How to remove a Trojan Virus, Virus, Worm, or other Malware part two

Hi, I've talked in a previous article, How to remove a Trojan Virus, Virus, Worm, or other Malware part one , some of the basics of how to scan and deal with a Trojan Virus, Virus, Worm, or other Malware , now you will complete the story in the second part of the article.

How to remove these infections manually

I have finally arrived in the section that came here for. You're probably reading this tutorial because you are infected with some type of malware and you want to remove. This is with the knowledge that you have, and also assumes that you examined the programs running on your computer and find the one that does not look right. Did further research by checking that the program against a database of our startup or through Google search and learned that it is sore and now want to remove it.

If you choose a specific anti-virus program I hope you follow the following steps

Download and extract the Autoruns program by Sysinternals to a C: \ Autoruns 

Restart in Safe Mode so that you do not start malware when you do these steps. Many malware monitor the keys that allow them to start and if they notice that they have been removed, and will automatically replace that startup key. For this reason booting into Safe Mode allows us to overcome this defense in most cases.

move to the folder C: \ Autoruns you created in step 1, and then double-click on autoruns.exe.

When you start the program, click on the Options menu and enable the following options by clicking on them. This will put a sign in front of each of these options

next to each of these options

Include empty locations

Verify Code Signatures

Hide Signed Microsoft Entries

Then press the F5 key on your keyboard to refresh the list to start using these new settings

The program displays information about the startup entries in your 8 different tabs. For the most part , the name of the file you are looking for will be found under Login or services tabs , but you must check all the other tabs to make sure it does not load in other places as well. Click on each tab and look through the list to the file name you want to remove. Will be found on the file name under the column 's path . There may be more than one entry is associated with the same file as it is common for malware to create multiple startup entries . It is important to note that many of malware camouflage themselves by using the same file names as valid Microsoft files . It is therefore important to know exactly any file , folder, and they are in , that you want to remove . You can check the database startup we have to such information or request assistance in helping us Forum computer

Once you've found of the entries associated with malware, you want to delete that Login so it will not start over on the next reboot.to do it right click on the entry, and then select Delete Files.You will now remove this entry now restart your computer

Coming in Part III of the article