Monday, February 1, 2010

How to remove virus from PC without using Antivirus programs

1st Method :

Don't click on Ok , just choose 'Cancel'. Open the Command Prompt by typing 'cmd' in the run box. In the command prompt type the drive letter: and press enter . Now type dir /w/a and press enter.
This will display a list of the files in the Flash drive or Hardisk. Check whether the following files are there or not
Autorun.inf
Ravmon.exe
New Folder.exe
svchost.exe
Heap41a
or any other .exe which may be suspicious.
If any of the above files are there, then probably the USB drive is infected. In command prompt type attrib -r -a -s -h *.* and press enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files. Now just delete the files using the command del filename. example del Ravmon.exe. Delete all the files that are suspicious. To be on a safer side, just scan the USB drive with a latest anti-virus program like McAfee or TrendMicro's PCCillin to check whether it is free of virus or not. Now remove the drive and plug it again. In most of the cases, the real culprit turns out to be the "Autorun.inf" file which mostly gets executed when someone clicks Ok in the dialog window which appears above. Thus the infections can spread…




2nd Method :

1: Go to the "Run" command in the "Start" menu and input "cmd" in the text box. This brings up the command prompt in a DOS window.
2: Switch the Command Prompt to the drive infected with the virus by inputting it (the drive letter followed by a colon). Type in "attrib -s -h *.* /s /d" and press "Enter" once the prompt is reading the correct drive.
3: Bring up the drive's content directory by inputting the "dir" command. Look for any .exe files that are suspicious. Anything accompanied by a .inf or .dll file is a big red flag.
4: Rename the files that activate the virus--the ones that are attached to the .exe file. Type in "Rename" followed by the full file name followed by any harmless name you create. You can now access the drive without activating the virus.
5: Go to the drive folder where all the virus files are located. They are usually within the "Program Files" folder. Delete every one of them and clear out your recycling bin.
6: Open the registry editor by inputting "regedit" in the Run window. Search for the virus' registry keys, which are often within the folders with "HKEY" in the name. Delete all the registry keys associated with the virus.
7: Reboot the system once all the virus files and keys are removed.


Method 3:
Hi..
To delete virus without using using antivirus program follow the below steps:
Step 1: Start your command prompt, type cmd then press ok
Step 2: Select the virus affected drive in this case drive j:
type j: then press enter key to see the content on the drive j, you can type dir command.
Step 3: Type attrib -s -h *.* /s /d then press enter key
type dir to check whether it contain unusual .exe file
yes! it contains .exe file with autorun.inf
now you can delete these two files or rename these things.
In this case i will rename autorun.inf file into aa .
now you can access the drive j: without affecting the virus.
MntDrCore this is the harmful .exe aa this is the renamed autorun.inf.
now you can delete those two files.

1 comment: