HomeSecurity

How to Manually Remove Viruses From Your System

Like Tweet Pin it Share Share Email

Note: This solution will work only against those Viruses which does not infect Windows own Exe files e.g like explorer.exe

Virus Symptoms

You may have seen some unexpected things that should not happen. Some of the symptoms of viruses are:

Disables Task Manager

Disables Registry Editor

Disables Command Prompt

Sometime you have no application open but CPU usage goes over 50%

My Computer Drives not opening by Double Click

Automatic Shutdown

Computer Slows down

Hidden Files will not be showing

Folder Options will be disappear

Manual Removal

If you have tried all the solutions listed on our site and still could not disinfect your system then try to manually remove the virus using the instructions below. There are four steps
Caution: While the manual
process is going on do not open any My Computer drive through My
Computer

1. Process Terminination

In order to compelete the
instructions below. You need to have Process Explorer and Autoruns.
Download them separately

PowerExes Pack (3.3 MiB, 20,321 hits)

Close and exit all programs (even from tray) except Internet Explorer
or your internet browser.

Run process explorer by typing procexp in the start menu

Run and do as illustrated.


1111.jpg

After collapsing
1212.jpg
procexp.exe is Process Explorer’s own process
All the system process are collapsed in the system tree, so if you see a process like winlogon.exe in explorer tree then it is surely a virus
If you do see any suspicious process, Processes can be sought for their suspiciousness at http://www.processlibrary.com/
Right click on it if the process is found and then properties. In the path: field copy the path and Open Run Dialogue and paste the path there
Now terminate the suspicious task in process explorer
If the same process starts again then suspend the process by right clicking on it and click suspend on the menu. Remove the name of the application from path now listing only folder.

e.g If you have copied C:\WINDOWS\system32\mspaint.exe then remove mspaint.exe and you will see C:\WINDOWS\system32\ this in the Run Dialogue.
4444.jpg

2. File Deletion

The second step is deleting files. If you have installed powerexe, Start Menu–> 7-ZIP–> 7-ZIP File Manager which will show you all hidden files and go through the root path of every drive

screenshot010.jpg

Delete .exe and autorun.inf like

ravmon.exe, smss.exe,Funny UST Scandal.exe

But do not delete these files as these are system files

autoexec.bat, boot.ini, bootmgr,config.sys, io.sys, msdos.sys, ntdetect.com, pagefile.sys,ntldr, hiberfil.sys

3. Removal of startup entries

Now you have successfully terminated virus process the next thing is to remove those virus files which run upon system start.
Open Autoruns by typing autoruns in the Run Dialogue. Wait while refreshing completes.

In the Options –> Hide Microsoft Entries. And click Refresh button on the interface OR Close the program and start again

autoruns.jpg

After scanning completes select Logontab and uncheck all the entries be sure do not unselect any Microsoft Entry.Restart system for the changes to take effect.

4. Restoring Windows Default settings

Use Smart Virus Remover to restore some settings

Smart Virus Remover (unknown, 913,891 hits)

Now scanning your system for an fully functional Anti-Virus will be the last suggestion as my own Anti-Virus can only catch almost 13 viruses

Troubleshooting

Incase of any problem. you did a wrong move. Open Autoruns, in the Options –> Unselect Hide Microsoft Entries. And click Refresh button on the interface OR and select all entries .Close the program and start your system again.

Comments (93)

  • I do all of these processes you tell and also install your ravmon virus killer but i have same problem. Allypur ideas did’t effect on virus

  • Raja Ali can you tell me how did you know you have virus and what problems do encounter due to virus.

  • Hi

    Many Thanks to you found the process and killed it !!!!!!! Every thing is fine now. Thanks again

  • hello, how can i remove or recover my computer’s drive name and OPEN, EXPLORE….. ect to english from that unreadble form..
    thanks

  • Hello Adbulrab the problem you are mentioning is mainly because of Ravmon Virus

  • I have a small problem whenever I double-click my drives they autostart instead of opening Plz Help

  • Hi Guess u must be infected with a virus which goes on spreading n infecting ur system. Try using NOD32 Antivirus. Hope u’l get out frm this prob. : ))

  • hi u did a great work
    i am just tryd and sol 1 only from my own efforts

  • Tried this befor using this the virus had created various new folders with new names after using this the multiplying effect has stoped but when you click C drive it gets activated also some exe files with random names are been created in C:\windows\temp and folder by the name of ssvichosst is also been created in C drive kindly advice

  • i like your tools and tricks against viruses. i had a big problem in my folder option. today i am happy to solve this problem by TECHNO DIGITS. Thanks
    Ahmar Iqbal
    ahmar4u@hotmail.com

  • salama Muhammad Abdullah,

    yara great hay tu shehzaday…I just removed the crazy virus that made me crazy too… I work as software developer in denmark yara… would like to keep in touch with you… cha ja anti virus ki duniya mein..viruses di aisi di taisii…:D
    ab so jaon mein..sakon say…:P
    bye shye…
    iffi..iffi da best among bests..yaad rakhna..but tu guru hay ustaad..:)

  • i have done all these things but no progress.
    but thanks for your guidence.

  • SALam .. ,
    THe PRoBlem IS A Same bUT LiTTlE diFFerNT .. !! i uSEd THE WAy u mentioned how to fix folder option i go to the regedit and do as u mentioned but there is 1 problem my HIDDEN value is not 0 its 2 when ever i change it to 1 , after a while it goes back to 2 .. ??!?!?!?!?! ..
    AND .. ,
    WHenever i open my Drive IT OpeNs In A NEw WIndOW ANd A DOwnloAD PAGE APPEArs ? !! ANd My NOrTOn AntI vIrUs ALSo DETECt a HACKROOTKIT ..:S:S:S .. HELP PLZZ ..

  • Shahan, you should scan your system with a free online virus scanner .. It will remove all the traces of the virus from your system. Only then will you be able to change that value and it will not be changed again.

    You can select any online virus scanner from the link below:
    http://technodigits.wordpress.com/2007/06/27/free-online-virus-scanners/

  • WinRAR and Procexp works perfectly & kills new folder virus and makes system clean as it was before.Thank you for all these virus removal tools–Great work.

  • Thanx for the stuff
    i ws in a great need for that
    keep doing good work
    thanx
    wish u solve problem of many more, like ur info. has done for me
    bye

  • hi,
    Mr.Muhammad Abdullah,thanks for Ravmon virus removal tool.I run the tool,it showed no Ravmon virus but my problem with folder options not being displayed is solved.Now I can see folder options.

    Thank you very much

  • Thank But Still Run my computer Virus
    my OS WinXP & Windows 2000

  • my usb doesm’t work properly
    cannot copy full only half and being file currupt

  • hi…. this very good software…..nd easy to use it….

  • hi! can you help me to find and to know “how to restore the missing folder and the run settings” pls e-mail me….
    i nid 2 know this as-soon-as-possible… can you help me? plsss…

  • In my folder option,
    I’m changed show hidden files and folder to view my hidden fils but they already changed do not show hidden files and folder. how can i do that.

  • Hi,
    i just want to open my drive such as d:drive with double click rather than explore it.

  • i have a problem in my computer.i can not load any anti virus when i load any anti virus they not activatein my computer,i can not format computer help me

  • hi i did everything written on this page.. and in autoruns.. i did uncheck everything visible to my eye.. its what you’ve said.. NOW!!! i cant log into my computer.. whenever i typed in my password it kicks me off after 3 seconds.. what will i do? pls help me.

  • Blake, when you start your system, keep tapping F8 key for advanced boot options. Select “Last known good configuration” from the options. I hope this will solve your problem.

  • hi

    i’m trying to do what you’ve instructed but i cant run regedit..

    what should i do?

    can you send me some answer to my e-mail

  • what should i do if i cant run regedit

    zordick_08@yahoo.com

  • i have downloaded the process explorer and autorun software..but my win rar extracter is not working

  • I have tried all the methods/solutions but problem is still there and “The show hidden files and folders was not working at all. If I select the radio button “Show hidden files and folders”, and then press Ok .. the changes would just disappear upon opening the dialog again.”

    Earlier i resolved this problem by following your provided set of instructions and Ravemon removing tool. But, the problem is again there, and not removing.

    Please help…

  • i have the problem of hiden files and every time i start the computer then i see the computer say it infected so i tried all these but i didnt get any one can suggest thanks

  • Hi sir,
    I am facing the problem that show hidden files and folders not working
    I have tried to change the registry value but the at the follwing links

    HKEY_CURRENT_USER\Software\Microsoft\
    Windows\CurrentVersion\Explorer\Advanced and the changed value of hidden at right side area from 0 to 1

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL and changed the value of “CheckedValue” as a DWORD (hexadecimal) from 0 to 1
    It worked & Icould see d hidden files , folders.

    But after system restart the same problem occurred again.

    I scanned my system with kaspersky antivirus and found not a single virus.

    I downloaded the Ravmon Virus Removal Tool 3.1.1.
    When I double clicked on it it gave me d message
    Congratulations, Your computer seems to be from Ravmon virus .
    If you want to restore some windows settings or want to remove the virus from USB Disk, launch the tool now. Select yes to launch or no to cancel.
    I choosed
    yes
    remove virus from from Hard Disk
    Again it gave me the message
    Error Removng Ravmon Virus
    There was an error Removing Ravmon Virus. May be the virus has been removed already. Toget rid of the after effects of this Virus Use the restore windows dfault settings button.
    I choosed for default setting settings
    selected
    Restore all folder option settings
    Disable autoplay on all drives

    And restarted the system.

    I found the same problem
    The registry value of hidden & showall was rolled back to 0 again.
    Ravmon Virus Removal Tool 3.1.1. didn’t work.
    Pl suggest me what do now ?
    Here I will like to inform you that I fond a notepad document in C:\ named hook
    I am attaching the copy below for your reference
    29887079-2186250366 HIDING A FILE

    29887079-2186406616 HIDING A FILE

    29887115- 159771460 HIDING A FILE

    29887123- 306751842 HIDING A FILE

    29887123- 759095592 HIDING A FILE

    29887196-1897889234 HIDING A FILE

    29887196-1958670484 HIDING A FILE

    29887196-2168670484 HIDING A FILE
    I think something is there inyhe above contect
    Pl help me.
    Thank you.
    nipu

  • thanks a lot dude i m done with my hgidden files n folder thing now i would like to know how to enable my takmanager and remove newfolder.exe type of things..

  • Hi there one of the computers(its Windows XP Home) I work with contacted the Ravmon virus. Apart from the normal things this virus hides or disables, it seems to have somehow disabled or hidden Control panel. I used your removal tool and restored most of the the normal things this virus changes, however I cannot get back Control Panel, and when I double click on the c: in My Computer it Opens Excel. I cannot right click and go into Properties, it pops up with a error titled “Ristriction” saying “This operation has been cancelled due to ristrictions in effect on this computer. Please contact your network Administrator” PLEASE help and tell me how I can resolve this.

  • wew! i think im in love now to sohana… damn she gave me head ache… well ill try this technodigits to remove this probz…

  • This manual removal process REALLY WORKS. Thanks a lot. Keep up the good work.

  • ur folders are hidden well……no folder options….very simple…

    instal nero – 6…..and then u will find ur hidden folders…….only nero six verson…..if it is nero 7 hidden files will not shown to u …

  • please clean the virusus

  • i have a problem in SHOW HIDDEN FILES AND FOLDERS ..it is showing in the tool bar but when i am selecting to show the hidden files then the hidden files are not shown in the folder…

  • use Ravmone Virus Removal Tool to restore Windows Default Settings. Good Luck!!

  • here are some quick steps:
    1. download the process explorer and run it, killing the process tree of sscviihost.exe
    2. follow the processes below:
    End Task*
    ———-
    1. On desktop> right-click> new> shortcut
    2. Enter
    taskkill.exe /F /FI “IMAGENAME eq ssvichosst.exe”
    3. Next> finish
    4. Double click the shortcut file just created

    *In some case, if this “taskkill.exe” file is not available in the windows\system32 directory (esp. in laptops), then try to get it from someone’s comp.

    Enable Task Manager
    ——————-
    1. Start> run

    reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

    2. Start> run

    reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

    Enable CMD
    ———-
    1. Start> run

    reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableCmd /t REG_DWORD /d 0 /f

    2. Start> run

    reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableCmd /t REG_DWORD /d 0 /f

    Enable Regedit
    ————–
    1. Start> run

    reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

    2. Start> run

    reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

    Folder Option & Hidden Files
    —————————-
    1. Start> run

    reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFolderOptions /t REG_DWORD /d 0 /f

    2. Start> run

    reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFolderOptions /t REG_DWORD /d 0 /f

    3. Start> run

    reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v Hidden /t REG_DWORD /d 1 /f

    4. Start>run

    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v CheckedValue /t REG_DWORD /d 1 /f

    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v DefaultValue /t REG_DWORD /d 2 /f

    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN /v CheckedValue /t REG_DWORD /d 2 /f

    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN /v DefaultValue /t REG_DWORD /d 2 /f

    Delete Virus Files**
    ——————–
    1. Start> run> CMD
    del %windir%\sscviihost.exe /a /f /q
    del %windir%\system32\sscviihost.exe /a /f /q
    del c:\sscviihost.exe
    —also delete the files:
    C:\WINDOWS\SCVHSOT.exe
    C:\WINDOWS\hinhem.scr
    C:\WINDOWS\system32\SCVHSOT.exe
    C:\WINDOWS\system32\blastclnnn.exe
    C:\WINDOWS\system32\autorun.ini
    C:\Documents and Settings\All Users\Documents\SCVHSOT.exe

    **Do not double click these files, otherwise you have to start from the begining

    Delete Startup Launch of Virus***
    ———————————–
    Removing Autostart Entry from the Registry
    Removing autostart entries from the registry prevents the malware from executing at startup.
    If the registry entry below are not found, the malware may not have executed as of detection. If so, proceed to the succeeding solution set.
    1.Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
    2.In the left panel, double-click the following:
    HKEY_CURRENT_USER>SOFTWARE>Microsoft>Windows>
    CurrentVersion>Run

    3.In the right panel, locate and delete the entry:
    Yahoo Messenger = “%Windows%\SSCVIIHOST.exe”
    (Note: %Windows% is the Windows folder, which is usually C:\Windows or C:\WINNT.)
    Restoring Registry Entries
    1.Still in the Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
    2.In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>
    CurrentVersion>Winlogon
    3.In the right panel, locate the entry:
    Shell = “Explorer.exe SSCVIIHOST.exe”

    4.Right-click on the value name and choose Modify. Change the value data of this entry to:
    Explorer.exe

    Removing Added Registry Entries
    1.Still in the Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
    2.In the left panel, double-click the following:
    HKEY_CURRENT_USER>SOFTWARE>Microsoft>Windows> CurrentVersion>Explorer>WorkgroupCrawler>Shares
    3.In the right panel, locate and delete the entry:
    shared = “\New Folder.exe”
    4.In the left panel, double-click the following:
    HKEY_CURRENT_USER>SOFTWARE>Microsoft>Windows> CurrentVersion>Policies>Explorer
    5.In the right panel, locate and delete the entry:
    NofolderOptions = “1”
    6.In the left panel, double-click the following:
    HKEY_CURRENT_USER>SOFTWARE>Microsoft>Windows> CurrentVersion>Policies>System
    7.In the right panel, locate and delete the entry:
    DisableRegistryTools = “1”
    8.In the left panel, double-click the following:
    HKEY_CURRENT_USER>SOFTWARE>Microsoft>Windows> CurrentVersion>Policies\System
    9.In the right panel, locate and delete the entry:
    DisableTaskMgr = “1”
    10.In the right panel, locate and delete the entry:
    11.Close Registry Editor.
    Deleting the Malware File(s)
    1.Right-click Start then click Search… or Find…, depending on the version of Windows you are running.
    2.In the Named input box, type:
    *.exe (and delete all files with 245kb size and created may 9, 2007
    —hope this helps.. have yet to see if the virus attacks again… our server is still virus infested though… grrrr…

  • GREAT HELP !! THanks alot everyone for such an informative website.

  • It’s a great help. thank u very much.

  • Thanks for this comments . I recieved your comments and helpfull for me .

    Thanks Again

  • Cool site thank you to see my folder options

  • hello…
    i have a probem in yahoomessenger.the files below i mentioned ll automatically submit to others
    C:WINDOWSSCVHSOT.exe
    C:WINDOWShinhem.scr
    i am bored of it,plz help me

  • Thanks for your instructions! It worked well. I had the sscviihost.exe for quite some time now and your tips did wonders!

  • hello,
    in my computer one of the viruses is active and I cannot clear that,
    it makes autorun.exe in drivers & remove folder option, if I go in the folders, make it hidden at the return,
    how can I remove this virus forever?

  • When I open IE 7 the messege: Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…
    This messege comes up at the top of Internet Explorer 7 just like my PopUp Blocker.
    And this messege is in a Windows Secuity Alert box: Windows has detected an Internet attack attempt… Somebody’s trying to infect your PC with spyware
    or harmful viruses. Run full system scan now to protect yourPC from Internet attacks, hijacking attempts and spyware! Chlick here to download spyware remover for total protection. (OK/Cancel)
    These messeges pop up constantly and all they do is take me to antivirus websites.
    Someone please help….. How to get rid of this

  • When I open and work in IE 7 the messege: Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…
    This messege comes up at the top of Internet Explorer 7 just like my PopUp Blocker.
    And this messege is in a Windows Secuity Alert box: Windows has detected an Internet attack attempt… Somebody’s trying to infect your PC with spyware
    or harmful viruses. Run full system scan now to protect yourPC from Internet attacks, hijacking attempts and spyware! Chlick here to download spyware remover for total protection. (OK/Cancel)
    These messeges pop up constantly and all they do is take me to antivirus websites.
    Someone please Help….to get rid of this problem I tryed
    AVG; AVAST; AD-AWARE AND A-SQUARED; SPYWARE DOCTER & HIJACKTHIS ALSO…

  • thcccx this method is working
    finally the virus is removed

  • This stuff is good!

  • how to remove The Indonesian Smile (your system safe) Virus ?

  • Thanx for the help,

  • hi this os venki frm dsnr pls see this site raaaaaaaaaaaaaaaaaaaaa

  • hi!
    I am not able to see my hidden files and folder, how can i remove index.dat file, how can i fat my pc also.

  • Abhay, please see the following article to get your hidden files and folder back:
    http://www.technize.com/2007/05/13/show-hidden-files-and-folders-not-working/

  • how to remove Bhama.exe Virus From System

  • This is very helpful. My doubts have been cleared.

  • there is a virus in ”power exes pack”

  • hi sir,
    my system is getting slow downat the start up.there r items on start up but still its getting slow down.i’m using avast antivirus

  • got a problem since yesterday. the so called virus remover 2008 is loaded in to my labtop while I was downloading materials. Then most of the system becomes unfunctional. Like Register editor, window task Manager , Display properties windowand others…..not working. Latter I tried to enable both …But this virus remover automatically poup different websites and loaded different malewares in to my PC and almost my pc is not working…….For this I tried to download spyHunter software and scan it. It shows me there are different viris in the registers, but it asked me to buy the licence to clean it. My problem is in our country there is NO systems to buy online …..and . Please could you tell me how to remove such things manualy from the registers? or any mechanisim that will remove……from my PC. My thesis document is in my Labtop and I am expected to present after two days. Please give me your hand as soon as possible.

  • this smart virus software is good but it has to improve. the softwre is still not remove some viruses. you should add more features in it so it can able to remove some more viruses.although i like this software.good luck keep it up.

  • Generally:

    – Can viruses infect monitor or printer ?

    – Does reformating the hard drive eliminates all viruses or some are so smart that they save themselves by re-installing themselves druring formating?

    don

  • Most of the viruses are removed just by formatting. For some viruses, we have to repartition. If you are formatting all your hard drive, it’s better to repartition too.

  • hi this kundan singh
    can u help me.
    my ystem was so slow working and virus has affected my system .
    windows shows the message “you may be a victimof software counterfiting ” ” this copy of windows didi not pass genuine windows validation ”
    “wallpaper is change automaticaly and screen show blank (black colour)”
    task manager not show .

  • I have tried all possible solutions (including yours) but it seems none of these really “actually” works. Yes, using PowerExes Pack kills the process, 7-zip removes the .exe file, and Autoruns prevents it from automatically opening. BUT THOSE DO NOT ENTIRELY REMOVE IT FROM THE SYSTEM.

    Being desperate about the matter, what I did is I inserted the Windows CD in my CD drive, went to Recovery Console, and tried to delete the .exe file manually since I know the path, thanks to PowerExes Pack. Fortunately, after changing the attribute of the file before it can allow you to delete it, it was gone from my system.

    On the other hand though, it left me with my Task Manager still disabled. Hope you can figure some tweaks to bring it back.

    Still, nice work..

  • Dear Sir/ Madam

    Please i would like to inquire to you regarding the problem on my compputer, if i stolled AUTOCAD software on my system the problem will appear this the problem – (AVG miniport driver #2)I can’t stolled the AutoCad software couse this problem. ANTIVIRUS GOLD I ALREADY DELETED FORM MY SYSTEM, kindly give me a answer how to solve this problem?

    Hoping for your kind answer on this matter is highly appreciated,

    Best regards,

    Your faifhfully,

  • This solution looked like it worked for me. Great job!! Didnt see the symptoms of the virus again after doing all this but would want to wait for a day or two to see if this manual process has fully removed the virus from my system.

  • I have problem, my computer got infected with viruses, I think I have gotten them all taken off but not sure. The problem I have is I can not change my desktop background now. All I can do is change the color. Can you help me?

    Kevin

  • Thanks a lot, you saved my hopeless hard disk from a certain format!!
    I had a virus “Winfiles.exe” and I downloaded that pack and followed the procedure and it was more than effective in removing it 🙂
    Thank you so much

  • my computer has been infected by kiddo,autolt,revmon and many more and has been disable control panel, network connection, wifi connection, and I cant install any tools that can help me to remove virus. and everytime I’m running my computer it take almost 10 min to get everythings done. I hope someone can help me. Please email me at khai90@yahoo.com

  • I did all the process but my system restarts when I click for one folder. In that folder I have downloaded some softwares from Internet. I think virus is hidden in that folder.

    • Ayub I think the folder that you’re clicking is not a folder. Infact it’s a virus. Open Windows Explorer (My Computer) –> Tools –> Folder Options –> View. Uncheck Hide extensions for known file types. Now you can easily differentiate between a file and a folder. Observe the folder you’re clicking closely and see if it’s a folder or some type of exe file. If it’s an exe file, your computer is infected with a virus. I would recommend installing some good antivirus and scanning your full system.

  • Please help………Here is my computer problems:

    Open my PC one day found out got a virus. I ran McAfee for 5 mins and it shut down by itself couple mins after start scanning. Turn my PC on again and do scan online by TrendMicro HouseCall but same thing happened. It shut down by itself couple mins when I start scanning. Anyone have any advice how to deal with this? Many thanks.

  • Pls i have go through your lesson and download all tool but when i try to run the files they all disappear and my avg 8.0, even if my browser should try to open any page concerning ahsan’s virus, the browser to will disappear.
    Pls help me.

  • Hallo…

    First of all I want to express my respect to all of your efforts…you are really doing a great job… I used this sites advice in many of the cases I got, and most of them worked!

    BUT…this time, I am having a more complicated problem,

    No Regedit
    No Task Manager
    No Folder Options
    and many of the other problems…
    I use your tools….and I am using MalewareBytes Remover (it is very useful to help me locate the viruses or the malewares and I go and delete them my self)

    but I keep getting 3 different *.exe names every time i do my search and analysis and they are always located in the temp folder under administrator in the documents and settings folder.(obviously Generated randomly everytime I restart with a totally different names by a mother viruse that I am not able to locate at all using anytool… and I have doubts that it is in the system32 folder)

    so even if i delete them and delete any suspicious objects … I believe there is one file causing all these problems and I am not able to find it….

    please please please!!! I WILL REALLY Appreciate it if you came with any update or tips that might solve the problem!!

    Thanks again for the Fantastic effort…

  • hello,
    i hav a problem wid my system dat i m not able to connect to any antivirus site so please help me out

  • Hi, i have a terrible anoy virus in my removable flashdisk, how can i remove the virus it is always re-copying itself into funny folders that cant be opened with names like p*rnstar, s@x pics, assingnment, work, nfs, chris brown, etc..

  • hai,i had a problem with hidden files.in my computer properties,views hidden and dont hide is not working and when i click on wav or other formate movie files,automatically closed every thing.plz suggest me,how can i remove the virus from my pc.

  • hi…my pc is infected with selrahc.exe, how can i remove this?thanx

  • Decreasing Free space of C: drive when I access folders in the C: drive.I’v noticed
    that if folder contain images by opening that folder a file named Thumbs.db is created .I’v runned Eset and A-squared Anti Malware.Even after i the formatting and reinstallation of the OS the problem persists.Pls help …

    • Author

      ate
      Decreasing Free space of C: drive when I access folders in the C: drive.I’v noticed
      that if folder contain images by opening that folder a file named Thumbs.db is created .I’v runned Eset and A-squared Anti Malware.Even after i the formatting and reinstallation of the OS the problem persists.Pls help

      This file contains the thumbnail previews of images. the small images for previews only

  • I had a problem with my mouse being uncontrollable. when i unplug it from recharge it works fine. when it is plugged in it moves all over the page. After I completed a virus scan it came back with 1 infection called program files(x86)/cheat engine/dbk32 system is infected with hacktool.rootkit. will this method help?

  • I cannot keep my task manager enable even after all this process…plz help

  • Hello
    I have a big problem with my laptop. I have many viruses which seem to be coming from the folders TEMP and temporary internet files. I have tried to use your methods but it got worse. I’m using vista and i have avira antivir as antivirus. I can’t restore the system and i really dont want to re format. Any help would be greatly appreciated. thanks.

  • @Dool,
    Please disable your System Restore and then enable it again. This will delete all your corrupt System Restore files.

    Clean temporary files with CCleaner.

    Most probably this will solve your problem. If not, tell me and we can get another solution for you.

  • windows cannot access the specified device, path, or file. You may not have appropriate permissions to access the item.
    i keep getting this error message
    it’s on windows XP, and it is the admin account i am using

  • PowerExes Pack  That has a virus in it.  This site is bullsht000

  • i cant reformat my laptop to windows xp everytime i reformat it turns to blue pls help me. my recent os is windows 7 ultimate

Comments are closed.