Severally elapses my sister computer strike virus that adequately annoys. Antivirus that rigged can't detect, even update unsuccessful until install is Antivirus realso unsuccessful. Finally I try to switch off virus manually with help program Autoruns.
To is haven't have programmed it can download Autoruns.zip (576 KB) one that can look on program
Following trick may just either one aught method sort and my ordinary one utilize. Marginally, I divide to make the point switch off virus source manually without antivirus this into two stages, which is: Detecting virus or file source that mencurigakan (looked on by virus) and Trick Switches Off it.
First step, Detecting Virus
Largely computer which most infection, can know active virus source at computer by programs as Autoruns. Run autoruns.exe's program. If program not walks, rename's attempt autoruns.exe's file by the name of another. If baffled regular, can utilize program a sort another.
After Autoruns is opened, a part principal one in here and will be utilized is Logon's tab, since here featured by program sort (application) one that auto walking while we carry on windows.
Program Windows who SHALL ACTIVE
There are several Windowses important program at registers Autorun who shall active, no until its cheque sign be removed or even been erased. Usually its position is at uppermost part, which is: See the is image.
Reason why that program doesn't be erased (need Severally elapse my sister computer strike virus that adequately annoys. Antivirus that rigged can't detect, even update unsuccessful until install is Antivirus realso unsuccessful. Finally I try to switch off virus manually with help program Autoruns.
Following trick may just either one aught method sort and my ordinary one utilize. Marginally, I divide to make the point switch off virus source manually without antivirus this into two stages, which is: Detecting virus or file source that mencurigakan (looked on by virus) and Trick Switches Off it.
First step, Detecting Virus
Largely computer which most infection, can know active virus source at computer by programs as Autoruns. Run autoruns.exe's program. If program not walks, rename's attempt autoruns.exe's file by the name of another. If baffled regular, can utilize program a sort another.
After Autoruns is opened, a part principal one in here and will be utilized is Logon's tab, since here featured by program sort (application) one that auto walking while we carry on windows.
Reason why that program doesn't be erased (need to be activated), can read Tips article detect Virus existence. To ensure it, one that needs to be noticed is
Sourcing Virus
point's umpteen following that can be done to source mencurigakan's virus or file that reputed as virus:
1. Check will mark sense Autorun Entry (list programs) one that we perceive never menginstallnya. E.g. I have once see available its name one with location (Path's image) eventually at that computer never at install programs k Lite Codec Pack. Therefore that possible one of virus source. It often happens, e.g. available application with folder Corel Draw, but we never menginstall Corel Draw.
2. Sign decompressing crosses a cheque from Autorun Entry that mencurigakan, then icon Refresh's click (F5). If that cheque sign active back or emerging same new entry list and espoused by cheque sign, pretty much that is virus source. This trick sometimes have a few moments been waited, or Autoruns's application at closes before, then after a long moment is opened again to check it.
4. Virus source usually not only one, so needs to be looked for by Autorun's list another mencurigakan's one, well by as point 1 or 2. E.g. at location:
* And another, one that lies under of registers Windows Program that SHALL ACTIVE upon. After been gotten file list that mencurigakan or not being known, write name and its file location that can be seen from Path's Image information (Autoruns's program) at text's paper or file (e.g. with Notepad). To is was wonted maybe dafar will myriad. But it is not problem
Erasing list from Autoruns that just erase its reference only, so its file (its location is said at part).
Turned out Virus Source
After been gotten file list that mencurigakan, succeeding stage is me rename that file extension (don't be erased beforehand). I rename of windows usually won't successful, or sometime we don't know that file extension and can't be featured.
Trick that usually do ever successful be pass through media any other. E.g. going direct operating system of CD,DVD, or Flashdisk. E.g. CD Linux, MiniPE's Windows CD, UBCD4Win and another. Or can also we take down our Hardisk and is assembled at another computer (that bebeas virus) as Hardisk both of (secondary). In essentials that we can access (open) file and folder of list that we writes without activate Windows that is at hardisk, so virus can't active.
After we that booting can computer of other media
or put together hardisk at another computer, hereafter we look for files of lists already we make. Previously activates option to feature all file extension if was visible. Afterwards, rename all file extension that we gets. E.g. nama_file.exe becomes nama_file.exe.vir, viruz. etc. as viruz.dll.vir.
Trick upon its ordinary utilizes while antivirus can't detect to mark sense virus and usually successful. And experience also following helps success to find this virus source. If is still is at a loss or was confident of autorun's list whatever available, please at sets down deep comment, so we can mutually help and completing. Can read Tips article detect Virus existence. To ensure it, one that needs to be noticed is
Sourcing Virus
point's umpteen following that can be done to source mencurigakan's virus or file that reputed as virus:
1. Check will mark sense Autorun Entry (list programs) one that we perceive never menginstallnya. E.g. I have once see available its name one ffdshow.exe with location eventually at that computer never at install programs k Lite Codec Pack. Therefore that possible one of virus source. It often happens, e.g. available application with folder Corel Draw, but we never menginstall Corel Draw.
2. Sign decompressing crosses a cheque from Autorun Entry that mencurigakan, then icon Refresh's click (F5). If that cheque sign active back or emerging same new entry list and espoused by cheque sign, pretty much that is virus source. This trick sometimes have a few moments been waited, or Autoruns's application at closes before, then after a long moment is opened again to check it.
3. Of Windows Program list that SHALL ACTIVE in advance, check will mark sense another program at drd place which I give red line. On Windows Xp, suppose there's only 3 above files, which is rdpclip, userinit. exe and explorer.exe with location all the world like Image Path upon. Mark sense affix anothering to point out virus source possible. Cross a cheque with point 2nd.
4. Virus source usually not only one, so needs to be looked for by Autorun's list another mencurigakan's one, well by as point 1 or 2. E.g.
After been gotten file list that mencurigakan or not being known, write name and its file location that can be seen from Path's Image information (Autoruns's program) at text's paper or file (e.g. with Notepad). To is was wonted maybe dafarnya will myriad. But it is not problem.
Turned out Virus Source
After been gotten file list that mencurigakan, succeeding stage is me rename that file extension (don't be erased beforehand). I rename of windows usually won't successful, or sometime we don't know that file extension and can't be featured.
Trick that usually do ever successful be pass through media any other. E.g. going direct operating system of CD,DVD, or Flashdisk. E.g. CD Linux, MiniPE's Windows CD, UBCD4Win and another. Or can also we take down our Hardisk and is assembled at another computer (that bebeas virus) as Hardisk both of (secondary). In essentials that we can access (open) file and folder of list that we writes without activate Windows that is at hardisk, so virus can't active.
After we that booting can computer of other media or put together hardisk at another computer, hereafter we look for files of lists already we make. Previously activates option to feature all file extension if was visible. Afterwards, rename all file extension that we gets. E.g. nama_file.exe becomes nama_file.exe.vir, viruz. etc. as viruz.dll.vir.
After is finished all, while is it is tried that computer( back to activates windows). Recheck with Autoruns's program. If list that we rewrites appearance and espoused by cheque sign, or is still computer auspices appearance most virus infection, maybe there is umpteen other program that most overlooks. Sometime we have to try several times. If computer not walks, pretty much available dafar incorrect file our one attaches. rename's attempt returns that file to its origin (*.vir's extension decompressing).
