Cause and solution of virus killing failure

Today, computer users have spent a lot of energy dealing with viruses. When you use anti-virus software to scan and kill viruses, are you aware of the virus, but you cannot kill it? Why? What should we do? I will give a brief introduction to this.

 

● System File Restoration

The restore folder is a Windows Me/XP system-specific system restoration folder. viruses hidden in this folder cannot be cleared directly. Of course, these viruses cannot directly play a role. To clear these viruses, disable the "System restore" function of Windows, clear the System restore point, or directly Delete the content of the _ restore folder.

● Suspected computer virus

Sometimes the anti-virus software prompts "unknown.com. tsr. virus. In this prompt, unknown indicates "unknown", and tsr indicates the memory resident. This message generally shows executable files in a pure DOS environment, it indicates that the antivirus software has detected suspicious code in the file, which is similar to a virus, but is not sure what the virus is.

If a suspected virus prompt involves Type-Win32 code, it indicates a suspicious 32-bit code, which is a suspicious executable code in a Windows environment. For a suspected virus, you can directly delete the file or send these "suspected" virus files to anti-virus software companies for help.

●Ex _ file infected with viruses

Files with the extension name ". ex _" are part of the software installer, and viruses cannot be cleared directly. Only after the software is fully installed can it be cleared. This is similar to the virus processing method found during file COPY.

● Clear viruses in DOS

For viruses found in the boot area, such as POLYBOOT/WYX. B, use a clean system disk to start the system to DOS, and then clear the virus under DOS. If the virus in the boot area is infected, you can directly delete the file.

● Reference a virus in the initial System File

The following message is prompted during anti-virus:

C: Windowsrasil. pif worm. win32.opasoft. a virus has been deleted.
C: Windowsinstit. bat worm. win32.opasoft. a virus has been deleted.
C: Windowsalevir.exe worm. win32.opasoft. a virus has been deleted.
C: Windowsmarco. scr worm. win32.opasoft. a virus has been deleted.
C: WindowsSCRSVR.exe worm. win32.opasoft. a virus has been deleted.

After virus removal, many files cannot be found when the computer is restarted, and the virus still exists when the virus is detected again. The reference of these stubborn viruses should be in win. in the INI file, click Start> Run, type sysedit, and press enter to edit win. ini to delete the reference line for the virus.

● Latest Virus variants

Anti-virus software detects a new type of virus that does not exist in its virus database. Upgrade the virus database of anti-virus software to the latest version before killing it.