Malicious Mobile Code: Virus Protection for Windows (OReilly Computer Security)

The removal and repair portion of this chapter is not as extensive as in previous chapters.

9.4.1 Remove Malicious Files

First and foremost, if you discover new files related to malicious code, rename or delete them.

9.4.2 Edit or Delete Modified Files

If files have been modified that you can fix, make the modifications to remove the malicious parts . For example, if the AUTOEXEC.BAT file has been modified to startup a malicious program every time the PC starts, edit the file, remove the statement, and save. If files have been modified to an extent that you cannot repair them, rename or delete. Then reboot to clear memory. We are trying to get any traces of the malicious code gone and remove its control.

9.4.3 Run Repair Tool

If you feel the integrity of Internet Explorer has been damaged, or you just want to rule out other types of errors, you can run Internet Explorer's Repair Tool . It will check all related files for corruption or restore missing ones. To run the Repair Tool, choose Start Settings Control Panel Add/Remove Programs select Install/Uninstall tab click on Microsoft Internet Explorer click on Add/Remove button choose Repair the current installation of Internet Explorer and OK. The process will run, creating a log of everything it did in a file called FIX IE LOG.TXT .