I noticed that most of the questions in this forum are from those who have trouble removing an unwanted program like a trojan, worm, spyware, etc. I hope I can be of some help. I have been collecting and doing research on computer viruses as a hobby for more than 20 years. There is an easy way to see if your computer is infected and also an easy way to remove them.
Trojans, Worms, Spyware, etc.
Usually you do not need an anti-virus program to see if your computer is infected. Use a Registry program like Registryfix, Tune-up Utilities, etc. to list the Startup files. Any new entries will usually be an unwanted program unless you have installed some new utilities which has inserted the new entries. Just delete the line with the Registry program. You can delete the line using Regedit.Exe but this can be tricky. Most trojans, worms, spyware, etc will use an entry in the Registry as a Startup program to activate itself when Windows starts. Some, especially the older trojans will execute itself with an entry in Win.Ini. I do not see this very often now as it is quite easy to remove the line containing the unwanted program in Win.Ini. Some file viruses will use the methods mentioned but most will infect some of the files loaded in by Windows when Windows starts.
Most of you are having trouble deleting unwanted files because most unwanted programs will have a copy of itself with an attribute of 22, hidden and read only. Windows will not allow any program with an attribute of 22 to be deleted. If you do not have NTFS file system, just boot up DOS taken from a Windows 98 computer and delete the file from DOS. You must take a copy of the file first. A lot of unwanted programs will rename one of the Windows file to another name and then rename itself to the name of the Windows file. Another way is to use Explorer to change the attribute of the file to "archive" while unchecking the "Read Only" and "Hidden box". This will usually but not always work.
A clever trick used by many writers of unwanted programs is to recreate itself when Windows starts. The unwanted program will reappear again although it has been deleted. These unwanted programs are usually recreated from the Recycled folder, a temporary file or a base 64 file. After deleting the unwanted program you must delete all files in the Recycled folder as well as all temporary files.
I hope the information will be of use to you. If you have problems please feel free to email me at:
I or one of my staff will try to help you. It will be completely free.
Should you came across any new virus, trojan, worm, etc. do send a copy to me for my examination. Please zip it with a password first.
You can also visit my site at:http://vbuster.netMod Edit:
E-mail address was removed for your safety. Please
, do not post your E-mail address in an open forum. This could lead to a lot more SPAM in your inbox, than you might want. ~tg
Edited by tg1911, 24 March 2007 - 11:35 PM.