|
|
AnVir Virus Destroyer User's manual
How to Remove Viruses
What do you do, if you think that some viruses live on your computer, and affect system performance, or do some other malicious actions?
Antivirus Monitor and Scanner
On the File menu, click Check for Viruses. AnVir Virus Destroyer will scan system folders, remove viruses and cure your computer.
If AnVir Virus Destroyer is not started automatically when the system restarts, on the File menu, click Add to Autostart. It will add AnVir Virus Destroyer to startup programs, and your computer will be protected against been infected.
Usually a virus is located in a file, and it can be in one of two states: active and inactive. When the infected file is not been executed, the virus is in inactive state and does not perform harmful actions. In such cases it is enough to delete the file. When the infected file begins execution (it can be started by user, by operation system, or by another program), the virus changes its state from inactive to active, and begins to perform harmful actions. In such cases AnVir Virus Destroyer terminates the file execution (to switch the virus to inactive state), and then deletes the file.
When AnVir Virus Destroyer detects a virus, it tries to terminate it, then deletes infected files, and then displays notifications, and puts info to the Log.
Startup
Open startup window. You can see programs that run automatically when Windows restarts or a user logs on. If you see any queer file, double click on it (or on the Edit menu, click Target File Properties), a system file properties dialog box appears in a few seconds. Explore the Version tab for the file. If the Version tab is missed, and you can't understand from the file full path, from the file name and from it's icon, what type of file it is, and what application can use it, then this file is probably is a virus. You can also click Explore Target File Location, and look for some help files (.hlp) in the opened folder. You can click Search in Web, to get some info about a startup entry. If you still don't understand what application can use this file, you most probably don't need this file to be launched each system restart and you should disable it.
If you detected some unnecessary file(s) in your startup, you should disable it. To disable the file, clear the check box at the left of the file name. When you disable the file, you exclude it from the auto start list. If you disabled some file by mistake, you can enable it later. To enable the file, set a check in the check box. Note that items found in win.ini and in some other system files, can not be disabled in such a way.
If you are 100% sure the file is a virus, you should delete it. If you delete a file, it will be excluded from the startup list permanently. You will NOT be able to undo this action. If you are not sure whether you should delete an item or not, you should just disable it. Before you delete a possible virus entry from the startup list, you can also delete the virus file from your hard disk.
Processes
Before exploring processes, close all of your applications (except AnVir Virus Destroyer) to reduce the processes list. Open the processes window. You can see a list of all programs and processes running on your computer. Explore the queer processes the same way as you explored the startup list. The virus processes usually have an empty File Description and a small File Size (less than 100 K).
You can click on following menu items:
File Properties - to view the system file properties dialog box
File Folder - to explore a file's location
Select Parent - to see what process created this queer process. (If parent process is already closed, you can know its name nevertheless from Log window).
Run Again or Copy Command Line - to see the process command line
Search in Web - to get some info about the process by name
If you decided that the process should be terminated, in most cases, you should terminate it along with all of its child processes. To terminate a process, on the Edit menu, click End Process, or End Process Tree (in both cases you will see confirmation dialog first).
After you have terminated a malicious process, you can delete its file from your hard disk drive.
Note that if you have terminated a process, but did not delete its file, you are not secured from launching this file the next time.
Ask for support
If you don't understand how to use our software, or you need some extra features, or you have some problem relative to computer security or performance management, e-mail to support@anvir.com. We will try to help you. Customer feedback is important to us in order to get an idea of how to make our Software a better product for you. Many of the features and significant portions of our program's interface have been heavily influenced by comments from users. So if you have a grand idea for a new feature, or a better way of doing something, please drop us a note.
Prev Content
|
