
Use another computer, laptop or mobile phone to open the following sites: https://www.drweb.com/unlocker/index, https://sms.kaspersky.com, https://www.esetnod32.ru/.support/winlock. Find special fields on the opened Internet pages and fill them in with the text of the viral banner. Usually a telephone number is required
Step 2
Each site will offer you several options for passwords. Enter them in the banner field to disable it. This method allows you not to use additional programs, but it works extremely rarely.
Step 3
Restart the infected computer and hold down the F8 key. In the menu that opens, select the "Windows Safe Mode" item. Press the Enter key. Wait for your OS to boot into Safe Mode. Connect to the internet and open the link pag
Step 4
Download an application designed to scan your system and find virus files. Restart your computer and enter normal operating system mode. Start the CureIt program. During the scan, windows will appear prompting you to delete the virus files. Confirm this operation. Restart your computer after scanning is complete.
Step 5
If the virus banner continues to work, then repeat the procedure for entering the safe mode of the operating system. Open the local drive where the operating system is installed and navigate to the Windows folder. Open the System32 directory. Search for all dll files located in the selected directory.
Step 6
Find among these files those whose names end with the letters lib. Select them and delete them. Restart your computer and make sure there is no virus banner.
