On this moment The network offers a large number of different services and programs for removing viruses and other malware. In this article I will talk about free program Kaspersky Virus Removal TOOL, with which you can remove unwanted advertising banners.

Download Kaspersky Virus Removal TOOL you can from the official website. You can read more about the terms of use in the user agreement.

Program installation:

Installing the program is quite simple. First you need to select a language. The installation wizard will then appear, accept the terms of the license agreement and click Next. Then you need to select the installation folder, click "Next". After this, the installation process of the program will begin.

Working with the program:

After launch Kaspersky Virus Removal TOOL The main menu of the program will appear on the screen (Fig. 1).

Select objects to scan by checking the appropriate boxes and click on the “Run scan” button. After this, a check of the selected elements will start (Fig. 2).

If infected files are detected during the scanning process, a window will appear (Fig. 3).

In this case, it is first suggested to disinfect the infected file; if treatment is impossible, then Kaspersky Virus Removal TOOL offers to delete the file, and if deletion is impossible, then the program offers to skip this file, and tries to isolate him. It is worth noting that for most infected files, either the disinfection or deletion function is triggered. In order to apply the selected action (“clean” “delete” “skip” for all detected malicious objects of this type check the box next to “Apply to all objects”).

Also under review Kaspersky Virus Removal TOOL can detect malware on your computer. In this case, a window will appear (Fig. 4).

In this case, in case of treatment, you will need to restart your PC.

After completing the computer scan, you can view the report. To do this, in the main program window, click the “Report” button. After this, a window will open with a report on the test performed (Fig. 5).

To view a detailed report, click on the icon next to the words “Automatic check”.

This is the process of working with the program Kaspersky Virus Removal TOOL completed, when finished, the program will offer to remove itself from your PC.

IN Lately computers began to be infected with the so-called ransomware virus (Trojan.Winlock), to unlock which it is proposed to send a paid SMS. In this article you will learn how you can get rid of this virus absolutely free. In situations where antivirus sites do not open, download and run this utility.

1 way. For the case when Windows boots and a banner appears on the screen.

The easiest way to get rid of a virus on your desktop is to go to the website of the antivirus developer software Kaspersky Lab and use the form to obtain an unlock key. A similar operation can be performed by going to the Doctor Web website. After the banner disappears from your desktop, be sure to scan your computer for viruses.

1. Go to the Kaspersky Lab website or Doctor Web. and use the unlock key.

2 and the following methods, for cases when the UNLOCK KEY IS NOT SUITABLE.

If a banner appears on the desktop when you turn on your computer, use free utility for virus treatment CureIt - Download, or the Kaspersky Virus Removal Tool Download These treatment utilities can be run even if you already have another antivirus installed on your computer.

Download and run the CureIt utility - Download, or Kaspersky Virus Removal Tool Download

3 way. For the case when Windows does not boot.

If, when you turn on the computer, instead of loading the operating system, an offer appears on the monitor screen to part with a couple of hundred rubles, boot the computer into safe mode. To do this, restart your computer and constantly press the “F8” key on your keyboard. After a few seconds, you will be asked to select an option to boot into Windows. Select "Safe Mode with Boot" network drivers". Next, we get rid of the virus using one of the methods described above.

1. Boot into Safe Mode
2. Delete using a key from one of the Kaspersky Lab or Doctor Web sites.
3. To restart a computer.
4. Scan your computer for viruses.

4 way. For the case when Windows does not boot in safe mode.

In a situation where you need to remove a banner from your desktop, and the operating system does not boot in either normal or safe mode, the best option would be either a second home computer or a neighbor’s computer. If there are any, we do everything as in the “first or second method.” Also, it will not be bad if you have a LiveCD, download LiveCD from Dr.Web, by booting from which you can check your computer for viruses. Almost all antivirus programs with latest updates treat the computer from a banner on the desktop.

1. Enter the unlock key using another computer, or by booting from a LiveCD, download LiveCD from Dr.Web, download LiveCD from Kaspersky Lab.
2. Scan your computer for viruses.

5 way to remove a banner.

For Windows 7: after pressing the Win + U keys, click on the link “Help with settings” - “Privacy Statement”. Next, go to point 5

1. After your computer starts, press the keyboard shortcut button windows icon+U
2. Select onscreen keyboard and click "Run".
3. Click "Help" - "About"
4. In the window that appears at the bottom, select “Microsoft Web Site”
5. In the address field, write http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/
6. A file save window will pop up, save to your desktop.
7. In the browser, click “File” - “Open” - “Browse” at the top.
8. On the left, click "Desktop". At the very bottom “File type” - “All files”
9. Find the downloaded program and run it.
10. Select Full Scan.

6th way to remove a banner.

If the banner appears before the desktop loads, the screen is locked.

1. Press Ctrl+Shift+Esc until the task manager starts blinking.
2. Without releasing the Ctrl+Shift+Esc keys, click on the task manager " Cancel task".
3. In Task Manager, click " new task" and enter " regedit"
4. Go to HKEY_LOCAL_MACHINE /SOFTWARE/MicrosoftWindows NT/CurrentVersion/Winlogon
5. Go to the right pane of the Registry Editor and check the two options “ Shell" And " Userinit" The Shell parameter value must be " Explorer.exe". Userinit parameter – " C:\WINDOWS\system32\userinit.exe," (no spaces, always a comma at the end)!
6. If the “Shell” and “Userinit” options are ok, find the HKEY_LOCAL_MACHINE /SOFTWARE/Microsoft/Windows NT/CurrentVersion/Image File Execution Options section and expand it. If there is a subkey explorer.exe, delete it (Right click => Delete).
7. Restart your computer.
8. Be sure to check your computer for viruses.

If unsuccessful, repeat this method in safe mode.

If none of the above methods help you, you can contact our company at

1 way. To use services to combat SMS banners, simply enter the phone number to which you are asked to send SMS or to which you need to deposit money through the terminal.

In response, you will receive a code, use it to unlock your computer, and if you log in successfully, immediately scan your computer for viruses.
Method 2. Restore the operating system from previously created saves (roll back the system), for this you will need a disk with your version of the operating system.
3 way. Take off HDD from a computer/laptop and check it with an antivirus on another (not infected) computer.
4 way. Remove SMS virus using Life CD, described in more detail.
5 way. Use the Kaspersky Rescue Disk utility
Kaspersky Rescue Disk 10 is a special program designed to scan and disinfect infected computers. The program is used when the infection level is such that it is not possible to cure the computer using antivirus programs or treatment utilities (for example, Kaspersky Virus Removal Tool) launched under the operating system.
In order to use this utility, you need to burn it to a disk or USB drive. I think there will be no problems with writing to disk; to burn the Kaspersky Rescue Disk 10 image to a USB drive, follow these steps:
1. Connect the USB drive to your computer
Attention!!! To successfully burn Kaspersky Rescue Disk 10, the memory capacity of the USB drive used must be at least 256 MB. Must be installed on the USB stick file system FAT16 or FAT32. If the USB storage device is set to NTFS file system, format it to FAT16 or FAT32. To record Kaspersky Rescue Disk 10, do not use a USB drive that already contains another bootable operating system. Otherwise, your computer may not boot from Kaspersky Rescue Disk 10 correctly.
2. Download the Kaspersky Rescue Disk 10 image and the utility for burning to a USB drive
Iso image of Kaspersky Rescue Disk 10 (~250 MB)
Utility for burning Kaspersky Rescue Disk 10 to USB (~378 KB).
3. Burn Kaspersky Rescue Disk 10 to a USB drive

Restart your computer. After the reboot, the message Press any key to enter the menu will appear on the screen.

Press any key.
Note!!!If you do not press any key within ten seconds, the computer will automatically boot from hard drive.
Use the cursor keys to select a language GUI. Press the ENTER key.

Read License agreement using Kaspersky Rescue Disk. If you agree with his demands, press 1 on your keyboard. To restart, press 2, to turn off the computer, press 3.

Select one of the following boot modes:
Kaspersky Rescue Disk. Graphics mode - loads the graphics subsystem (recommended for most users)
Note!!!If you don't have a mouse connected to your computer (for example, you have a laptop and use a touchpad instead of a mouse), select Text Mode.
Kaspersky Rescue Disk. Text mode - loads a text user interface, which is represented by a console file manager Midnight Commander.
Press the Enter key and wait for the system to boot.

After loading the operating system, you can start working with Kaspersky Rescue Disk 10. Update the program's anti-virus databases and run a virus scan using Kaspersky Rescue Disk 10.

1. Boot your computer from Kaspersky Rescue Disk 10 in graphical mode.
2. In the lower left corner of the screen, click on the button shaped like the letter K. From the menu, select Kaspersky Rescue Disk.
3. Update your antivirus software Kaspersky databases Rescue Disk. To do this, on the Update tab, click the Run update button.
4. Wait until the program’s anti-virus databases are updated.
5. On the Object Scan tab, check the boxes next to the objects that the program should scan. By default, Kaspersky Rescue Disk checks boot files hard sectors disks, as well as hidden startup objects of the operating system.
6. Click the Perform object scan button.
7. After the scan is completed, if threats are detected, the program will ask you what action to take on malicious objects:
- Treat. After treatment, you can continue working with the object.
- Place in Quarantine if the scan fails to determine whether the object is infected or not. If you have set the required option to check quarantined files after each database update, then after receiving a new disinfection signature, the object in Quarantine will be disinfected and made available to the user again.
- Delete. If an object has been assigned a virus status, but it cannot be cured, you can delete it. Information about the object will be saved in the report on detected threats.

Checking in text mode.

To run a computer scan and remove malware from your computer, follow these steps:
1. Boot your computer from Kaspersky Rescue Disk 10 in text mode.
2. In the main menu of the loaded Midnight Commander file manager, select the desired type of scan using the arrow pointers and press Enter on the keyboard (or click on the symbol on the keyboard on the left in the Midnight Commander window).


Kaspersky Lab specialists recommend one by one checking startup objects (to do this, press s on the keyboard), as well as the boot sector (press B on the keyboard).
3. After waiting for the scan to complete, update the Kaspersky Rescue Disk anti-virus databases. To do this, in the main menu of the Midnight Commander file manager, select the Perform update option and press Enter on your keyboard (or just press u on your keyboard).

How to prevent SMS banners from appearing.

To avoid having to deal with SMS banners in the future, you must follow several rules:
1 When you visit pages on the Internet, do not click on pop-up windows on sites, for example, “refresh” flash player”, or “check your computer online for viruses”, or “a virus has been detected on your computer - click delete” - all this will most likely lead to your computer being infected with viruses.
2 Be sure to use an antivirus and update the database regularly.
3 Install all updates to operating system.
Materials used from the site http://support.kaspersky.ru/viruses/rescuedisk/

Unlock Windows (remove banner)

In this lesson you will learn how to unblock OS Windows from various banners with via USB- storage media (flash drive).

To do this, you just need a completely empty flash drive and a downloaded program image Kaspersky Rescue Disk. But for this you will need another computer to burn the image to a USB drive.

Kaspersky Rescue Disk 10— a special program designed to scan and disinfect infected x86 and x64-compatible computers. The program is used when the level of infection is such that it is not possible to cure the computer using anti-virus programs or treatment utilities (for example, Kaspersky Virus Removal Tool) running under the operating system.

To burn the Kaspersky Rescue Disk 10 image to a USB drive, follow these steps:

Step 1. Connect the USB drive to your computer

To successfully record Kaspersky Rescue Disk 10 The memory capacity of the USB drive used must be at least 256 MB. The file system must be installed on the USB drive FAT16 or FAT32. If the USB storage device has a file system NTFS, format it to FAT16 or FAT32. Do not use for recording Kaspersky Rescue Disk 10 A USB drive that already contains another bootable operating system. Otherwise, booting your computer from Kaspersky Rescue Disk 10 may not work correctly.

Step 2. Download the Kaspersky Rescue Disk 10 image and the utility for burning to a USB drive. Download from the Kaspersky Lab server:

Step 3. Burn Kaspersky Rescue Disk 10 to a USB drive. To do this, follow these steps:

1. Run the file rescue2usb.exe.
2. In the window Kaspersky USB Rescue Disk Maker set the location of the downloaded image Kaspersky Rescue Disk 10 using the button Review…

3. Select the desired USB storage device from the list.
4. Click the button START and wait for the recording to complete.

5. In the window with information about the successful completion of recording, click OK.

Step 4. Prepare your computer to boot from a USB drive

To load the menu BIOS keys are used Delete or F2. Keys may be used for some motherboards F1, F8, F10, F11, F12, as well as the following keyboard shortcuts: Ctrl+Esc, Ctrl+Ins, Ctrl+Alt, Ctrl+Alt+Esc, Ctrl+Alt+Enter, Ctrl+Alt+Del, Ctrl+Alt+Ins, Ctrl+Alt+S.

Information about how to open the BIOS menu is displayed on the screen when the operating system starts booting:
&bnsp;

1. In parameters BIOS on the bookmark Boot select download from Removable Device, that is, from a removable disk (detailed information can be obtained from the documentation for the motherboard of your computer).
2. Connect the USB drive with the recorded image Kaspersky Rescue Disk 10 to the computer.

Kaspersky USB Rescue Disk 10 ready for work. You can boot your computer from it and start checking the system.

Step 5. Boot your computer from the created disk.

1. Restart your computer. After rebooting, a message will appear on the screen Press any key to enter the menu.

2. Press any key.

If you do not press any key within ten seconds, the computer will automatically boot from the hard drive.

3. Use the cursor keys to select the GUI language. Press the key ENTER.

4. Read the License Agreement Kaspersky Rescue Disk. If you agree with his requirements, click 1 on keyboard. To reboot, click 2 , to turn off the computer, press 3 .

5. Select one of the following boot modes:

Kaspersky Rescue Disk. Graphics mode- loads the graphics subsystem (recommended for most users)

If you don't have a mouse connected to your computer (for example, you have a laptop and use a touchpad instead of a mouse), select Text Mode.

Kaspersky Rescue Disk. Text mode- loads a text user interface, which is presented by the Midnight Commander console file manager.

6. Press the key Enter and wait for the system to boot.

Step 6. To treat the registry using Kaspersky Windows Unlocker follow these steps:

If you have downloaded Kaspersky Rescue Disk in graphical mode, click on the button in the form of a letter TO in the lower left corner of the screen and select the item in the menu Terminal. IN command line enter the command windowsunlocker and press Enter on keyboard.

After launching the utility, a menu will appear in the Terminal window with the ability to select a command to execute (to select, press the corresponding key and Enter on keyboard):

1 - Unlock Windows(the utility will clean the registry and display a window with the result). Kaspersky Lab specialists recommend performing this action.

0 - Exit.

Well, that's all. Restart your computer, choose to boot from your hard drive, and enjoy the work done. In our practice this method Unblocked a lot of systems. We hope this method helped you.

How to unlock a computer from a banner? This question is asked by a huge number of users who have become victims of ransomware Trojans. A Winlock/MBRLock class virus blocks the operating system by accusing the user of distributing pornographic video content and offering to pay money (top up a specific account or mobile number) in exchange for code times Windows locks . Of course, there is not and cannot be any Windows unlock code on the payment terminal receipt (that’s why it’s a scam). To avoid getting into a similar situation, you need to use licensed antiviruses from well-known laboratories (Kaspersky Lab, Dr.Web, Symantec), and since you are already in trouble, it will help you choose the Windows unlock code based on the account/phone number displayed by the ransomware Trojan.

Below are three online unlocking services: Dr.Web and Kaspersky Lab. Also described is a method for removing a ransomware banner using a boot disk with an antivirus in the case when Windows unlock code Couldn't find it.

Dr.Web is a free computer unlocking service.

Online Windows unlock service.

The famous Russian antivirus laboratory Dr.Web offers free online computer unlocking service. The Windows unlock code can be selected either by the account number or by the image of the ransomware banner window.

Windows unlock service provided by Kaspersky Lab

In addition to antivirus products highest quality, the Russian laboratory of Evgeniy Kaspersky provides everyone, absolutely free, with its computer unlocking service"Kaspersky Deblocker". I would like to note that users who use the products of this anti-virus laboratory on their computer are reliably protected from any viruses and do not encounter the problem of infection or blocking of Windows.

Find a Windows unlock code using Kaspersky Deblocker

What to do if the computer unlocking service did not help?

What to do, if computer unlocking service couldn't help? Unfortunately, Windows unlock code may simply not have been included by the virus developers or, at the moment, may not be known to antivirus laboratories. In this case, the only way out is to treat your computer using a boot disk with an antivirus. In general, such a rescue disk can be recorded in advance and always available in case of infection by a ransomware Trojan. After all, on a locked computer it is no longer possible to visit online antivirus services and find the Windows unlock code!

Kapersky Rescue Disk Desktop

If none computer unlocking service did not help, a disk with bootable antivirus Kaspersky Rescue Disk will help get rid of the annoying ransomware Trojan.

A similar article dedicated to the Dr.Web Live rescue boot disk is located.

And finally, the computer unlocking service provided by the foreign laboratory Eset

Another computer unlocking service provided by the Eset antivirus laboratory, manufacturer of the popular NOD32 antivirus. The Windows unlock service is available at the following link.

To receive a code to unlock your computer, you must fill out the data in the form provided on the page: the phone number to which you are asked to send an SMS and the text of the message displayed by the virus. Next, you need to click the “Select code” button.

Download boot disk with NOD 32 antivirus.

If you cannot find the Windows unlock code, use a rescue disk with NOD32 antivirus.

Antivirus computer help from a professional

If you can’t unlock your computer from the virus, help will come which includes a specialist visit, infection analysis, removal of viruses and rootkits, system recovery and installation of a licensed antivirus.