Skip to main content

How to Remove Paint.exe Virus from the PC

What is computer virus?

Computer viruses are programs that spread across computers by attaching a copy of itself to the files on your computer. When you run the infected file the virus gets into action.

A virus is usually harmful and can corrupt data, overwrite files, or use up system resources, and slow it down in the process. Viruses are usually written by programmers to cause trouble.

Types of viruses:

1. Viruses which attack certain area or location:

(a) Boot sector viruses

(b) File viruses

(c) Cluster viruses

2. The main ones that attack computers in peculiar manner:

(a) Stealth viruses

(b) Polymorphic viruses

(c) Multi partite viruses

(d) Fast, slow and sparse infecting viruses

3. Other types:

(a) Phising

(b) Malware

(c) Adware

(d) Spyware

(e) Spam

Viruses like Trojan, spyware, key loggers, etc. collects your information and sends it to its creator. For e.g. Key loggers collects your every key stroke and sends it to its creator. Now when you type your password it will be shown to the creator of key logger. So when you do some bank account related activity online like money transfer etc. use virtual keyboard given on the website of the bank. There are generally virtual keyboards given on the payment gateways of the banks. When you use virtual keyboard then key loggers can’t send your information because you have not used your keyboard and key loggers are designed for your keyboard only. So when you do bank related work on the internet be cautious. Scan your PC with good anti-virus program.

Scroll to Continue

How to remove Paint.exe virus?

First of all start your computer. Now start task manager. In task manager you will see the processes running for different programs. Where, you will notice the process running as Paint.exe. Now right click on it and click on ‘ End Process Tree’. Now go to control panel and in control panel go to folder options. (Control Panel>Folder options>View>Show Hidden files and folder­s). Then also uncheck ‘Hide protected operating system files’ in folder options in view.


Now open My Computer and search as ‘paint.exe’ you will find the files named as 'paint.exe' in every partition except C. Now delete all the files named 'paint.exe'. There will be one file named 'paint.exe' in every partition. Now also search as ‘autorun.inf’ you will also find one file in every partition except C. Delete this ‘autorun.inf’ file.

That’s It. Now your computer is Paint.exe virus free.

Now to repair your partition icon just right click on it, go to properties>tools>error checking>check now>automatically fix file system errors. Let it finish. Done. See image below:


Some virus properties:

→They are usually of lower size. For e.g. 800 kb

→Usually they all are of equal size. For e.g. Paint.exe=800kb, Newfolder.exe=800kb so so…

→Sometimes it hides your original file renaming it and showing itself as your original file. For example, suppose you have one file named as ‘Firefox.exe’ in your D drive. Now when your computer is affected with virus then the virus will rename your original file ‘vFirefox.exe’ and permanently hide it. Now virus will copy itself as ‘Firefox.exe’ in your drive D. Once you execute the file copied by virus it will be activated in your computer. You can simply spot virus files just by checking its size. Viruses generally have small size just in KB and not in MB.

→When you are sure that it is virus then you can delete it and if you are not sure then simply rename it as 'Firefox.txt' instead 'Firefox.exe'. Thus you can deactivate it.


rob nitschke on October 16, 2020:

This does not work. It comes back. Just removing it is stupid. You must go to the registry to fix this.

robert nitschke on June 30, 2019:

You can not remove paint virus by just deleting it. It comes back straight away? I tried.

I am told Comodo security might work..we'll see!

syah on April 02, 2018:

hi, i tried using your method and it seems doesnt work. It keep on appear whenever i scan using malwarebyte. i used cmd and it too, find the path to failure

Mohammed Azharuddin Kadivar (author) on February 25, 2018:

Yes, it is safe to use file "vfilename" hidden by virus. I will try to find a way to remove all files at once. Thank you so much!

medhat on February 25, 2018:

is it safe to use the files that has been hidden the v"filename" files I mean ? or its corrupted with the virus ?

also is there a way I can remove all of this 825kb files at once ?

thanks so much though this really helped :)

olayinka on June 14, 2017:

Tanks man you are the best

doul karim on June 11, 2017:

thank you very much guy!

Nyerhowo Isuru on March 31, 2017:

Very useful information. I also had the same problem, i created a mini application with HCUI to remove this Trojanware. Check it out - 824Kb Remover:

Mohammed Azharuddin Kadivar (author) on December 22, 2016:

You can easily unhide files that viruses have hidden.

First of all open cmd then select the drive where there is your hidden file, then write command as " attrib -s -h -r your file name" ignore apostrophes and leave space between characters like attrib space -s space -h space -r space your file name and then hit enter. That's it. Thanks for commenting.

telolet on December 21, 2016:

how to unhide files that permanently hidden by virus before ?

Mohammed Azharuddin Kadivar (author) on February 23, 2016:

Always welcome....

blaq on January 21, 2016:

tanks bro you are the best

Related Articles