ArtsAutosBooksBusinessEducationEntertainmentFamilyFashionFoodGamesGenderHealthHolidaysHomeHubPagesPersonal FinancePetsPoliticsReligionSportsTechnologyTravel

How to Remove Paint.exe Virus from the PC

Updated on March 28, 2016

What is computer virus?

Computer viruses are programs that spread across computers by attaching a copy of itself to the files on your computer. When you run the infected file the virus gets into action.

A virus is usually harmful and can corrupt data, overwrite files, or use up system resources, and slow it down in the process. Viruses are usually written by programmers to cause trouble.

Types of viruses:

1. Viruses which attack certain area or location:

(a) Boot sector viruses

(b) File viruses

(c) Cluster viruses

2. The main ones that attack computers in peculiar manner:

(a) Stealth viruses

(b) Polymorphic viruses

(c) Multi partite viruses

(d) Fast, slow and sparse infecting viruses

3. Other types:

(a) Phising

(b) Malware

(c) Adware

(d) Spyware

(e) Spam

Viruses like Trojan, spyware, key loggers, etc. collects your information and sends it to its creator. For e.g. Key loggers collects your every key stroke and sends it to its creator. Now when you type your password it will be shown to the creator of key logger. So when you do some bank account related activity online like money transfer etc. use virtual keyboard given on the website of the bank. There are generally virtual keyboards given on the payment gateways of the banks. When you use virtual keyboard then key loggers can’t send your information because you have not used your keyboard and key loggers are designed for your keyboard only. So when you do bank related work on the internet be cautious. Scan your PC with good anti-virus program.

How to remove Paint.exe virus?

First of all start your computer. Now start task manager. In task manager you will see the processes running for different programs. Where, you will notice the process running as Paint.exe. Now right click on it and click on ‘ End Process Tree’. Now go to control panel and in control panel go to folder options. (Control Panel>Folder options>View>Show Hidden files and folder­s). Then also uncheck ‘Hide protected operating system files’ in folder options in view.

Now open My Computer and search as ‘paint.exe’ you will find the files named as 'paint.exe' in every partition except C. Now delete all the files named 'paint.exe'. There will be one file named 'paint.exe' in every partition. Now also search as ‘autorun.inf’ you will also find one file in every partition except C. Delete this ‘autorun.inf’ file.

That’s It. Now your computer is Paint.exe virus free.

Now to repair your partition icon just right click on it, go to properties>tools>error checking>check now>automatically fix file system errors. Let it finish. Done. See image below:

Some virus properties:

→They are usually of lower size. For e.g. 800 kb

→Usually they all are of equal size. For e.g. Paint.exe=800kb, Newfolder.exe=800kb so so…

→Sometimes it hides your original file renaming it and showing itself as your original file. For example, suppose you have one file named as ‘Firefox.exe’ in your D drive. Now when your computer is affected with virus then the virus will rename your original file ‘vFirefox.exe’ and permanently hide it. Now virus will copy itself as ‘Firefox.exe’ in your drive D. Once you execute the file copied by virus it will be activated in your computer. You can simply spot virus files just by checking its size. Viruses generally have small size just in KB and not in MB.

→When you are sure that it is virus then you can delete it and if you are not sure then simply rename it as 'Firefox.txt' instead 'Firefox.exe'. Thus you can deactivate it.


    0 of 8192 characters used
    Post Comment

    • profile image


      7 months ago

      hi, i tried using your method and it seems doesnt work. It keep on appear whenever i scan using malwarebyte. i used cmd and it too, find the path to failure

    • Mohammed Kadivar profile imageAUTHOR

      Mohammed Azharuddin Kadivar 

      8 months ago

      Yes, it is safe to use file "vfilename" hidden by virus. I will try to find a way to remove all files at once. Thank you so much!

    • profile image


      8 months ago

      is it safe to use the files that has been hidden the v"filename" files I mean ? or its corrupted with the virus ?

      also is there a way I can remove all of this 825kb files at once ?

      thanks so much though this really helped :)

    • profile image


      17 months ago

      Tanks man you are the best

    • profile image

      doul karim 

      17 months ago

      thank you very much guy!

    • profile image

      Nyerhowo Isuru 

      19 months ago

      Very useful information. I also had the same problem, i created a mini application with HCUI to remove this Trojanware. Check it out - 824Kb Remover:

    • Mohammed Kadivar profile imageAUTHOR

      Mohammed Azharuddin Kadivar 

      23 months ago

      You can easily unhide files that viruses have hidden.

      First of all open cmd then select the drive where there is your hidden file, then write command as " attrib -s -h -r your file name" ignore apostrophes and leave space between characters like attrib space -s space -h space -r space your file name and then hit enter. That's it. Thanks for commenting.

    • profile image


      23 months ago

      how to unhide files that permanently hidden by virus before ?

    • Mohammed Kadivar profile imageAUTHOR

      Mohammed Azharuddin Kadivar 

      2 years ago

      Always welcome....

    • profile image


      2 years ago

      tanks bro you are the best


    This website uses cookies

    As a user in the EEA, your approval is needed on a few things. To provide a better website experience, uses cookies (and other similar technologies) and may collect, process, and share personal data. Please choose which areas of our service you consent to our doing so.

    For more information on managing or withdrawing consents and how we handle data, visit our Privacy Policy at:

    Show Details
    HubPages Device IDThis is used to identify particular browsers or devices when the access the service, and is used for security reasons.
    LoginThis is necessary to sign in to the HubPages Service.
    Google RecaptchaThis is used to prevent bots and spam. (Privacy Policy)
    AkismetThis is used to detect comment spam. (Privacy Policy)
    HubPages Google AnalyticsThis is used to provide data on traffic to our website, all personally identifyable data is anonymized. (Privacy Policy)
    HubPages Traffic PixelThis is used to collect data on traffic to articles and other pages on our site. Unless you are signed in to a HubPages account, all personally identifiable information is anonymized.
    Amazon Web ServicesThis is a cloud services platform that we used to host our service. (Privacy Policy)
    CloudflareThis is a cloud CDN service that we use to efficiently deliver files required for our service to operate such as javascript, cascading style sheets, images, and videos. (Privacy Policy)
    Google Hosted LibrariesJavascript software libraries such as jQuery are loaded at endpoints on the or domains, for performance and efficiency reasons. (Privacy Policy)
    Google Custom SearchThis is feature allows you to search the site. (Privacy Policy)
    Google MapsSome articles have Google Maps embedded in them. (Privacy Policy)
    Google ChartsThis is used to display charts and graphs on articles and the author center. (Privacy Policy)
    Google AdSense Host APIThis service allows you to sign up for or associate a Google AdSense account with HubPages, so that you can earn money from ads on your articles. No data is shared unless you engage with this feature. (Privacy Policy)
    Google YouTubeSome articles have YouTube videos embedded in them. (Privacy Policy)
    VimeoSome articles have Vimeo videos embedded in them. (Privacy Policy)
    PaypalThis is used for a registered author who enrolls in the HubPages Earnings program and requests to be paid via PayPal. No data is shared with Paypal unless you engage with this feature. (Privacy Policy)
    Facebook LoginYou can use this to streamline signing up for, or signing in to your Hubpages account. No data is shared with Facebook unless you engage with this feature. (Privacy Policy)
    MavenThis supports the Maven widget and search functionality. (Privacy Policy)
    Google AdSenseThis is an ad network. (Privacy Policy)
    Google DoubleClickGoogle provides ad serving technology and runs an ad network. (Privacy Policy)
    Index ExchangeThis is an ad network. (Privacy Policy)
    SovrnThis is an ad network. (Privacy Policy)
    Facebook AdsThis is an ad network. (Privacy Policy)
    Amazon Unified Ad MarketplaceThis is an ad network. (Privacy Policy)
    AppNexusThis is an ad network. (Privacy Policy)
    OpenxThis is an ad network. (Privacy Policy)
    Rubicon ProjectThis is an ad network. (Privacy Policy)
    TripleLiftThis is an ad network. (Privacy Policy)
    Say MediaWe partner with Say Media to deliver ad campaigns on our sites. (Privacy Policy)
    Remarketing PixelsWe may use remarketing pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to advertise the HubPages Service to people that have visited our sites.
    Conversion Tracking PixelsWe may use conversion tracking pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to identify when an advertisement has successfully resulted in the desired action, such as signing up for the HubPages Service or publishing an article on the HubPages Service.
    Author Google AnalyticsThis is used to provide traffic data and reports to the authors of articles on the HubPages Service. (Privacy Policy)
    ComscoreComScore is a media measurement and analytics company providing marketing data and analytics to enterprises, media and advertising agencies, and publishers. Non-consent will result in ComScore only processing obfuscated personal data. (Privacy Policy)
    Amazon Tracking PixelSome articles display amazon products as part of the Amazon Affiliate program, this pixel provides traffic statistics for those products (Privacy Policy)