Tools: CCleaner, Explorer
Record from the last Instruction (http://www.simpleclix.net/2008/08/general-virus-removal-instruction-i/).
I assume that you had finished running your virus scan in the normal mode. ?If the scanning result is clear, you are done. ?However, if the virus showing up on your scan report again, you will properly need to follow the following instructions to manually remove the virus since the virus came back again.
Generally, there must be some helper programs (which are not detected by the scanner) inside your system to download and reinstall the virus again after your system restart. ?Therefore, we will have to kill all those helpers. ?The first step is to download and install CCleaner to clean up your system garbages because some of the virus may be still inside your system as temporary files. ?After running the CCleaner, now you will have to clean the files inside the prefetch folder (c:/windows/prefetch). ATTENTION, DELETE ALL THE FILES INSIDE THE prefetch FOLDER EXCEPT THE FILE CALLED “layout.ini”. If you delete “layout.ini”, your system maybe crashes or runs very slow. ?
?
After you clean up all the junk files from your computer, I highly recommend you to flush the DNS cache by using the command “ipconfig /flushdns” in the console because the virus may tweak the DNS record to redirect your system to download virus from the internet. ?After all, you will have to restart your computer back to the safe mode, and run your virus scanner again. ?Hopefully, you will get a clear report after the scan and removal. ?Again, after you scan your system under the safe mode, it is important to run the scanner again under the normal mode.
If your scanner reports clear, then you are done. ?However, if the report still shows up the virus, you will have to manually locate the location of the virus files, which will take a lot of time. ?I will further discuss the instruction on my next tutorial.
?
Hope you will have a healthy system.