Typically, antivirus and antimalware applications ( like Trojan-Killer ) kills malicious processes automatically once detected. That is a preferred way, as these tools know how to precisely recognize bad processes. However, under certain circumstances processes need killing before running scan: You want to delete malware manually
Malware processes block removers from execution or updating their database
You can not download anti-malware tools
Malware tools do not have particular version of parasite in database yet and can not detect it.
It is important to know, that this important first step will stop symptoms for this reboot only, you will need to proceed with removal steps for completely cleaning the PC.
In case you fail to launch Spyware Doctor or any other program, first try rightclicking on them and running as administrator (on windows 7 or Vista).
Using safe mode
Most of malicious processes are inactive when PC operates in safe mode with networking. To reach safe mode with networking, do following:
- Reboot
- Press F8 early on (you can press F8 couple times)
- Choose Safe mode with networking (preferably) or safe mode from menu
- On success you should not see any alerts that bother you under normal mode continue to next steps of malware removal.
This will not work if malicious process is launched using drivers, master boot record or (in safe mode with networking) launched together with browser. Also, Safe mode might be disabled.
Killing processes using task manager
The benefit of using task manager is that you do not need to download anything. Task manager is present in all windows computers, though it might be disabled and provides little control
- Open task manager by either pressing ctrl+shift+esc or pressing ctrl+alt+del and choosing from menu. For best results, try doing so just after windows login, while other processes are still loading
- If it fails, go to go to Start->Run and type taskmgr
- If this fails, go to C:\Windows\System32, copy taskmgr and rename it to 1.scr , 1.com or other random name. Launch that file. You can try right-clicking on it and choosing Run as administrator on Windows Vista or Windows 7
- Choose process TAB, choose to see processes of all users (optional)
- Choose malicious process from the list, right click on it
- Press End process
On successful stop of malicious processes alerts should disappear and you can continue to next steps of malware removal.
Sometimes task manager is disabled by malware. A workaround would be to go to C:\Windows\System32, Make copy of taskmgr.exe and rename it to 1.exe or iexplore.exe . Launch the file.
Killing processes using process explorer
Process explorer provides more information on how the processes were launched. Also it is not blocked together with Task Manager. If it is blocked from execution, try saving it as 1.scr, 1.com or iexplore.exe before execution.
On successful stop of malicious processes alerts should disappear and you can continue to next steps of malware removal.
