Punish the rascal do not beg! Manual removal of malicious software methods

Punish the rascal and not beg

Rogue software is now enemies, this thing although the harm does not have the real virus to be serious, but also can not be belittled. Small Knitting home Notebook Ann is win 5 SP, a fool did not install a firewall on the Internet, just 3 minutes, the system to remind the installation of what software, I see is a malicious program, want to clear the impossible. I was thinking of restarting the computer, and the rabbit cleared it, but the system is finished and cannot be started.

Now, we encounter malicious software, more is the idea of using a variety of software to remove, such as Super Rabbit, such software is very convenient to use, but there are certain problems. For example, do you have no such software on hand? Or the software can not start, you can not download the Internet, how about this?

You really do not look down on these issues, small series often met, especially for a friend to repair the computer is commonplace, not whose computers are like me to prepare a variety of software, have problems brought over to use. Often a look at the problem, but there is no corresponding tool on hand, that hard to forget.

So here is a small series to introduce some manual cleaning malicious software methods, in fact, these practical methods in the Internet has long been, but many people do not pay attention. I hope you can pay attention to this article, the key is to master their own methods the most important.

However, small knitting here first and everyone, the following methods are basically for the Windows Registry, the operation of a certain degree of risk, please be sure to pay attention to the registry backup and recovery. In addition, at present some malicious software does not rely entirely on the registry to do evil, so this method may not be fully effective, in fact, please use the combination of special software.

Prerequisite knowledge--backup and recovery of the Registry

First we'll introduce the backup and restore of the registry to Win 2000 as an example of the XP method and 20,001 samples.

Windows 2000 stores its configuration information in a database called the registry, which contains profiles for each computer user, as well as information about system hardware, installed programs, and property settings, which Windows 2000 continues to refer to during its run. The registry is stored in binary form on your hard disk, and incorrectly editing the registry can severely damage your system. Therefore, it is strongly recommended that you back up the registry information before you change the registry. To prevent fatal errors when modifying the registry, it is important to understand the backup and recovery methods of the registry files.

In addition, in order to study the structure of the registry, you can also save a primary key or subkey in the registry as a text file, or print out, this work also needs to understand the registry file import and Export methods.

One, full backup/restore Registry

If you want to fully back up the registry, you can save the registry file (*.reg) on your hard disk by clicking the Export Registry File command under the Registry menu in Registry Editor Regedit.exe and selecting Export range to all. To completely restore the registry, just click the Import Registry File command under the Registry menu, and then select the appropriate backup registry file on your hard disk. Incidentally, the main reason Regedit.exe (16-bit Registry Editor) is included in Windows 2000 is that its search function is strong, and users can also use Regedit.exe to change the registry, but not fully functional (such as the ability to set registry keys). You may not be able to view or edit individual data types correctly. Therefore, it is recommended that you use Regedit.exe only for full backups of the search and registry, and when you need to edit the registry using the System32 directory Regedt32.exe (It is a 32-bit Registry Editor, provides some advanced features, using a multiple-window format to display the predefined keys, look more convenient).