How to Remove a Shutdown Virus

By Chris Moore

A shutdown virus is programmed to make your computer shut itself off. It can happen from any command the specific virus chooses, be it opening a web browser or accessing your command prompt. A shutdown virus can be a harmless prank from a friend, but it can also be from someone more sinister. A reliable, updated antivirus program is always the best way to completely remove a virus, but there are ways to remove this one manually. Deleting the files and registry keys associated with the virus can help disable it.

Step 1

Open the registry editor on your computer. Go to the "Run" command in the "Start" menu, type "regedit" and press "Enter." Some shutdown viruses can deny you access to the registry editor. In this case, download and install an alternate registry editor and open it.

Step 2

Make a copy of your registry, especially if you are using the computer's main registry editor. Editing anything in the registry is dangerous and can damage the computer. Go to "Start," "Programs," "Accessories," "System Tools" and "System Restore." Choose "create a Restore Point" and follow all instructions the dialogue box gives you.

Step 3

Search the registry keys within "HKEY_CURRENT_USER." Look for autorun keys that include "shutdown," "pc off" or something similar within the data name. Delete these registry keys by right-clicking on them, selecting "Modify" and clicking "Delete."

Step 4

Open your computer's "Program Files" folder. Search for EXE files that appear related to the shutdown virus--they will very likely have the same "shutdown-pc off" title. Delete these files and immediately clear your "Recycling Bin."

Step 5

Open your "Task Manager" by inputting "taskmgr.exe" in the "Run" command. Go to the "Processes" tab and search for the processes with the same names as the deleted files. Right-click these processes and select "End Process" to kill them.

Tips & Warnings

  • You should still download, install, update and run a reputable antivirus program, even after manually deleting the virus. The antivirus program will locate any other files and processes connected to this and any other malware to ensure your computer's security.
  • Don't attempt to manually remove this or any other virus if you aren't experienced at working with your computer's registry editor, task manager or other programs that can affect its operation.