Some tips for cleaning up the virus

First, in Safe mode or pure DOS mode to clear the virus


when the computer infected with the virus, the vast majority of infected with the virus in the normal mode of the treatment can be completely removed virus, here is the normal mode of the correct statement should be real mode, here, the popular point said. It includes "MS-DOS Mode" or "command Prompt" in normal-mode windows and Normal-mode windows. But some viruses because of the use of more stealth and cunning means will often attack anti-virus software or even remove the anti-virus software in the system, the vast majority of anti-virus software for such viruses are designed to be installed in Safe mode, use, perform anti-virus treatment. In safe mode or pure DOS to clear the purge, for the current most popular viruses, such as worms, Trojans and Web page code virus, can be completely removed in safe mode, do not have to be like the previous need to use floppy disk to start antivirus; However, for some boot zone virus and infected executable file virus only need to antivirus in pure DOS (recommended to start antivirus with a clean floppy disk). And, when the computer is infected with the virus, it is more necessary to install anti-virus software (upgrade to the latest virus library), in Safe mode or pure DOS to clear the virus!


Two, the poison file in some mail file


Most antivirus software can directly check whether the files in these mail files are poisonous, in the mailbox with the poison of the letter, can be set up according to the user to disinfect or delete the poison mail, but because of the compound file structure of such mailboxes, easy to appear after the anti-virus mailbox can still detect the virus, This is due to the absence of a compressed mailbox for space release, you can try to select "Tools"-〉 "-〉" "Maintenance"-〉 "immediately clear"-〉 "compress" in Outlook Express, and delete all offline content.


III, with poison files in the Restore directory, *.cpy files in


This is the directory where the system restores the restored files, only if the Windows Me/xp/vista operating system is installed, because the system has a protective effect on the directory. For this situation, you need to cancel the System Restore feature, and then remove the poison file, or even the entire directory to delete it.


four, toxic files in the. rar,. zip,. cab, and other compressed files


For the vast majority of anti-virus software, now the killing of compressed files in the function of the virus has been basically perfect, only for some special types of compressed files or password-protected compressed files may be directly removed. To clear the compressed file of the virus, we suggest that after decompression, or with the help of the compression tool software plug-in anti-virus program function, the poison of the compressed file antivirus. (material)


Five, there is a virus residue code in the file


This is more of a situation with CIH, FUNLOVE, macro viruses (including macro viruses in documents such as Word, Excel, Powerpoint, and WordPro) and the residue code for individual Web viruses, usually antivirus software for these files with virus residue code The reported virus name suffix is usually the end of an int, and is uncommon, such as W32/funlove.app, W32. Funlove.int. In general, these residual code will not affect the normal operation of the program, and will not infect, if the need to completely clear, according to the actual situation of the virus to clear. You can also use the relevant cleanup tools and modify the registry to complete.


vi, shared directory antivirus


encountered a virus file in a locally shared directory that cannot be purged. Usually the other users in the LAN when reading and writing these files, antivirus when the performance is not directly clear the virus in the files, if there is a virus in these directories in the write virus operation, performance for the shared directory to clean the virus operation, There are still files being infected or constantly generating new virus files. In both cases, it is recommended to cancel the sharing, and then for the shared directory for a thorough killing, restore the sharing time, pay attention not to open too high permissions, and the shared directory to add a password. When killing viruses on a remote shared directory (including the mapping disk), the first step is to ensure that the local computer's operating system is clean and has the highest read and write access to the shared directory. If it is a remote computer infected with the virus, it is recommended or directly on the remote computer for killing the virus. In particular, if you are cleaning up other viruses, Shihudu recommends canceling all local shares and then doing antivirus operations. In peacetime use, should also pay attention to the security of the shared directory, add a password, and, if not necessary, do not directly read the remote shared directory of files, the proposed copy to the local check virus before operation.