Virus / Malware Cleaners - GoFuckYourself.com

timlover · 06-09-2014, 06:12 PM

I'm sure most of you use these, but I was making a list for clients so I figured I might as well drop it in here. These are basically the standard tools I use for working on computers that are infected. If you basically run these all in order as I have them posted, you can be pretty sure that your machine has gotten a thorough and redundant cleaning with overlapping.

INITIAL FILE CLEANSER. (no need to scan shit you can just delete)

CCLEANER : http://filehippo.com/download_ccleaner/

PROCESS KILLERS AND ROOTKIT REMOVALS

RKILL : http://www.bleepingcomputer.com/download/rkill/
COMBOFIX : http://www.bleepingcomputer.com/download/combofix/
TDSSKILLER : http://www.bleepingcomputer.com/download/tdsskiller/

MALWARE/VIRUS REMOVERS

MALWAREBYTES : https://www.malwarebytes.org/mwb-download/
SPYBOT : http://www.safer-networking.org/mirrors/
MICROSOFT SE : http://windows.microsoft.com/en-us/w...tials-download
SUPERANTISPYWARE : http://www.superantispyware.com/down...NTISPYWAREFREE

ANTIVIRUS / FIREWALL

ZONEALARM : http://download.zonealarm.com/bin/fr...32_015_000.exe

REGISTERY & CLEANUP PROCEDURE

AUTORUNS : http://download.sysinternals.com/files/Autoruns.zip

SilentKnight · 06-09-2014, 06:15 PM

Good collection of links.

(I have/use most of 'em already...but good to share the resource)

bronco67 · 06-09-2014, 06:20 PM

When I think of all the times Malwarebytes tells me that a site is trying to attack my computer, it makes me feel good knowing I have it.

And by the way, does every porn site need to launch 10 consecutive attacks on my computer. What the fuck?

Mutt · 06-09-2014, 06:21 PM

I used to get hellish spyware issues until I protected myself with AV running at all times.

Combofix saved the day a few times after Malwarebytes, SAS, and others couldn't get it all.

timlover · 06-09-2014, 06:24 PM

I edited and added zonealarm which is a great AV/Firewall to stack with those programs if you are looking for a free option. I use it on my PC and its honestly done a much better job than McAfee or Norton has....

thegreatestporn · 06-09-2014, 06:25 PM

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

Martin Sparrow · 06-09-2014, 06:44 PM

Quote:

Originally Posted by thegreatestporn

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

Hitman Pro
http://www.surfright.nl/en/downloads/

Used to be free.
These days you can still use it for 30 days trail which will clean just like the paid version.

It will just do the job you required in your example.

timlover · 06-09-2014, 07:00 PM

Quote:

Originally Posted by thegreatestporn

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

Well sometimes its not even a case of viruses still being on the machine preventing it from starting, its just that its fucked up either the registry, dll files, or shit like the MBR..etc..

Most of the time you can get windows to boot up in local safe mode with command prompt or if necessary use a Windows 7 install or recovery CD thats been made to get to the prompt. Then you can run things like system file checker which usually has a pretty good success rate and fixing issues well enough to get you into the GUI interface of SAFE MODE and get a foot hold at starting to run your kit removals

You can also use the program that MS posted like HitmanPro Kickstarter and load up via a USB stick....its basically the same type of principal. Which is basically just loading up a minimal/selective startup version of windows....basically same thing as safe mode...

thegreatestporn · 06-09-2014, 07:35 PM

Quote:

Originally Posted by timlover

Well sometimes its not even a case of viruses still being on the machine preventing it from starting, its just that its fucked up either the registry, dll files, or shit like the MBR..etc..

Most of the time you can get windows to boot up in local safe mode with command prompt or if necessary use a Windows 7 install or recovery CD thats been made to get to the prompt. Then you can run things like system file checker which usually has a pretty good success rate and fixing issues well enough to get you into the GUI interface of SAFE MODE and get a foot hold at starting to run your kit removals

You can also use the program that MS posted like HitmanPro Kickstarter and load up via a USB stick....its basically the same type of principal. Which is basically just loading up a minimal/selective startup version of windows....basically same thing as safe mode...

I tried a startup disk and it froze on that too, eveything I could think of and research.
Its working now, more or a if I run into this again. She has a pc that won't even let me run a linux live CD. Replaced ram, still nothing. Assuming its hardware right now though. Ill check out hitman.

timlover · 06-10-2014, 06:00 AM

If you run into any problems again let me know...I'll help out best I can...

Best-In-BC · 06-10-2014, 06:56 AM

lol, or throw out the bullshit and get Norton

dready · 06-10-2014, 07:01 AM

For those worried about malware, I highly recommend MalwareBytes Anti-Exploit. It's currently in beta and is free.

It requires no definitions/updates and has a 100% success rate to date.

http://www.malwarebytes.org/antiexploit/

This, in addition to a good AV like BitDefender, and you will be very well protected.

timlover · 06-10-2014, 09:25 AM

Quote:

Originally Posted by Best-In-BC

lol, or throw out the bullshit and get Norton

You've got to be kidding. Norton is probably the worst product on the market. Almost 99% of the machines I get in to work on that have Norton 360 are infected with crap. Add to the bonus that its a bloated piece of software thats load heavy on PC's.

Hell even Norton admits that its product is basically useless

http://www.pcworld.com/article/21507...antivirus.html

donedeal · 06-10-2014, 09:55 AM

Norton is horrible

247mg · 06-10-2014, 10:08 AM

Trend Micro Internet Security + Microsoft Security Essential as well...

donedeal · 06-10-2014, 10:21 AM

Im surprised ms security essentials found viruses in my site backups emails in gzip but not the others

timlover · 06-10-2014, 11:10 AM

Quote:

Originally Posted by donedeal

Im surprised ms security essentials found viruses in my site backups emails in gzip but not the others

Thats because the others you have the option of whether or not you want to scan zip files. Usually in MB's and SpyBot, archive scanning is turned off by default.

MSE has it on by default. You can uncheck archive files in the settings in MSE

VamosNicholas · 06-10-2014, 11:37 AM

Yeah, lol @ the norton comment. The paid suites like Norton/mcafee were/still are possibly the biggest resource hogs. I've also read a lot of comments that say the free options like avast are just as good for anyone not running a big business that needs higher levels of protection.

Might want to include noscript and adblock addons in your list.

SilentKnight · 06-10-2014, 03:27 PM

I've been running avast here for a few years - it's generally quite good...but not perfect.

Add my voice to the Norton sucks chorus. Learned that long ago.

anexsia · 06-10-2014, 04:09 PM

Quote:

Originally Posted by bronco67

When I think of all the times Malwarebytes tells me that a site is trying to attack my computer, it makes me feel good knowing I have it.

And by the way, does every porn site need to launch 10 consecutive attacks on my computer. What the fuck?

I love it too but it practically blocks every site on here

. I wonder how many of the companies here know their main website is being blocked by Malwarebytes?

Juicy D. Links · 06-10-2014, 04:25 PM

good post

Juicy D. Links · 06-10-2014, 04:25 PM

Kaspersky + Malwarebytes is my combo

timlover · 06-10-2014, 05:24 PM

I wish I had a dollar for every time I had this Q & A with a client.

Q: Do you have a working firewall on the computer? (ME)

A: Oh I have one that came with the computer...windows firewall (CLIENT)

Then I have to try and convince them that WF isn't a real firewall and that they really need some kind of 3rd party firewall in place.

A lot of the free antivirus programs like AVAST & AVG, are great at what they do as far as AV, but the free versions don't have a firewall....and its just about damn near critical to have one if you are even remotely serious about making sure your computer is secure.

That is why I recommend Zone Alarm Free Firewall + AV

It does a great job and doesn't have any problem running along side any of the other utilities except MSE on install. The trick around that is just to uninstall MSE, install ZoneAlarm, and then reinstall MSE and then there is no problem.

CPA-Rush · 06-10-2014, 05:35 PM

use minimal linux distro and dont use windows if u are not very careful when browsing porn sites many adult xxx sites will try to download virus or malware on ur pc

on the other hand the browser will be constantly under attack , watch out

i'm happy linux user

dready · 06-10-2014, 05:55 PM

Quote:

Originally Posted by rosx

use minimal linux distro and dont use windows if u are not very careful when browsing porn sites many adult xxx sites will try to download virus or malware on ur pc

on the other hand the browser will be constantly under attack , watch out

i'm happy linux user

If you surf porn with Chrome, you're pretty much 100% safe. Malware guys don't even try to attack it. For the very off chance something slips through, you should use MBAE (Malwarebytes Anti-Exploit). It's the future of Windows malware protection. As Timlover said above, AV is pretty much dead.

facialfreak · 06-10-2014, 08:14 PM

Quote:

Originally Posted by thegreatestporn

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

Hold down the LEFT SHIFT BUTTON as soon as the startup screen says "Starting Windows" ... and keep holding it until your desktop is fully loaded, and the blue ring stops spinning ...

This stops most applications from loading when windows start ... and will at least get you in, so you can start the cleanup

Captain Kawaii · 06-10-2014, 09:52 PM

Quote:

Originally Posted by timlover

I'm sure most of you use these, but I was making a list for clients so I figured I might as well drop it in here. These are basically the standard tools I use for working on computers that are infected. If you basically run these all in order as I have them posted, you can be pretty sure that your machine has gotten a thorough and redundant cleaning with overlapping.

INITIAL FILE CLEANSER. (no need to scan shit you can just delete)

CCLEANER : http://filehippo.com/download_ccleaner/

PROCESS KILLERS AND ROOTKIT REMOVALS

RKILL : http://www.bleepingcomputer.com/download/rkill/
COMBOFIX : http://www.bleepingcomputer.com/download/combofix/
TDSSKILLER : http://www.bleepingcomputer.com/download/tdsskiller/

MALWARE/VIRUS REMOVERS

MALWAREBYTES : https://www.malwarebytes.org/mwb-download/
SPYBOT : http://www.safer-networking.org/mirrors/
MICROSOFT SE : http://windows.microsoft.com/en-us/w...tials-download
SUPERANTISPYWARE : http://www.superantispyware.com/down...NTISPYWAREFREE

ANTIVIRUS / FIREWALL

ZONEALARM : http://download.zonealarm.com/bin/fr...32_015_000.exe

REGISTERY & CLEANUP PROCEDURE

AUTORUNS : http://download.sysinternals.com/files/Autoruns.zip

Great post and great thread. A special thanks to you and most of the contributors. I will say a special prayer for you and your machines at the shrine in Geek heaven in Akihabara this friday.

Juicy D. Links · 06-11-2014, 04:04 AM

Quote:

Originally Posted by timlover

Thats because the others you have the option of whether or not you want to scan zip files. Usually in MB's and SpyBot, archive scanning is turned off by default.

MSE has it on by default. You can uncheck archive files in the settings in MSE

good point alot of em have it off ... gonna check my shit now lolol

Rochard · 06-24-2014, 07:31 AM

I bookmarked this thread because I knew I would need it eventually... Sure enough this morning I had some crap and couldn't get rid of it like I normally do.

Thanks Tim!

Klen · 06-24-2014, 08:34 AM

Quote:

Originally Posted by rosx

use minimal linux distro and dont use windows if u are not very careful when browsing porn sites many adult xxx sites will try to download virus or malware on ur pc

on the other hand the browser will be constantly under attack , watch out

i'm happy linux user

Yep,i think 99% of malware installs target windows,meaning tries to deploy exe files into your system.Tho when it comes to infecting servers,situation is a little different.So we have a attacker which infect linux server to spread windows malware.

timlover · 06-24-2014, 10:02 AM

Quote:

Originally Posted by Rochard

I bookmarked this thread because I knew I would need it eventually... Sure enough this morning I had some crap and couldn't get rid of it like I normally do.

Thanks Tim!

You are welcome good sir! :P

PaperstreetWinston · 06-24-2014, 04:09 PM

Very nice, thanks for sharing

06-09-2014, 06:12 PM	#1
timlover Confirmed User Join Date: Nov 2002 Posts: 540	Virus / Malware Cleaners I'm sure most of you use these, but I was making a list for clients so I figured I might as well drop it in here. These are basically the standard tools I use for working on computers that are infected. If you basically run these all in order as I have them posted, you can be pretty sure that your machine has gotten a thorough and redundant cleaning with overlapping. INITIAL FILE CLEANSER. (no need to scan shit you can just delete) CCLEANER : http://filehippo.com/download_ccleaner/ PROCESS KILLERS AND ROOTKIT REMOVALS RKILL : http://www.bleepingcomputer.com/download/rkill/ COMBOFIX : http://www.bleepingcomputer.com/download/combofix/ TDSSKILLER : http://www.bleepingcomputer.com/download/tdsskiller/ MALWARE/VIRUS REMOVERS MALWAREBYTES : https://www.malwarebytes.org/mwb-download/ SPYBOT : http://www.safer-networking.org/mirrors/ MICROSOFT SE : http://windows.microsoft.com/en-us/w...tials-download SUPERANTISPYWARE : http://www.superantispyware.com/down...NTISPYWAREFREE ANTIVIRUS / FIREWALL ZONEALARM : http://download.zonealarm.com/bin/fr...32_015_000.exe REGISTERY & CLEANUP PROCEDURE AUTORUNS : http://download.sysinternals.com/files/Autoruns.zip __________________ Last edited by timlover; 06-09-2014 at 06:21 PM..

06-09-2014, 06:20 PM	#3
bronco67 Too lazy to set a custom title Join Date: Dec 2006 Posts: 29,032	When I think of all the times Malwarebytes tells me that a site is trying to attack my computer, it makes me feel good knowing I have it. And by the way, does every porn site need to launch 10 consecutive attacks on my computer. What the fuck? __________________

06-09-2014, 06:21 PM	#4
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	I used to get hellish spyware issues until I protected myself with AV running at all times. Combofix saved the day a few times after Malwarebytes, SAS, and others couldn't get it all. __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

06-09-2014, 06:24 PM	#5
timlover Confirmed User Join Date: Nov 2002 Posts: 540	I edited and added zonealarm which is a great AV/Firewall to stack with those programs if you are looking for a free option. I use it on my PC and its honestly done a much better job than McAfee or Norton has.... __________________

06-09-2014, 06:25 PM	#6
thegreatestporn Confirmed User Industry Role: Join Date: May 2012 Location: Los Angeles, California Posts: 516	What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load. I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though. __________________ CrakRevenue \| WebCamWiz - Free WebCam Whitelabel \|

06-09-2014, 06:15 PM	#2
SilentKnight Megan Fox's fluffer Industry Role: Join Date: Oct 2005 Location: shooting pool in Elysium Posts: 24,818	Good collection of links. (I have/use most of 'em already...but good to share the resource)

06-10-2014, 06:00 AM	#10
timlover Confirmed User Join Date: Nov 2002 Posts: 540	If you run into any problems again let me know...I'll help out best I can... __________________

06-10-2014, 06:56 AM	#11
Best-In-BC Confirmed User Join Date: Jun 2002 Posts: 9,506	lol, or throw out the bullshit and get Norton __________________ Vacares - Web Hosting, Domains, O365, Security & More Unparked domains burning a hole in your pocket? 5 Simple Ways to Make Easy $$$ from Unused Domains

06-10-2014, 07:01 AM	#12
dready Confirmed User Industry Role: Join Date: Oct 2002 Location: Toronto, ON Posts: 5,247	For those worried about malware, I highly recommend MalwareBytes Anti-Exploit. It's currently in beta and is free. It requires no definitions/updates and has a 100% success rate to date. http://www.malwarebytes.org/antiexploit/ This, in addition to a good AV like BitDefender, and you will be very well protected. __________________ ICQ: 91139591 Last edited by dready; 06-10-2014 at 07:02 AM..

06-10-2014, 09:55 AM	#14
donedeal Registered User Industry Role: Join Date: Apr 2012 Posts: 40	Norton is horrible

06-10-2014, 10:08 AM	#15
247mg Yellowplum / 247mg Industry Role: Join Date: Feb 2008 Location: Nicosia, CY Posts: 2,162	Trend Micro Internet Security + Microsoft Security Essential as well... __________________ 247mg.com - Indian Affiliate Program - Over 50+ Sites To Promote - Monetize Your INDIAN Traffic Today!

06-10-2014, 10:21 AM	#16
donedeal Registered User Industry Role: Join Date: Apr 2012 Posts: 40	Im surprised ms security essentials found viruses in my site backups emails in gzip but not the others

06-10-2014, 11:37 AM	#18
VamosNicholas Confirmed User Industry Role: Join Date: Oct 2012 Posts: 181	Yeah, lol @ the norton comment. The paid suites like Norton/mcafee were/still are possibly the biggest resource hogs. I've also read a lot of comments that say the free options like avast are just as good for anyone not running a big business that needs higher levels of protection. Might want to include noscript and adblock addons in your list.

06-10-2014, 03:27 PM	#19
SilentKnight Megan Fox's fluffer Industry Role: Join Date: Oct 2005 Location: shooting pool in Elysium Posts: 24,818	I've been running avast here for a few years - it's generally quite good...but not perfect. Add my voice to the Norton sucks chorus. Learned that long ago.

06-10-2014, 04:25 PM	#21
Juicy D. Links So Fucking Banned Industry Role: Join Date: Apr 2001 Location: N.Y. -Long Island -- Posts: 122,992	good post

06-10-2014, 05:24 PM	#23
timlover Confirmed User Join Date: Nov 2002 Posts: 540	I wish I had a dollar for every time I had this Q & A with a client. Q: Do you have a working firewall on the computer? (ME) A: Oh I have one that came with the computer...windows firewall (CLIENT) Then I have to try and convince them that WF isn't a real firewall and that they really need some kind of 3rd party firewall in place. A lot of the free antivirus programs like AVAST & AVG, are great at what they do as far as AV, but the free versions don't have a firewall....and its just about damn near critical to have one if you are even remotely serious about making sure your computer is secure. That is why I recommend Zone Alarm Free Firewall + AV It does a great job and doesn't have any problem running along side any of the other utilities except MSE on install. The trick around that is just to uninstall MSE, install ZoneAlarm, and then reinstall MSE and then there is no problem. __________________

06-10-2014, 05:35 PM	#24
CPA-Rush small trip to underworld Industry Role: Join Date: Mar 2012 Location: first gen intel 80386/nintendo-gb/arcade/ps1/internet person Posts: 4,927	use minimal linux distro and dont use windows if u are not very careful when browsing porn sites many adult xxx sites will try to download virus or malware on ur pc on the other hand the browser will be constantly under attack , watch out i'm happy linux user __________________ automatic exchange - paxum , bitcoin,pm, payza . daizzzy signbucks caution will black-hat black-hat your traffic ignored forever :zuzana designs {firefox- remove some posters \|skills#1\|skills#2\| email >[email protected] } ツ Last edited by CPA-Rush; 06-10-2014 at 05:36 PM..

06-24-2014, 07:31 AM	#29
Rochard Jägermeister Test Pilot Industry Role: Join Date: Dec 2001 Location: NORCAL Posts: 73,991	I bookmarked this thread because I knew I would need it eventually... Sure enough this morning I had some crap and couldn't get rid of it like I normally do. Thanks Tim! __________________ “The choice is no longer between right or left. The choice is between normal and crazy.” - Sarah Huckabee Sanders YNOT MAIL \| THE BEST ADULT MAILING SOLUTION

06-24-2014, 04:09 PM	#32
PaperstreetWinston Confirmed User Industry Role: Join Date: Jan 2014 Posts: 2,604	Very nice, thanks for sharing __________________ Winston Affiliate Support PaperstreetCash MYLFMoney Charger Cash Skype: mikrocosmos1 Email: [email protected]