What and how to remove: the virus deletes EXE files or blocks access to programs
Today, many users from the web"Pick up" a few unusual viruses that affect the executable files, and even so that not all antivirus software can cope with them. Let's try to figure out what can be done in this situation, and at the same time consider the problem of how to remove the "EXE" virus from the USB flash drive.
How do viruses that infect EXE files work?
The situation with the manifestation of virus activitythis type is not new. This was before. The most common today is considered to be a computer trojan-pest called Virus.Win32.Expiro. (Versions "w", "ao", "bc", etc.).
It's possible to catch it on the Internetand then think about what to do about it and how to remove it. The virus removes EXE files, or rather, makes them unavailable for execution. It is not surprising that when trying to open a program or application, due to the impact of malicious code of the virus, the system does not recognize the executable file and gives a message that such and such and such a file is not found.
What is most sad, this concerns not onlyinstalled programs, but the first run of the installer (meaning, if the distribution is downloaded from the Internet and is on the hard disk). If the program is installed from an optical media, the threat can appear later, at the end of the installation process. Probably, it is not necessary to say that when starting the installation process from a USB drive, the virus automatically jumps to it and infects all files with the .exe extension.
But to recognize the action of the virus is possible only withrun the executable. That is why, while the file is not running, some antivirus threat packages are not identified, and the presence of the virus is not determined at all.
Problems with antivirus software
Let's see what and how to remove. The virus deletes EXE files or blocks them, in this case it does not matter. But then, as it turns out, a double-edged sword. On the one hand, we are dealing with blocking files by the virus itself, on the other - the wrong reaction of antivirus programs.
So, for example, today we know quite a lotThe cases when the same Avast package with a user-defined scan (and not with the penetration of the threat initially) the virus still determines. True, the definition is reduced only to the fact that it shows infected EXE-files and, because of the impossibility of treatment, deletes them themselves indiscriminately. Here's the situation for you. It would seem that everything is simple: everyone knows what and how to remove. The virus removes the EXE files not even by itself, but (paradox!) Does it with the help of an anti-virus scanner. Naturally, such a pest can create its own copies and masquerade even for system processes such as svchost.
How to delete a virus (exe files are infected)?
As for the fight against such a threat, not all of themjust. First of all, most users can be advised not to use free anti-virus software and utilities such as Avast, AVG, etc. In extreme cases, it would be better if the system had a cloud antivirus of the Panda type.
The best option is powerful antivirus softwareKaspersky Lab or ESET. By the way, you can resort to services like Kaspersky Virus Removal Tool, only first you need to write the program in the form of a portable version to an optical disk using an uninfected computer and run it from a CD or DVD. Otherwise, successful treatment is not guaranteed.
You can also use small programs such as CureIt, which specifically treat infected files, but do not delete them.
But since the virus, as a rule, "sits" in RAM, the most optimal solution will be to use the launch from an optical media program with the general name Rescue Disc.
They check all the components of the system before itown start. In most cases, this method is effective. Incidentally, this technique is suitable for flash drives, only in the parameters of scanning storage devices will need to additionally put a tick on the USB-drive.
In general, I think, some tips will helpMost users understand how to remove the virus. It removes the EXE files themselves or performs unauthorized blocking of executable files, and you will not understand it right away. But if there is even the slightest suspicion of its presence, it is highly advisable not to run any program until after the complete process of scanning, healing files and deleting the threat.
Among other things, it is desirable to have in the system some kind of package such as Internet Security, able to prevent the penetration of the threat at an early stage.</ p>>