How to Remove the Fun.exe Virusby Jennifer Brown
Getting the Fun.exe computer virus can be anything but. It’s a tricky little bug, and can wreak havoc on your computer if you don’t get it removed. Making sure your anti-virus software is up to date and working is always a good safeguard against many computer viruses, however, this particular virus will only be quarantined and not removed from your computer by anti-virus software alone. To get rid of the fun.exe virus, you’re going to have to remove it manually.
Removing the Virus
Open the Task Manager on your computer and chose the \"Process\" tab. To open task manager in Windows, right click on your task bar (where your Windows start up and main programs are located) and select \"Task Manager\".
Find the Fun.exe, dc.exe, and SVIQ.exe in the \"Process\" tab. Right click on these files and select \"End Process Tree\" so that the viruses won’t disturb the cleaning process.
Open MSConfig and deselect the Fun.exe, dc.exe, and SVIQ.exe. This will keep the viruses from starting when you turn on your computer. If you’re having trouble finding MSConfig, you can search for it on your computer by holding down the Windows and \"R\" key on your keyboard at the same time, or opening the start button and typing \"MSConfig\" in the search bar.
Open \"Registry Editor\" and remove the following keys by selecting them and deleting them (use the search bar and search for regedit if you’re having trouble finding Registry Editor):
dc, dc2k5, fun under the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
load, run under the key HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
Go to the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon and Modify Shell’s value to “Explorer.exe”.
Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\dc
Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\dc2k5
Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Fun
Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Load
Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Run
Search for the following files in the search bar and delete them:
%Windir%\Help\Other.exe %Windir%\inf\Other.exe %Windir%\system\Fun.exe %Windir%\System32\config\Win.exe %Windir%\System32\WinSit.exe %Windir%\dc.exe %Windir%\SVIQ.exe %Windir%\System32\NWB.dat c:\PNga.txt %Windir%\wininit.ini
After deleting these files, reboot your computer in safe mode and change the computer to start to the date just before the virus appeared.
- photo_camera Computer image by Altmann from Fotolia.com