1. Reasons for the virus to kill
I often hear that the virus software reports that it kills a certain virus, but after restarting, the virus still exists and cannot be killed. The main reasons why viruses cannot be killed are:
1. The virus is running. Since Windows protects running programs, antivirus software cannot kill running viruses. Even if the virus is really killed, the virus that is active in memory will copy another virus to the hard disk when the computer is shut down normally.
2. The virus is hidden in the system restored folder "_restore".
2. Countermeasures
1. The virus process must be aborted before anti-virus in Windows. For Windows Xp/2000, you can use the Task Manager (Ctrl+Alt+Del buttons to view all current processes, while for Windows 98/Me, you can use the "Hacking Starter Toolbox" or ATM to view processes. Stop it by determining which one is of unknown origin or stop it if you don’t like it. This process is commonly known as “killing process”.
Don't be afraid of making mistakes, because it won't cause any damage to the computer, at most it will crash. Note that the process killing operation sometimes takes two times to succeed. Some viruses have two processes, protect each other, and kill one will be discovered and restored by the other. At this time, you should first remove the startup item of the virus in the registry, then restart the computer by suddenly power off, and then kill the virus.
2. Use special killing tools to kill viruses in Windows. You have to use the latest antivirus version.
3. Disable system restore. The method to disable in WindowsMe is: Right-click "My Computer" - Properties - File System - Troubleshooting - Prohibit system restoration. In Windows XP, the method of disabling it is: Control Panel-System-System Properties-System Restore-Switch off system restore on all drives. Then use a floppy disk or USB drive to boot the computer and delete the _RESTORE folder under dos.
4. There is no problem of being unable to kill in Dos. Generally, antivirus software can make floppy disk version (including at least 3 floppy disks). After booting with the first disk (the floppy disk must be set to start in front in CMOS), and then put it into other disks one after another according to the prompts. Rising's floppy disk version requires the mouse to determine the anti-virus drive, while Kingsoft Van's floppy disk version defaults to the entire machine to detect and kill.
In fact, it is easier to use Kingsoft Antivirus to use Kingsoft Antivirus to use a normal floppy disk or a U disk boot disk to start the computer, first change to the C drive, and then enter Kingsoft Antivirus directory (command: cd kav or cd kav5, related to version), then enter KAVDX, and press Enter to start the antivirus.
5. Supplementary operations. The registry should also be repaired after the virus is killed.
I often hear that the virus software reports that it kills a certain virus, but after restarting, the virus still exists and cannot be killed. The main reasons why viruses cannot be killed are:
1. The virus is running. Since Windows protects running programs, antivirus software cannot kill running viruses. Even if the virus is really killed, the virus that is active in memory will copy another virus to the hard disk when the computer is shut down normally.
2. The virus is hidden in the system restored folder "_restore".
2. Countermeasures
1. The virus process must be aborted before anti-virus in Windows. For Windows Xp/2000, you can use the Task Manager (Ctrl+Alt+Del buttons to view all current processes, while for Windows 98/Me, you can use the "Hacking Starter Toolbox" or ATM to view processes. Stop it by determining which one is of unknown origin or stop it if you don’t like it. This process is commonly known as “killing process”.
Don't be afraid of making mistakes, because it won't cause any damage to the computer, at most it will crash. Note that the process killing operation sometimes takes two times to succeed. Some viruses have two processes, protect each other, and kill one will be discovered and restored by the other. At this time, you should first remove the startup item of the virus in the registry, then restart the computer by suddenly power off, and then kill the virus.
2. Use special killing tools to kill viruses in Windows. You have to use the latest antivirus version.
3. Disable system restore. The method to disable in WindowsMe is: Right-click "My Computer" - Properties - File System - Troubleshooting - Prohibit system restoration. In Windows XP, the method of disabling it is: Control Panel-System-System Properties-System Restore-Switch off system restore on all drives. Then use a floppy disk or USB drive to boot the computer and delete the _RESTORE folder under dos.
4. There is no problem of being unable to kill in Dos. Generally, antivirus software can make floppy disk version (including at least 3 floppy disks). After booting with the first disk (the floppy disk must be set to start in front in CMOS), and then put it into other disks one after another according to the prompts. Rising's floppy disk version requires the mouse to determine the anti-virus drive, while Kingsoft Van's floppy disk version defaults to the entire machine to detect and kill.
In fact, it is easier to use Kingsoft Antivirus to use Kingsoft Antivirus to use a normal floppy disk or a U disk boot disk to start the computer, first change to the C drive, and then enter Kingsoft Antivirus directory (command: cd kav or cd kav5, related to version), then enter KAVDX, and press Enter to start the antivirus.
5. Supplementary operations. The registry should also be repaired after the virus is killed.