{"id":4887,"date":"2015-10-21T21:20:55","date_gmt":"2015-10-21T21:20:55","guid":{"rendered":"http:\/\/blog.hellotech.com\/?p=4887"},"modified":"2021-06-17T06:12:46","modified_gmt":"2021-06-17T13:12:46","slug":"how-to-remove-virus-manually","status":"publish","type":"post","link":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually","title":{"rendered":"How to Remove a Virus Manually"},"content":{"rendered":"\n<p class=\"c6\">You discovered that your Windows computer has been compromised by a virus or malware. You tried to get rid of it with your antivirus scanner, but to no avail. You know it&#8217;s still there because random messages still pop up, files are missing or have been replaced with suspicious-looking ones, and the computer sporadically freezes or shuts down. When a virus is smart enough to hide its tracks from your security software, it&#8217;s your time to step up and do the removal manually.<\/p>\n\n\n\n<p class=\"c6\">To clean a persistent virus or malware infection, you must reboot your computer into Safe Mode. Unveil all files by going to the Folder Options in the Control Panel and toggling the Show hidden files, folders and drives option. Search your computer for infected files and delete them.<\/p>\n\n\n\n<p class=\"c6\">But what files should you look for? And where exactly in the computer should you look? Many kinds of virus behave differently, which means they may reside in different places in the computer. Starting places you should check are the following:<\/p>\n\n\n\n<ul class=\"c4 lst-kix_list_3-0 start wp-block-list\"><li class=\"c0\"><span class=\"c3\">%APPDATA%<\/span><\/li><li class=\"c0\"><span class=\"c3\">C:\\ProgramData\\<\/span><\/li><li class=\"c0\"><span class=\"c3\">C:\\Users\\Username\\AppData\\Local<\/span><\/li><li class=\"c5\"><span class=\"c3\">C:\\Users\\Username\\AppData\\Roaming<\/span><\/li><\/ul>\n\n\n\n<p class=\"c6\">If you tried scanning with antivirus, it may have given away the name of the virus. In many cases, you can discover its location by going to the Task Manager. See if there are any processes or applications with suspicious names. Viruses may also appear in the list of startup programs. For advanced users, try searching for clues in the Windows Registry. Search the following folders in the registry:<\/p>\n\n\n\n<ul class=\"c4 lst-kix_list_2-0 start wp-block-list\"><li class=\"c0\"><span class=\"c3\">HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\Run<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Runonce<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunServices<\/span><\/li><li class=\"c0\"><span class=\"c3\">HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce<\/span><\/li><li class=\"c5\"><span class=\"c3\">HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\Run<\/span><\/li><\/ul>\n\n\n\n<p class=\"c6\"><a name=\"h.gjdgxs\"><\/a>If you still can&#8217;t identify the virus through the suggestions above, try searching online about the symptoms that your computer is experiencing. Try to note down any error\/pop-up messages that you think may have been caused by the virus and look them up online.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>You discovered that your Windows computer has been compromised by a virus or malware. You tried to get rid of it with your antivirus scanner, but to no avail. You know it&#8217;s still there because random messages still pop up, files are missing or have been replaced with suspicious-looking ones, and the computer sporadically freezes or shuts down. When a virus is smart enough to hide its tracks from your security software, it&#8217;s your time to step up and do [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":5031,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[17593],"tags":[],"class_list":["post-4887","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-staying-safe"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.10 (Yoast SEO v20.10) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Remove a Virus Manually - The HelloTech Blog<\/title>\n<meta name=\"description\" content=\"You discovered that your Windows computer has been compromised by a virus or malware. How do you get rid of it without an anti-virus scanner?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Remove a Virus Manually - The Plug - HelloTech\" \/>\n<meta property=\"og:description\" content=\"You discovered that your Windows computer has been compromised by a virus or malware. You tried to get rid of it with your antivirus scanner, but to no\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually\" \/>\n<meta property=\"og:site_name\" content=\"The Plug - HelloTech\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/hellotech\" \/>\n<meta property=\"article:published_time\" content=\"2015-10-21T21:20:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-17T13:12:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2015\/11\/manualvirusremoval.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"850\" \/>\n\t<meta property=\"og:image:height\" content=\"565\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@HelloTech\" \/>\n<meta name=\"twitter:site\" content=\"@HelloTech\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c\"},\"headline\":\"How to Remove a Virus Manually\",\"datePublished\":\"2015-10-21T21:20:55+00:00\",\"dateModified\":\"2021-06-17T13:12:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually\"},\"wordCount\":400,\"publisher\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\"},\"articleSection\":[\"Staying Safe\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually\",\"url\":\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually\",\"name\":\"How to Remove a Virus Manually - The HelloTech Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#website\"},\"datePublished\":\"2015-10-21T21:20:55+00:00\",\"dateModified\":\"2021-06-17T13:12:46+00:00\",\"description\":\"You discovered that your Windows computer has been compromised by a virus or malware. How do you get rid of it without an anti-virus scanner?\",\"breadcrumb\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.hellotech.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Remove a Virus Manually\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#website\",\"url\":\"https:\/\/www.hellotech.com\/blog\/\",\"name\":\"The Plug - HelloTech\",\"description\":\"Turn to The Plug for informative tech news that you can use. \",\"publisher\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.hellotech.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\",\"name\":\"HelloTech\",\"url\":\"https:\/\/www.hellotech.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png\",\"contentUrl\":\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png\",\"width\":1000,\"height\":174,\"caption\":\"HelloTech\"},\"image\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"http:\/\/www.facebook.com\/hellotech\",\"https:\/\/twitter.com\/HelloTech\",\"http:\/\/www.instagram.com\/hello_tech\",\"https:\/\/www.youtube.com\/channel\/UCIR-fbAKRfVuAbciDr2z4nQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g\",\"caption\":\"admin\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Remove a Virus Manually - The HelloTech Blog","description":"You discovered that your Windows computer has been compromised by a virus or malware. How do you get rid of it without an anti-virus scanner?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually","og_locale":"en_US","og_type":"article","og_title":"How to Remove a Virus Manually - The Plug - HelloTech","og_description":"You discovered that your Windows computer has been compromised by a virus or malware. You tried to get rid of it with your antivirus scanner, but to no","og_url":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually","og_site_name":"The Plug - HelloTech","article_publisher":"http:\/\/www.facebook.com\/hellotech","article_published_time":"2015-10-21T21:20:55+00:00","article_modified_time":"2021-06-17T13:12:46+00:00","og_image":[{"width":850,"height":565,"url":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2015\/11\/manualvirusremoval.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_creator":"@HelloTech","twitter_site":"@HelloTech","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually#article","isPartOf":{"@id":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually"},"author":{"name":"admin","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c"},"headline":"How to Remove a Virus Manually","datePublished":"2015-10-21T21:20:55+00:00","dateModified":"2021-06-17T13:12:46+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually"},"wordCount":400,"publisher":{"@id":"https:\/\/www.hellotech.com\/blog\/#organization"},"articleSection":["Staying Safe"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually","url":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually","name":"How to Remove a Virus Manually - The HelloTech Blog","isPartOf":{"@id":"https:\/\/www.hellotech.com\/blog\/#website"},"datePublished":"2015-10-21T21:20:55+00:00","dateModified":"2021-06-17T13:12:46+00:00","description":"You discovered that your Windows computer has been compromised by a virus or malware. How do you get rid of it without an anti-virus scanner?","breadcrumb":{"@id":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.hellotech.com\/blog\/how-to-remove-virus-manually#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hellotech.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Remove a Virus Manually"}]},{"@type":"WebSite","@id":"https:\/\/www.hellotech.com\/blog\/#website","url":"https:\/\/www.hellotech.com\/blog\/","name":"The Plug - HelloTech","description":"Turn to The Plug for informative tech news that you can use. ","publisher":{"@id":"https:\/\/www.hellotech.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hellotech.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hellotech.com\/blog\/#organization","name":"HelloTech","url":"https:\/\/www.hellotech.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png","contentUrl":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png","width":1000,"height":174,"caption":"HelloTech"},"image":{"@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/www.facebook.com\/hellotech","https:\/\/twitter.com\/HelloTech","http:\/\/www.instagram.com\/hello_tech","https:\/\/www.youtube.com\/channel\/UCIR-fbAKRfVuAbciDr2z4nQ"]},{"@type":"Person","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g","caption":"admin"}}]}},"_links":{"self":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts\/4887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/comments?post=4887"}],"version-history":[{"count":0,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts\/4887\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/media\/5031"}],"wp:attachment":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/media?parent=4887"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/categories?post=4887"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/tags?post=4887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}