Has your computer been infected with a virus? Viruses and other malware can seriously endanger your personal data and information, and also have a drastic impact on the overall performance of your computer. This is a difficult problem to solve as many viruses are programmed to be extremely resistant. If your computer is infected with a nasty virus, this guide will show you how to get it back to normal operation.
Steps
Method 1 of 3: Run the Scans
Step 1. Back up your data
Before starting the virus removal process, make sure that all important data on your computer has been saved. This way you can be sure that no information will be lost if you need to format your computer hard drive. In addition, you can be sure to restore all your data and be up and running again as soon as possible.
Check out this guide for more details on how to back up all your data
Step 2. Check to make sure the problem is not caused by other factors
Sometimes a slow computer to perform normal operations can give the impression of being infected with a virus, when it can instead have a problem with the RAM memory, the hard drive, adware or related to countless other factors. A faulty hardware component, especially the hard drive, can significantly slow down the normal operation of your computer and cause damage to the files it contains.
This guide contains some tips on how to speed up normal computer operation
Step 3. Get the tools you need
You should have already installed anti-virus software on your computer, but if not, there are plenty of programs available for free or for a fee. Most paid products allow you to take advantage of a free trial period, which allows you to scan your system and remove any viruses that may be present. So do not worry about the cost of the product and proceed to download the program that seems to you the most suitable for the situation. Some of the most used options include Kaspersky, BitDefender, Antivir, and Trend Micro programs. You should only have antivirus software installed on your computer.
- You will also need to use several anti-malware programs. While many adware programs are technically legitimate, many others are ambiguous. This type of program may not be detected by your antivirus. Here are the most used anti-malware programs Malwarebytes Anti-Malware and Hitman pro. As with antivirus software, you shouldn't install too many anti-malware programs, as they can significantly slow down system performance, although unlike antivirus software, you can install multiple anti-malware programs at the same time.
- If the virus that infects the system prevents you from downloading files from the internet, you must proceed to download these programs using another computer, and then transfer them to the infected system via a USB device.
Step 4. Reboot the system in Safe Mode
A virus, in order to be able to carry out its activities, must be running. Most viruses run automatically when the computer starts, as if it were a Windows service. Safe Mode is the only Windows operating mode that prevents a virus from starting automatically. You will then be able to locate the infected file and delete it.
Step 5. Run system scans
Start a scan of the entire computer using anti-virus software. Quarantine any file indicated as suspicious by the scan results (most antivirus programs have the feature of isolating infected or suspicious files from the rest of the system). After the virus scan is complete, run an additional scan with each of the installed anti-malware programs. Each of these programs is capable of removing any infected files it can detect.
Step 6. Verify the operation of the computer
After running all the scans, reboot your system normally and check your computer's operation. Launch your web browser and any other programs that were previously malfunctioning. If the virus was successfully removed, celebrate! If not, continue reading the guide.
Method 2 of 3: Manual Virus Removal
Step 1. Download Autoruns
It is a program created by Microsoft TechNet that allows you to understand what is being performed every time the computer starts. This step allows you to have a very clear picture of all processes currently active on your computer.
- After downloading the program, extract the contents of the file into an easy-to-access folder, such as C: / Autoruns.
- Run the program before proceeding, to understand how the graphical interface is structured and how the services and programs that run when Windows starts are shown. It may seem a little daunting at first, but you just need to focus on a few significant areas.
Step 2. Configure Autoruns settings
In order to facilitate the detection of infected entries, you need to disable the display of some Microsoft services and include items that are most likely not currently selected. Access the Options menu and select the following check buttons:
- Include empty locations
- Verify code signatures
- Hide signed Microsoft entries
Step 3. Reboot the system in Safe Mode with Networking
Since most viruses run at system startup, along with Windows services, deleting the service causing the virus to start while the virus is running is of no use, as the malicious program will create a new registry key. In Safe Mode, however, only the services and drivers needed to start the operating system are loaded, allowing you to disable the services related to the virus that infects the system.
Restarting the computer in "Safe Mode with Networking" instead of starting the computer in "Safe Mode" allows you to access the internet to search for the nature of the programs that run when the computer starts
Step 4. Launch the Autoruns program
After starting the system in Safe Mode, start the Autoruns program. Double-check that the system entry display options are set correctly. Wait for the registry scan to complete, knowing it might take a moment.
Step 5. Start searching for suspicious entries
This is the most tedious part of the process, as you will have to search the web for all suspicious entries to understand if the process they refer to is legitimate or not. You will need to pay close attention to both the name of the entry and the path where the executable file is located.
- There are several websites that provide a Windows process identification service and can tell you exactly what the process in question represents, as well as letting you know if it is a potential threat. Some of the most used online databases include: Process Library, Bleeping Computer, and File.net.
- Focus on Autoruns' "Logon" and "Services" tabs. The graphic interface of the program is divided into several tabs which help to filter the information provided; in most cases, however, you will find what you are looking for in the "Logon" and "Services" tabs. In any case, do not ignore the other tabs, as some viruses may be listed in other areas.
- Take your time during this research process. Disabling a legitimate service could cause Windows to malfunction, so check each process very carefully before disabling it from running.
- Before deleting any suspicious registry entries, take note of the path where their executable file resides. Later you will need to locate these files and proceed to delete them.
Step 6. Delete the first entry related to the malware
When you find an infected entry, delete it by selecting it with the right mouse button and choosing the item "Delete" from the context menu that appeared. In this way the item in question will be deleted from the list of services to be run at system startup. However, this step will not delete any of its infected files from your computer.
Delete the registry entries, one at a time, then proceed by deleting the associated files. Only at this point can you concentrate on the next item. By doing this, you can be sure that you don't forget to delete infected files from your computer
Step 7. Delete the files associated with the registry entry you removed
Open the Windows Explorer window and navigate to the folder associated with the entry you deleted from the registry. If you can't see any files, you will most likely need to turn on the display of hidden files.
Repeat the procedure for each log entry to be deleted and for all associated files to be removed
Step 8. Restart your computer normally
At the end of the process of removing registry entries and all infected files, you can restart your computer as normal allowing all legitimate system services to run. This procedure will eliminate most of the most common viruses. Should your system remain infected, proceed to the next step.
Step 9. Consider reinstalling Windows
If you can't eliminate the cause of your computer's problem, reinstalling your computer's operating system may be the best solution. While this may seem extreme, it will be much quicker and easier to reinstall the operating system than to keep trying to locate and delete the infected file. Economically it will also be considerably cheaper than taking the computer to a professional service center. In all likelihood, you will have to use fewer programs than you think, making the entire process of reinstalling the operating system much faster.
- The reinstallation process will completely format your hard drive by removing any type of virus inside it.
- Before proceeding with the reinstallation of the operating system, make sure that you have backed up all your personal data and that you have the Windows product key handy. It may also be convenient to copy all the installation files of the products you normally use, such as internet browsers and antivirus, to a USB stick, so that you can have them quickly when the reinstallation of Windows is finished.
Method 3 of 3: Remove a Virus on Mac
Step 1. Install a Mac-specific antivirus
The days when it was not necessary to have antivirus software for Mac are sadly over. Since Apple's operating system has quickly gained popularity, viruses have emerged that can attack it. The creators of computer viruses today see Mac computers as valid targets for their creations, so being ready and protected is the best guarantee when you want to avoid that your beloved Mac is infected with a virus. Antivirus software is also the simplest means of removing existing viruses.
- Popular Mac antivirus programs include: Sophos, ClamXav, and Intego VirusBarrier, alongside paid products like Norton, McAfee, and Kaspersky.
- Make sure you only use one antivirus software at a time.
Step 2. Run a system scan
Use the newly installed software to check your computer for viruses. Make sure you also scan any external hard drives or USB sticks connected to your computer.
- Macs can also carry viruses for Windows computers even though they cannot be infected by this type of program.
- Eliminate any type of threats detected by antivirus software. Viruses made for Mac are usually much easier to remove with antivirus software than their Windows counterparts.
Step 3. Run a new scan using a second program
After completing the scan with the first antivirus program, uninstall it and install a second one. For this procedure, you can use two different free antivirus programs or one paid and one free. Running the second scan allows you to find any malware that was not detected by the first antivirus.
Step 4. Reinstall OS X
If the virus affecting the system is not removed by the antivirus software, reinstalling the operating system may be the best choice. If you've already backed up all of your personal data, the process won't take long and may even improve the performance of your entire system.
See [guide] for more details on how to reinstall OS X
Step 5. Remove Flashback virus
This virus was one of the first to terrorize OS X users. Apple updated the OS X operating system to address the security problem exploited by the virus to attack Mac systems and to eliminate it from already infected OS X systems. By not updating your Mac regularly you may not install this update.
Numerous programs can be downloaded to remove the Flashback virus from an OS X system, including F-Secure's Flashback Removal Tool
Step 6. Eliminate Mac OS X (MoneyPak) FBI virus
This program attacks the computer's internet browser by forcing a web page to load to warn you that the computer has been blocked by the FBI. The site in question informs you that by paying a large sum of money your computer will be restored. You can get rid of this virus by restoring Safari's default settings.
- Start Safari and access the "Safari" menu located in the menu bar.
- Select the item "Reset Safari …"
- Make sure that all items in the appeared list are selected.
- Press the "Reset" button.
