method of removing malware blocking work pc, using a single device to activate the user u043fu0440u043eu0442u0438u0432u043eu0434u0435u0439u0441u0442u0432u0438 procedure i u0432u0440u0435u0434u043eu043du043eu0441u043du043eu043cu0443 software

摘要

the invention belongs to the field of antivirus protection. the technical result is the possibility of unlocking the computer without the loss of data and reboot the computer, improve the efficiency of the software systems and, consequently, the strengthening of the security of computer systems.method of removing malware blocking performance, involves the use of a separate device activation u043fu0440u0435u0434u043du0430u0437u043du0430u0447u0435 virus x to activate the user procedure of u0432u0440u0435u0434u043eu043du043eu0441u043du043eu043cu0443 software with connectors for connection to the control bus to u043du0442u0440u043eu043bu043bu0435u0440 and block activation.initiation of the bypass and treatment of computer produced in response to an activation signal from the device activate the virus.with this procedure the bypass and treatment includes the study of graphic subsystem os, search all the created windows and working tables, see s user, analysis of all processes and threads, performed on a computer at the time of infection, and on the basis of the collected data of each u0443u043fu043eu043c attachment u044fu043du0443u0442u043eu0433u043e window and desktop to a particular process and / or hierarchy of processesanalysis of the data on the processes and identifying each of them loaded modules involved in the implementation process, the search is automatically performed in the to start the operating system programs, a list of objects recognized as harmful, and isolating the malicious site, removal of the configuration files u0441u0441u044bu043bu043a os and he and removal of malicious process generated by the object.