URI:
   DIR Return Create A Forum - Home
       ---------------------------------------------------------
       gworld
  HTML https://gworld.createaforum.com
       ---------------------------------------------------------
       *****************************************************
   DIR Return to: VIRUS TRICKS n CREATION
       *****************************************************
       #Post#: 55--------------------------------------------------
       REMOVING VIRUS MANUALLY IN XP
       By: eba95 Date: July 25, 2010, 7:45 am
       ---------------------------------------------------------
       Start->Run->type cmd
       in each drive type attrib /
       s /d it will display the list
       of all files in that drive
       along with
       folders.concntrate on files
       having SHR
       attribute.normally virus
       files have two
       characteristics
       1.SHR attribute
       2.Queer name like
       amvo.exe,r6r.exe,autorun.inf
       etc.
       Note:some system files
       also have this attribute
       like MSDOS.SYS,IO.SYS etc
       so before deleting googling
       about that file will help.
       to delete these files type c:
       \>del /f /s /a <filename
       with extension>
       >> to view the content of
       files with .inf,.vbs,.c etc i.e
       files which r not batch files
       or executables.goto
       explorer n then goto the
       required drive or folder n
       type the filename with
       extension it wil open up in
       notepad.
       >>there is another method
       also.goto the required
       location n type attrib -s -h
       -r filename
       then use gui to see that
       hiiden file.if it is not n exe
       or .bat or then open it with
       notepad.Here you will get
       some information like a file
       name or a registry key
       which the virus affects or
       a startup item or
       process.Change this or
       uncheck the startup.
       if file is not deleted like it
       says access denied it
       means it already used by
       some process.open task
       manager n find a process
       of the same name or some
       process which is not a
       valid windows process
       (better google) n end that
       process.
       if not found open msconfig
       goto statrup tab n look at
       if a startup items seems
       queer(u wil have this
       feeling if u r n experienced
       windows user otherwise all
       da startup items may seem
       queer.)uncheck that.u may
       also learn about da
       startup item by
       googling.after unchecking
       restart the computer then
       restart the computer.
       *****************************************************