{"id":500,"date":"2010-09-30T13:14:05","date_gmt":"2010-09-30T18:14:05","guid":{"rendered":"http:\/\/wildow.com\/?page_id=500"},"modified":"2021-09-07T15:49:30","modified_gmt":"2021-09-07T20:49:30","slug":"virus-removal","status":"publish","type":"page","link":"https:\/\/wildow.com\/?page_id=500","title":{"rendered":"Virus Removal"},"content":{"rendered":"
    \n
  1. Malwarebytes<\/a><\/li>\n
  2. ESET Free web <\/a><\/li>\n
  3. eset website<\/a><\/li>\n
  4. Microsoft Security Essentials<\/a><\/li>\n
  5. TDS Killer<\/a><\/li>\n
  6. TDS Killer from Kaspersky site<\/a><\/li>\n
  7. FreeFixer<\/a><\/li>\n
  8. AdwCleaner<\/a><\/li>\n
  9. JRT – removal tool<\/a><\/li>\n<\/ol>\n

    Detection programs<\/p>\n

      \n
    1. Process Explorer<\/a><\/li>\n
    2. Monitor all network\u00a0 connections from infected machine<\/a><\/li>\n
    3. Handle Sysinternals<\/a><\/li>\n
    4. System Explorer- download <\/a>SystemExplorerSetup_700<\/a><\/li>\n<\/ol>\n

      Links<\/p>\n

        \n
      1. http:\/\/malwaretips.com\/blogs\/adware-win32-gamevance-virus\/<\/a><\/li>\n
      2. http:\/\/www.bleepingcomputer.com\/virus-removal\/<\/a><\/li>\n<\/ol>\n

        Registry fixes after virus removed<\/p>\n

          \n
        1. http:\/\/www.kellys-korner-xp.com\/xp_tweaks.htm<\/a><\/li>\n
        2. http:\/\/www.tweaking.com\/ <\/a><\/li>\n
        3. http:\/\/www.gegeek.com<\/a><\/li>\n<\/ol>\n

          Process to remove virus<\/strong><\/p>\n

          \n
            \n
          1. \n
            create a backup image of boot drive using Image for windows<\/div>\n<\/li>\n
          2. \n
            do not plug computer into main network. plug into dmz<\/div>\n<\/li>\n
          3. \n
            clean all temp files from the system %userprofile%\\temp<\/div>\n
              \n
            1. \n
            2. \n
              if possible look are number or running processes, note any that are using a constant % of the cpu<\/div>\n
                \n
              1. \n
                document the number of processes running<\/div>\n<\/li>\n<\/ol>\n<\/li>\n
              2. \n
                check scheduled tasks, sometimes they are started from here<\/div>\n<\/li>\n
              3. \n
                run autoruns.exe and look at all the start programs, download<\/a><\/div>\n
                  \n
                1. \n
                  make note of any that do not show a manufacturer.<\/div>\n<\/li>\n
                2. \n
                3. \n
                4. \n
                5. \n
                  boot into safemode with networking<\/div>\n
                    \n
                  1. \n
                    download and run tddskiller http:\/\/support.kaspersky.com\/downloads\/utils\/tdsskiller.exe<\/a><\/div>\n
                      \n
                    1. \n
                      run and see if it finds virus and cure<\/div>\n<\/li>\n<\/ol>\n<\/li>\n
                    2. \n
                      install malwarebytes and update and complete a full scan<\/div>\n
                        \n
                      1. \n
                      2. \n
                        save log file to memory stick in directory for customer<\/div>\n<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/li>\n
                      3. \n
                        download and install Microsoft Security Essentials<\/div>\n
                          \n
                        1. \n
                        2. \n
                          run scan of system<\/div>\n<\/li>\n<\/ol>\n<\/li>\n
                        3. \n
                          goto nod32 and run online scan off system<\/div>\n
                            \n
                          1. \n
                          2. \n
                          3. \n
                            reboot and run malwarebytes again<\/div>\n<\/li>\n<\/ol>\n