Tips to detect the existence of the Virus

Tips may be useful, especially at our computer or a friend how we suddenly “weird”. There are some indications that may be used as a basis for estimating whether a computer virus infected us (For Windows Operating System), including:
• Computer running very slow start, this can also occur because of the many programs that we install and run in the background
• The emergence of strange files in a folder. For example, a file named the same as the document file or folder names
• Computers are often dead or restart itself or any time we open a special program such as Task Manager, anti-virus and other
• There is a logo if we right-click My Computer> Properties
• The loss of several options in the computer program or can not walk, such as can not open the Folder Options menu, or lost, can not run the Registry Editor, Open the Run box, Command Prompt, and other
• Anti virus programs and the like can not run
• Sometimes the messages appear as strange poems and the like

If you have some indications above, the following tips to find the location of a possible virus attack our computers.

Previously have tools / programs that are required, namely that Autoruns is a part of SysinternalsSuit Read more tools can also be seen here or can also read this article, about how to obtain it.

To undertake, first opened the program, please Autoruns
, And then select the logon tab. List that is displayed files or programs that run with Windows when we activate the computer. If there are files that weird or not it can be important in the non-switch, with the check. But be careful, do not disable any programs, because Windows can not result in successful living. Here is a list of some of the program or the Windows application and should be fixed, not eliminated checknya sign:
• rdpclip, is the main application that handles Copy File. Provides functions for the Terminal Services server that will allow the copy and paste between server and client. Important program is critical to stability and security, so leave it
• userinit, is a key process in the Windows operating system. On boot-up process of this application set the start-up sequence is required, such as network connection, and Windows Shell. This program is very important, do not be turned off
• explorer, is a program manager or Windows Explorer. This application is set Display Windows, Start Menu, taskbar, desktop, and File Manager. If the display is turned off / windows interface will not appear.
• ctfmon, is the process of application of the Microsoft Office, set the Alternative User Input Text Input Processor (TIP) and the Microsoft Office XP Language Bar. This program does not need roads, but it is not turned off.

Third file is the first application that is usually always in the windows operating system (except Windows 9x / ME, which may only userinit and explorer), and should be left alone, the four applications are shown if there are applications in the Microsoft Office system. Important and note that over the first two applications (rdpclip and userinit) location (Image Path column) in C: \ Windows \ sistem32, the application is in the explorer folder C: \ Windows, ctfmon currently have in the folder C: \ Windows \ sistem32, with the assumption that we install the operating system on Drive C:. In addition to the four files described above, can be the location of the file path dikolom Image, What file is anti-virus, anti spyware, Sound manager, tools for the printer and so forth. If an application is located in strange places or in the windows system, but recognizes it or not we did not install the application, be it a virus.
There are a few things when we read the list that there is in Autoruns. Sometimes a virus, Trojan, Malware and other similar uses of the same name or similar to the application as the windows explorer, expiorer, exploler, spooler, and so forth, they need to be the name and location. For example there is the name of explorer but not in the location C: \ Windows, so be it is a virus. In addition, if we remove the check program or a particular application and then after some time in the back or refresh appear again, then most likely the application is one of the virus.
If you want to know about a description of the application process, can be seen ProcessLibrary.com address. Hopefully useful.