# HG changeset patch
# User Oleksandr Gavenko <gavenkoa@gmail.com>
# Date 1450199452 -7200
# Node ID 897d88b927bcb0e280786b43275ebcf23a519a64
# Parent  fb2ead263aedb1dd906e8fac5bb19d7b18aeab24
HijackThis, Sysinternals.

diff -r fb2ead263aed -r 897d88b927bc virus.rst
--- a/virus.rst	Tue Dec 15 18:57:23 2015 +0200
+++ b/virus.rst	Tue Dec 15 19:10:52 2015 +0200
@@ -28,6 +28,16 @@
 
   http://www.rootkit.nl/projects/rootkit_hunter.html
 
+For Windows:
+
+ * `HijackThis <http://sourceforge.net/projects/hjt/>`_
+ * `Sysinternals suite <https://technet.microsoft.com/ru-ru/sysinternals/>`_
+
+Use HijackThis to detect malware registration in system.
+
+Use Sysinternals procexp.exe to find which process lock file and path to
+executable images for removing unwanted software.
+
 Antivirus software.
 ===================