ok so i never have backed up my registry.
could i use that to make everything go back to normal once i have killed the virus. instead of using an imaging program could i just sweep the computer,kill or quarantine the virus and then import a new registry?
Related posts:
2 responses so far ↓
1 knowguy // Oct 1, 2008
You can run antivirus and antispyware programs, but the sad fact is if you have found one virus on your computer, you probably have several. Cleaning the computer now requires you to follow these steps, because modern viruses and spyware entrench themselves in files that your computer needs in order to run:
1. Virus-check your data files (not application files– you have installer CDs for those).
2. Back up the data files, getting them off your hard drive.
3. Get your original operating system CDs that came with your computer.
4. Boot your computer from the operating system CD.
5. Select the option that erases your hard drive and then reinstall your system software.
6. Turn on your software firewall that came with your operating system.
7. Reconnect to the internet, and download *all* Windows updates, no matter how long it takes.
8. Reinstall your application software, and update the applications as much as you can.
9. Reinstall your data files.
10. Create a limited user account on your system that does *not* have administrator access, and web surf only from this account.
Yes, this is a pain in the butt. No, there is no other way. No, antivirus and antispyware programs cannot fix this problem on its own.
So, what do you do in the future?
1. Never click on links you find in an e-mail.
2. Never open an e-mail attachment, ever.
3. Only download files from a reputable website that you know is on the up-and-up.
4. Never use bit-torrent and other file-sharing programs.
5. Never use an unsolicited drive-checking site.
6. Turn off all java and java scripting by default, and only enable java and java scripting for sites that you know you can trust.
7. Never read an unsolicited e-mail, and delete spam immediately. It is possible to be hacked by reading an e-mail alone.
Please adhere to the ‘dont’s’ I provided above, because you will have to repeat the cleaning steps that I listed first *every time you get infected.* Anti-spyware and anti-virus programs are good to have, but they are a second line of defense. The best way to protect your system is you, and changing your behavior.
Good luck!
2 Mike O // Oct 1, 2008
Almost all viruses/spyware will have entries in the registry, that is what makes them hard to root out.
try mbam from http://www.malwarebytes.org, it’s been very good at eliminating the current spate of malware.
Leave a Comment