Methods against malware malware

A Guide to Combating Malware – Malware

What happens when malicious software somehow bypasses all layers of protection and enters your computer? That’s when your system will be attacked by malware, things go bad and in the worst case, the only thing you can do is reinstall Windows operating system.

But that’s just a last resort, before doing that let’s try some of the methods we list below, maybe they will help you remove the most stubborn malware.

Restore command – restore system

Depending on the level of Malware infiltration, you can choose to restore the system to a point in time before your computer was infected using an available Restore Point.

With Windows 10, you choose Control Panel > System and Security > System Protection and click the button System restore.

With Windows 7, you choose Start > All Programs > Accessories > Systems Toolsthen click the program icon System Restore.

Use medicine”

You can try using anti-virus software, like Microsoft’s own Windows Defender, or a third-party software like Kaspersky. If they don’t work, then switch to Malwarebytes, which often contains information about malicious files that can bypass traditional antivirus programs.

At this point, either you have eliminated the malicious software in the system, or are mentally prepared to reinstall Windows and programs. Don’t do it in a hurry, Microsoft has provided a lightweight application called Windows Malicious Software Removal Tool (MSRT) Target dangerous malware and update them regularly.

MSRT worth a try, and if you need even more firepower, there are several free programs you can (and should) try, including SuperAntiSpyware, Spybot Search & Destroy, Antimalware Zemana, Norton Power Eraser, and Hitman Pro (free 30 day trial).

Using “Medication” in Portable form

Have you tried the steps above but got an error and couldn’t install the “medicine”? Don’t be surprised, a lot of today’s sophisticated malware is programmed to recognize anti-virus applications and avoid or even prevent you from installing them. You can completely use an anti-malware program in the form of Portable (use always without installation). Even if your computer is not infected, you should have a backup copy saved on a disk or USB in case family and friends need your help.

There are many options and to be sure you can store many programs at once. The names we recommend include Emsisoft Emergency CZKit, ClamWin Portable, VIP Rescue, Dr. Web CureIt!and Trend Micro House Call.

Fool the enemy

Malware writers play dirty, and you can get dirty with them, too. If you are infected with malware that prevents anti-virus and anti-malware programs from starting, please change the name and extension of that program. In fact, the Portable version of SuperAntiSpyware already does this by changing the filename every download. That makes it very difficult for malware to recognize your “drug”.

For other programs, you can do it yourself by navigating to another installation directory and renaming the file. For example, the default location for Malwarebytes in Windows 10 is C:Program FilesMalwarebytesAnti-Malwarembam.exe. Change the name of the file mbam.exe into another name like Drugs.exe for example, then try to run the program again by double clicking.

You can also try changing the file extension from .exe luxurious .com, which in many cases won’t damage their functionality. To do that, you must first be able to see the file’s extension. In Windows 10, open any folder and click tab View. Go Options > Change folder and search optionsclick tab View and uncheck the “Hide extensions for known file types”. Then you can change the name mbam.exe Fort mbam.com and still run the program as usual.

Strange programs

Some malware is easier to remove when you simply turn it off. To do this, type ‘Task Manager” in the menu Start or right click on the bar Taskbar and select “Task Manager”then expand the viewport by clicking ‘More details‘. You will see a list of programs and processes running in the background. Go through this list and search for the name of the malware you have (in case you already know what malware you’ve got). If not, look for strange programs whose names include a random string of characters. If in doubt, Google to make sure it’s not a necessary program, and then you right-click and select ‘End Task‘.

Do the same in tab Startup. Once the malware has stopped running, you can remove it easily with one of the tools we have shared.

Using RKill

If you’re not too computer savvy and fumbled for the name of the malware running in the background, download and run RKill. This handy program is developed by BleepingComputer, a support community run by volunteers, and is a great aid in malware removal. RKill is a portable application that can be run without needing to be installed. What it does is turn off the malware that is running in the background, so you can proceed to the next step and remove them forever. Friend the machine should not be restarted after running RKillbecause the malware it just shut down will start up again.

Boot in Safe mode

When all your efforts to turn off malware running in the background are futile because the malware is so sophisticated, start Windows at Safe mode – Safe Mode. When you come in Safe mode, Windows will only run the most essential programs at startup. This will limit the overall functionality of Windows, but it also means that malicious programs won’t have a chance to run automatically, and you can feel free to clean up your system without them stopping you. .

There are different ways to boot into Safe Mode. In Windows 10 go to menu Start and click the button Power. Hold down the Shift key, and click Restart. When Windows 10 restarts, it will bring up a Menu panel. Choose Troubleshootthen select Advanced Options > Startup Settings > Restart. When another Menu appears, press the “4” key and select Enable Safe Mode option.

Easier way to get is to type System Configuration in the Start menu. At the pop-up, go to the tab Boot and check the box Safe boot. Once you’ve booted into Safe mode, you should be able to run an anti-malware program without any resistance.

Boot from CD

Booting into infected Windows even in Safe mode is like bringing a bucket of water into the middle of a fire to put it out. Why don’t you spray water from afar? That’s the idea of ​​a rescue CD, also known as Live CD. Using a Live CD, you can boot with another operating system (probably Windows) burned to the disc, which has nothing to do with your infected Windows, and then run a series of diagnostic tools to Identify and remove malware.

Live CD also has many choices, such as Ultimate Boot CD and SystemRescueCD. Some anti-virus software vendors also have their own rescue CDs, including Bitdefender and AVG. These are viable options, and are completely free. Another name we recommend using is All-in-One System Rescue Toolkit (also free). This is one of the new rescue discs designed by Paul Bryan Vreeland, a technician that integrates repair tools and utility tools of Windows. You can download it for free (you can also donate to help make the software better), the program can work with many versions of Windows, Linux or even new versions of Mac OS.

Last Remedy – Reset Windows

If up to this point you still haven’t been successful in removing the malware, there’s a last resort you can use that only applies when you’re running Windows 10. One of the extra Microsoft features into Windows 10 is Reset allows you to keep your personal files while reinstalling Windows. You will still have to reinstall Windows and programs, but your personal data will still be retained.

To perform this method, go to Windows Settings > Update & Security and choose Recovery from the menu on the left. You can also type “Reset my PC” into the Start menu. In section Reset this PCclick the button Get started and select the option that allows you to keep your files (Keep my files). Follow the instructions and Windows will automatically do the rest.