What and how to remove: the virus deletes EXE files or blocks access to programs

Today, many users of the Network "pick up" several unusual viruses that affect executable files, and even so that not all anti-virus programs cope with them. Let's try to figure out what can be done in this situation, and at the same time consider the problem of how to remove the "EXE" virus from the USB flash drive.

How do viruses that infect EXE files work?

The situation with the manifestation of the activity of viruses of this type is not new. This was before. The most common today is a computer trojan-pest called Virus.Win32.Expiro. (Versions "w", "ao", "bc", etc.).

You can pick it up on the Internet quite simply, and then think about what to do with it and how to remove it. The virus removes EXE files, or rather, makes them unavailable for execution. It is not surprising that when trying to open a program or application, due to the impact of malicious code of the virus, the system does not recognize the executable file and displays a message that such and such and such a file is not found.

What is most sad, this concerns not only the installed programs, but the first run of the installer (meaning if the distribution is downloaded from the Internet and is on the hard disk). If the program is installed from an optical media, the threat can appear later, at the end of the installation process. Probably, it is not necessary to say that when you start the installation process from a USB drive, the virus automatically jumps to it and infects all files with the .exe extension.

But to recognize the action of the virus is possible only when the executable file is launched. That's why, while the file is not running, some antivirus threat packages do not identify, and the presence of the virus is not determined at all.

Problems with antivirus software

Let's see what and how to remove it. The virus deletes EXE files or blocks them, in this case it does not matter. But then, as it turns out, a double-edged sword. On the one hand, we are dealing with blocking files by the virus itself, on the other - the wrong reaction of antivirus programs.

So, for example, today we know quite a lot of cases when the same Avast package with a user-defined scan (and not with the penetration of the threat initially) the virus still determines. However, the definition is reduced only to the fact that it shows infected EXE-files and, because of the impossibility of treatment, deletes them indiscriminately. Here's the situation for you. It would seem that everything is simple: everyone knows what and how to remove. The virus removes the EXE-files not even himself, but (paradox!) Does it with the help of an anti-virus scanner. Naturally, such a pest can create its own copies and mask itself, even for system processes such as svchost.

How do I delete a virus (exe files are infected)?

As for the fight against such a threat, not everything is simple here. First of all, most users can be advised not to use free anti-virus programs and utilities such as Avast, AVG, etc. In extreme cases, it would be better if the system had a cloud antivirus of the Panda type.

The best option is a powerful anti-virus software from Kaspersky Lab or ESET Corporation. By the way, you can resort to services like Kaspersky Virus Removal Tool, only first you need to write the program in the form of a portable version to an optical disk using an uninfected computer and run it from a CD or DVD-drive. Otherwise, successful treatment is not guaranteed.

You can also use small programs such as CureIt, which specifically treat infected files, but do not delete them.

But since the virus, as a rule, "sits" in RAM, the most optimal solution will be to use the launch from an optical media program with the general name Rescue Disc.

They check all the components of the system before it starts. In most cases, this method is effective. Incidentally, this technique is suitable for flash drives, only in the parameters of scanning storage devices will need to additionally put a tick on the USB-drive.

Conclusion

In general, I think some of the tips will help most users understand how to remove the virus. It removes the .exe files of the virus itself or performs unauthorized blocking of executable files, and you will not understand at once. But if there is even the slightest suspicion of its presence, it is highly advisable not to run any program until after the complete process of scanning, healing files and deleting the threat.

Among other things, it is desirable to have in the system some kind of package such as Internet Security, able to prevent the penetration of the threat at an early stage.