Thursday, May 6, 2010

How to Remove a Virus

If you suspect you have a virus (or any other malware), you should take steps immediately. The following procedures work for most malware (except perhaps for completely new, unknown or unusually malignant strains). It is better to complete all steps, so you can be (reasonably) sure that all traces have been removed. Signs to look out for (infections may cause one or several of the following)
  • Slow computer, and/or slow internet connection.
  • Strange pop-ups or web browser redirections (beyond those expected from dodgy websites).
  • Program failure, or inexplicab
  • le errors (even after a fresh install).System functions unavailable (eg: Control Panel, Task
  • Manager, Internet Explorer).
  • System giving a "RPC error", giving a window with a 30 second countdown to a restart.
  • Excessive internet cap usage, i.e high internet traffic on your computer.

STEPS:
  1. Run your virus-scanner, but beware, many modern viruses can circumvent (or hide from) anti-virus programs. Quarantine anything suspicious.
    • Make sure you are using a reputable antivirus. Some good free ones are Avira AntiVir, AVG, and Avast!
  2. Install MalwareBytes Anti-Malware and update it. Don't scan for malware yet.
  3. Install SUPERAntiySpyware and update it. Don't scan for malware yet.
  4. Reboot into Safe Mode - Restart your computer and press F8 before Windows loads. Press F8 several times if you need to. Select Safe Mode from the resulting menu. Safe Mode disables much of the startup routine (including some common Malware hiding places).
  5. Run your Malware Scanners - Run both the scanners sequentially, deleting any references found.
  6. Enjoy your sanitised computer.

No comments: