Cookies help us deliver our services. By using our services, you agree to our use of cookies.

Learn more Got it

Home
Malware
Tutorials
Tools & Resources
About
Contact

Nov 11, 2013

Full Malware Scan & Removal Guide to

Clean Heavy Infected Computers
Nowadays, new viruses, adwares and malwares appear and disappear within
days or weeks. When a new virus/adware/malware is released and users
computers are infected, it takes several days for experts to identify them
and then to specify the appropriate treatment/removal procedure.

During those days, users dont have a way to try and remove them, but,
instead, they have to wait for the solution to become public or they have to
take their computer to an expert so that it can be cleaned. To avoid this, I
decided to write down a generic article that presents you the most common
steps and the most useful anti-virus/adware/malware tools used to clean
your computers. So, in case your computer is infected by a virus you cant
identify, you can use these steps and tools to try and clean it. As you can all
understand, it may not always work, but I am sure that it will help you in
most cases.

ATTENTION: All the Anti-Malware programs and removal tools that suggested in this guide
are totally FREE.

How to clean your computer from Malware, Adware,

Spyware, Rootkits, Viruses, Trojans, etc.
Important: Before you continue with the removal procedure, make sure
that you have an updated backup of all your important files.

Notice No1: If you cannot download any of the bellow suggested programs
on the infected computer, then you can download them on another clean
computer and transfer them (e.g. by using a USB flash disk) on the infected
computer.

Notice No2: Add this page to your favorites (Ctrl + D) to easily find and
follow the given instructions.

Malware Removal Guide Steps:

Step 1: Start your computer in Safe Mode with Networking.

Step 2: Terminate known running Malicious processes with RKill

Step 3: Remove Malicious Registry Entries with RogueKiller.

Step 4: Remove Malware programs from Windows Startup with CCLeaner.

Step 5: Scan and remove hidden malicious Rootkits with TDSSKiller.

Step 6: Delete Temporary files and folders from all users with TFC.

Step 7: Uninstall all unknown and unwanted applications.

Step 8: Clean Adware & Unwanted Browser Toolbars with AdwCleaner.

Step 9: Remove Junkware & Potentially Unwanted Programs (PUP) with JRT.

Step 10: Clean Malware programs and files with Malwarebytes Anti-Malware.

Step 11: Remove Temporary Internet files and Invalid Registry entries with
CCleaner.

Step 12. Scan and Remove Viruses with your Antivirus Program.

Step 13: Delete infected Windows Restore Points.

Step 1. Start your computer in Safe Mode with Networking.

Start your computer in Safe mode with network support to avoid malicious programs and
unnecessary services to run . To do that
Windows 7, Vista & XP users:

1. Close all programs and reboot your computer.

2. Press the F8 key as your computer is booting up, before the appearance of the
Windows logo.
3. When the Windows Advanced Options Menu appears on your screen, use your
keyboard arrow keys to highlight the Safe Mode with Networking option and then
press ENTER.

Windows 8 & 8.1 users*:

* Also works in Windows 7, Vista & XP.

1. Press Windows + R keys to load the Run dialog box.

2. Type msconfig and press Enter.

3. Click the Boot tab and check Safe Boot & Network.

4. Click OK and restart your computer.

Note: In order to boot Windows in Normal Mode again, you have to uncheck the Safe Boot
setting by using the same procedure.

Step 2: Terminate known running malicious processes with RKill.

1. Download and Save RKill* to you desktop. RKill is a program that was developed at
BleepingComputer.com that attempts to terminate known malware processes so that your normal
security software can then run and clean your computer of infections.

* Notice: RKill is offered under under different filenames because some malware will not allow
processes to run unless they have a certain filename. Therefore when attempting to run RKill, if a
malware terminates it please try a different filename.

2. Run RKill and let the program to terminate any malicious processes that may running.

3. When RKill is finished press OK and continue to the next step.

Step 3: Remove Malicious Registry Entries with RogueKiller.

1. Download and save RogueKiller utility on your computer* (e.g. your

Desktop). RogueKiller is an anti-malware program written in C++ and is
able to detect, stop & remove generic malwares and some advanced threats
such as rootkits, rogues, worms, etc.

Notice*: Download version x86 or X64 according to your operating

systems version. To find your operating systems version, Right Click on
your computer icon, choose Properties and look at System Type
section.
2. Double Click to run RogueKiller.

3. Let the prescan to complete and then press on Scan button to

perform a full scan.

3. When the full scan is completed, select all items found in Registry &
Web Browsers tabs and then press the Delete button to remove them.
(If asked, press Yes to reboot your computer and reboot again in Safe Mode with Networking)

Step 4: Remove Malware programs from Windows Startup with

CCLeaner.

1. Download and run CCleaner.

2. At CCleaner main window, choose Tools on the left pane.

4. In Tools section, choose Startup.

4a. Choose the Windows tab and then select and delete all unknown or
malicious programs to prevent them from running on Windows startup: *
 Tip No1: We suggest that you disable (and not delete) any unknown
entry if you are not sure if it is malware.
Tip No2: Before deleting the malicious Startup entries, open Windows
Explorer to find and delete manually the malicious folders and files
from your computer. (e.g. RandomFolderName,
RandomFileName.exe).

4b. Then choose the Scheduled Tasks tab and delete (or disable) all
unwanted tasks from there.
5. Close CCleaner and reboot your computer to Safe Mode with
Networking mode again as described at Step 1.

6. After rebooting, run Rogue Killer again to scan & clean remaining
malicious entries as described at Step 2.

Step 5: Scan and remove hidden malicious Rootkits with TDSSKiller.

1. Download and save TDSSKiller Anti-rootkit utility by Kaspersky Labs

on your computer (e.g. your desktop).
2. When the download process is complete, go to your download location
(e.g. your desktop) and double click on tdsskiller.exe to run it.

3. At Kasperskys Anti-rootkit utility program click on Change

parameters option.
4. At TDSSKiller settings, check to enable the Detect TDLFS file system
option and press OK.
5. Press Start scan to start scanning for malicious programs.
When the scan process is complete, a new window opens with the scanning
results.

6. Choose the Cure option and let the program finish the cure operation of
the infected files.

7. When the curing operation is complete, reboot your computer.

8. After rebooting, run TDSSKiller again to scan one more time for
Rootkits. If the previous curing job was completed successfully, the program
now will inform you that No Threats found.

Step 6: Delete Temporary files and folders from all users with TFC.

1. Download and save TFC by OldTimer to your computer.

2. When downloading is completed, run TFC and press the start button to clean all temporary
files and folders from your computer.

Note: The detailed instructions on how to download and use TFC can be found here: How to
delete temporary files using TFC.
Step 7. Uninstall all unknown and unwanted programs.

1. To do this, go to:

Windows 7 & Vista: Start > Control Panel.

Windows XP: Start > Settings > Control Panel
 Windows 8 & 8.1:

1. Press Windows + R keys to load the Run dialog box.

2. Type control panel and press Enter.

2. Double click to open:

Add or Remove Programs if you have Windows XP

Programs and Features (or Uninstall a Program) if you have Windows 8, 7 or Vista.
3. When the program list is displayed on your screen, sort the programs to be displayed by
Installation date (Installed On) and then find and Remove (Uninstall)* any unknown program
that was lately installed on your system.

* Notice: If you receive the You do not have sufficient access to uninstall error message or
you face problems during program uninstall, then follow this guide to uninstall the program.
4. Close Add/Remove programs window and continue to the next step.

Step 8: Clean Adware & Unwanted Browser Toolbars with AdwCleaner.

1. Download and save AdwCleaner utility to your desktop. AdwCleaner is a powerful utility to
clean all the Adware, Toolbars, PUP & Hijacker programs from your computer.
2. Close all open programs and Double Click to open AdwCleaner from your desktop.

3. After accepting the License Agreement, press the Scan button.

4. When the scan is completed, press Clean to remove all the unwanted malicious entries.
4. Press OK at AdwCleaner Information and press OK again to restart your
computer.
5. When your computer restarts, close AdwCleaner information (readme) window and
continue to the next step.

Step 9: Remove Junkware & Potentially Unwanted Programs (PUP)

with JRT.

1. Download and run JRT Junkware Removal Tool. JRT is a security

utility that searches for and removes common adware, toolbars, and
potentially unwanted programs (PUPs) from your computer.

2. Press any key to start scanning your computer with JRT Junkware
Removal Tool.
3. Be patient until JRT scans and cleans your system.

4. Close JRT log file and and then reboot your computer.
Step 10: Clean Malware programs and files with Malwarebytes Anti-
Malware.

Download and install Malwarebytes Anti-Malware one of the most reliable FREE anti
malware programs today to clean your computer from remaining malicious threats. If you want
to stay constantly protected from malware threats, existing and future ones, we recommend that
you install Malwarebytes Anti-Malware Premium:

Malwarebytes Protection
Removes Spyware, Adware & Malware.
Start Your Free Download Now!

Quick download & Installation instructions:

After you click the above link, press at the Start My Free 14-Trial option to start your
download.
 To install the FREE version of this amazing product, uncheck the Enable free Trial of
Malwarebytes Anti-Malware Premium option at the last installation screen.

Scan & Clean your computer with Malwarebytes Anti-Malware.

1. Run Malwarebytes Anti-Malware and allow the program to update to its latest version and
malicious database if needed.
2. Press the Scan option from the top menu.

3. Select Custom scan and then click the Scan Now button.
4. At Custom Scan Configuration options, first check all available scanning options from
the left pane, select the disk(s) to scan from the right pane and finally press the Start Scan
button to scan your entire system for malware.
5. Now wait until Malwarebytes Anti-Malware finishes scanning your computer for malware.

6. When the scan has completed, press the Quarantine All button to remove all threats found.
7. Wait until Malwarebytes Anti-Malware removes all infections from your system and then
restart your computer (if required from the program) to completely remove all active threats.
Step 11: Remove Temporary Internet files and Invalid Registry entries with CCleaner

1. Run CCleaner program and proceed to clean your system from

temporary Internet files and invalid registry entries.*

*If you dont know how to install and use CCleaner, read these
instructions.

2. Restart your computer

Step 12. Scan and Remove Viruses with your Antivirus Program.

Open your Antivirus program and perform a full scan for viruses on your
computer.

Step 13: Delete infected Windows Restore Points

After the removal process, you must remove all system restore points from
your computer because they still contain malware that can harm your
computer in the future.

1. To disable System Restore points and clean disk space read this article:
How to Enable or Disable System Restore in Windows.

2. After doing that you must re-enable the System restore feature for safety
and security reasons.

Conclusion: Hope that you find this article useful and effective and that
your computer is now clean from all harmful programs running on it. I will
try to keep this article updated. From your side if you want to learn how to
stay protected on the future from malware programs read this article: Ten+
tips to keep your computer fast and healthy.

If you want to stay constantly protected from malware threats, existing and future ones, we
recommend that you install Malwarebytes Anti-Malware PRO by clicking below (we do earn a
commision from sales generated from this link, but at no additional cost to you. We have
experience with this software and we recommend it because it is helpful and useful):

Full household PC Protection - Protect up to 3 PCs with NEW Malwarebytes

Anti-Malware Premium!
If this article was useful for you, please consider supporting us by making a donation. Even $1
can a make a huge difference for us in our effort to continue fighting spam while keeping this
site free:

Remove DiVapton Pup.Optional.Divapton.A Potentially Unwanted Program How to

transfer Outlook Contacts to your Google Account or Android device

9 Comments

1. Chloe V.
Nov 11, 2013 @ 23:31:46

Holy Smokes! Thats what I call a useful guide. Very nice collection of tools that pros
actually use! Thanks.

Reply

2. Romes
Aug 13, 2015 @ 10:01:00

The convenience of having all these tools in one place is great, and the article is well
written for those who are new to the art of Virus-Fu.

Thanks

Reply

3. Ryan
Sep 13, 2015 @ 12:54:12

Great article! Clear and well written. This process has improved the performance of my
machine a lot. Thanks.

Reply

4. Suhas K
Oct 23, 2015 @ 22:09:09
 Marvelous ! Neatly written & explained, and the tools are awesome to kick out residing
viruses & infections. Well Done & excellent job !

Reply

5. Jerome
Dec 23, 2015 @ 17:03:33

Very nice ! Thanks for this great article. Usefull to fight against all these virus craps.

Reply

6. Gabriel
Jan 21, 2016 @ 07:32:26

I downloaded and ran the RogueKiller and started the scan, but every time it stops at 58%
and gives me RogueKiller.exe has stopped working. Ive tried running it a few times,
but no luck. Any suggestions?

Reply

o lakonst
Jan 21, 2016 @ 10:46:04

@Gabriel: I think that Roguekillers latest version has problems. Do not run it and
continue at the next step.

Reply

7. BL
Jan 31, 2016 @ 07:56:10

Excellent article for both amateur and veteran PC users to rid their PCs of junk.

Reply

8. jamal shaterian
Feb 17, 2016 @ 18:59:12
 very handy article thank you

Reply

Leave a Reply

Your Name *

Your Email *

Your Website

Featured

Best Free Antivirus Programs for Home use.

Quick Malware Scan and Removal Guide for PCs.
How to install and clean your computer with Malwarebytes Anti-Malware Version 2.0
(FREE)
Full Malware Scan & Removal Guide to Clean Heavy Infected Computers
Protect your children and yourself while online

About
Contact
Privacy Policy
Terms of service
Malware
Tutorials

wintips.org - Windows Tips & How-tos 2016

Logo design: abimation.eu
By Konstantinos Tsoukalas