The computer has firmly taken its place in every home and office. There is practically no sphere of activity and production in which computer technologies are not used. And along with the widespread distribution, computers received their "diseases" - malicious software, which the computer is often unable to fight against. Therefore, you will have to remove the malware that has infected your computer yourself.
Necessary
free virus cleaning utilities: Dr. WEB CureIT !, AVZ, Kaspersky Virus Removal Tool 2010
Instructions
Step 1
If after infection the operating system is still functional and you retain control over it, then, first of all, download and run any of the free antivirus cleaning utilities. These include: Dr. WEB CureIT !, AVZ, Kaspersky Virus Removal Tool 2010 and the like. You can also use them alternately for reliability (but not simultaneously!).
Step 2
After cleaning your computer with antivirus utilities, close them and install the complete antivirus package if it has not already been installed. If the antivirus program is already installed, but does not start or does not work correctly, reinstall it and run a full scan of your computer.
Step 3
If the operating system is locked or does not start, then before restoring its performance, you can remove the malware with antivirus utilities included in the LiveCD - DrWEB LiveCD or Kaspersky Rescue Disk.
Step 4
There is also such a fairly common type of malware as a banner that blocks control of your computer's desktop and threatens to delete all the contents of your PC. You can remove it using the Winternals toolbox.
Step 5
Download the Winternals image and burn it to disk. Boot from the resulting disk. After loading the desktop, run the "Choose Windows root" utility from the ERD Commander package. Specify the C: / WINDOWS folder in the window that opens.
Step 6
After that launch ERD RegEditor from the same folder. Go to the following path - HKEY_Local Mashine> Software> Microsoft> Windows NT> Current Version> Winlogon. Find the Shell key in this folder. Open the path that it indicates and delete the malicious file (usually it looks like C:…../ xxx_video.avi.exe) and delete it.
Step 7
After that, change the Shell key with the value "explorer.exe". Reboot your computer.
