Virus / Malware Cleaners

[timlover]

I'm sure most of you use these, but I was making a list for clients so I figured I might as well drop it in here. These are basically the standard tools I use for working on computers that are infected. If you basically run these all in order as I have them posted, you can be pretty sure that your machine has gotten a thorough and redundant cleaning with overlapping.

INITIAL FILE CLEANSER. (no need to scan shit you can just delete)

CCLEANER : http://filehippo.com/download_ccleaner/

PROCESS KILLERS AND ROOTKIT REMOVALS

RKILL : http://www.bleepingcomputer.com/download/rkill/
COMBOFIX : http://www.bleepingcomputer.com/download/combofix/
TDSSKILLER : http://www.bleepingcomputer.com/download/tdsskiller/

MALWARE/VIRUS REMOVERS

MALWAREBYTES : https://www.malwarebytes.org/mwb-download/
SPYBOT : http://www.safer-networking.org/mirrors/
MICROSOFT SE : http://windows.microsoft.com/en-us/w...tials-download
SUPERANTISPYWARE : http://www.superantispyware.com/down...NTISPYWAREFREE

ANTIVIRUS / FIREWALL

ZONEALARM : http://download.zonealarm.com/bin/fr...32_015_000.exe

REGISTERY & CLEANUP PROCEDURE

AUTORUNS : http://download.sysinternals.com/files/Autoruns.zip

[SilentKnight]

Good collection of links.

(I have/use most of 'em already...but good to share the resource)

[bronco67]

When I think of all the times Malwarebytes tells me that a site is trying to attack my computer, it makes me feel good knowing I have it.

And by the way, does every porn site need to launch 10 consecutive attacks on my computer. What the fuck?

[Mutt]

I used to get hellish spyware issues until I protected myself with AV running at all times.

Combofix saved the day a few times after Malwarebytes, SAS, and others couldn't get it all.

[timlover]

I edited and added zonealarm which is a great AV/Firewall to stack with those programs if you are looking for a free option. I use it on my PC and its honestly done a much better job than McAfee or Norton has....

[thegreatestporn]

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

[Martin Sparrow]

Originally Posted by thegreatestporn

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

Hitman Pro
http://www.surfright.nl/en/downloads/

Used to be free.
These days you can still use it for 30 days trail which will clean just like the paid version.

It will just do the job you required in your example.

[timlover]

Originally Posted by thegreatestporn

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

Well sometimes its not even a case of viruses still being on the machine preventing it from starting, its just that its fucked up either the registry, dll files, or shit like the MBR..etc..

Most of the time you can get windows to boot up in local safe mode with command prompt or if necessary use a Windows 7 install or recovery CD thats been made to get to the prompt. Then you can run things like system file checker which usually has a pretty good success rate and fixing issues well enough to get you into the GUI interface of SAFE MODE and get a foot hold at starting to run your kit removals

You can also use the program that MS posted like HitmanPro Kickstarter and load up via a USB stick....its basically the same type of principal. Which is basically just loading up a minimal/selective startup version of windows....basically same thing as safe mode...

[thegreatestporn]

Originally Posted by timlover

Well sometimes its not even a case of viruses still being on the machine preventing it from starting, its just that its fucked up either the registry, dll files, or shit like the MBR..etc..

Most of the time you can get windows to boot up in local safe mode with command prompt or if necessary use a Windows 7 install or recovery CD thats been made to get to the prompt. Then you can run things like system file checker which usually has a pretty good success rate and fixing issues well enough to get you into the GUI interface of SAFE MODE and get a foot hold at starting to run your kit removals

You can also use the program that MS posted like HitmanPro Kickstarter and load up via a USB stick....its basically the same type of principal. Which is basically just loading up a minimal/selective startup version of windows....basically same thing as safe mode...

I tried a startup disk and it froze on that too, eveything I could think of and research.
Its working now, more or a if I run into this again. She has a pc that won't even let me run a linux live CD. Replaced ram, still nothing. Assuming its hardware right now though. Ill check out hitman.

[timlover]

If you run into any problems again let me know...I'll help out best I can...

[Best-In-BC]

lol, or throw out the bullshit and get Norton

[dready]

For those worried about malware, I highly recommend MalwareBytes Anti-Exploit. It's currently in beta and is free.

It requires no definitions/updates and has a 100% success rate to date.

http://www.malwarebytes.org/antiexploit/

This, in addition to a good AV like BitDefender, and you will be very well protected.

[timlover]

Originally Posted by Best-In-BC

lol, or throw out the bullshit and get Norton

You've got to be kidding. Norton is probably the worst product on the market. Almost 99% of the machines I get in to work on that have Norton 360 are infected with crap. Add to the bonus that its a bloated piece of software thats load heavy on PC's.

Hell even Norton admits that its product is basically useless

http://www.pcworld.com/article/21507...antivirus.html

[donedeal]

Norton is horrible

[247mg]

Trend Micro Internet Security + Microsoft Security Essential as well...

[donedeal]

Im surprised ms security essentials found viruses in my site backups emails in gzip but not the others

[timlover]

Originally Posted by donedeal

Im surprised ms security essentials found viruses in my site backups emails in gzip but not the others

Thats because the others you have the option of whether or not you want to scan zip files. Usually in MB's and SpyBot, archive scanning is turned off by default.

MSE has it on by default. You can uncheck archive files in the settings in MSE

[VamosNicholas]

Yeah, lol @ the norton comment. The paid suites like Norton/mcafee were/still are possibly the biggest resource hogs. I've also read a lot of comments that say the free options like avast are just as good for anyone not running a big business that needs higher levels of protection.

Might want to include noscript and adblock addons in your list.

[SilentKnight]

I've been running avast here for a few years - it's generally quite good...but not perfect.

Add my voice to the Norton sucks chorus. Learned that long ago.

[anexsia]

Originally Posted by bronco67

When I think of all the times Malwarebytes tells me that a site is trying to attack my computer, it makes me feel good knowing I have it.

And by the way, does every porn site need to launch 10 consecutive attacks on my computer. What the fuck?

I love it too but it practically blocks every site on here . I wonder how many of the companies here know their main website is being blocked by Malwarebytes?

[Juicy D. Links]

good post

[Juicy D. Links]

Kaspersky + Malwarebytes is my combo

[timlover]

I wish I had a dollar for every time I had this Q & A with a client.

Q: Do you have a working firewall on the computer? (ME)

A: Oh I have one that came with the computer...windows firewall (CLIENT)

Then I have to try and convince them that WF isn't a real firewall and that they really need some kind of 3rd party firewall in place.

A lot of the free antivirus programs like AVAST & AVG, are great at what they do as far as AV, but the free versions don't have a firewall....and its just about damn near critical to have one if you are even remotely serious about making sure your computer is secure.

That is why I recommend Zone Alarm Free Firewall + AV

It does a great job and doesn't have any problem running along side any of the other utilities except MSE on install. The trick around that is just to uninstall MSE, install ZoneAlarm, and then reinstall MSE and then there is no problem.

[CPA-Rush]

use minimal linux distro and dont use windows if u are not very careful when browsing porn sites many adult xxx sites will try to download virus or malware on ur pc

on the other hand the browser will be constantly under attack , watch out

i'm happy linux user

[dready]

Originally Posted by rosx

use minimal linux distro and dont use windows if u are not very careful when browsing porn sites many adult xxx sites will try to download virus or malware on ur pc

on the other hand the browser will be constantly under attack , watch out

i'm happy linux user

If you surf porn with Chrome, you're pretty much 100% safe. Malware guys don't even try to attack it. For the very off chance something slips through, you should use MBAE (Malwarebytes Anti-Exploit). It's the future of Windows malware protection. As Timlover said above, AV is pretty much dead.

[facialfreak]

Originally Posted by thegreatestporn

What do you use if windows freezes on startup including safe mode? Had a friend come to me with this. Spent days trying to get it to load.
I used a virus scan live CD and it came up clean. Ended up using a linux live CD and saving all her important files to an external and reformatted and reinstalled windows. Works like a champ now. We were trying to save her install of CS4 though.

Hold down the LEFT SHIFT BUTTON as soon as the startup screen says "Starting Windows" ... and keep holding it until your desktop is fully loaded, and the blue ring stops spinning ...

This stops most applications from loading when windows start ... and will at least get you in, so you can start the cleanup

[Captain Kawaii]

Originally Posted by timlover

I'm sure most of you use these, but I was making a list for clients so I figured I might as well drop it in here. These are basically the standard tools I use for working on computers that are infected. If you basically run these all in order as I have them posted, you can be pretty sure that your machine has gotten a thorough and redundant cleaning with overlapping.

INITIAL FILE CLEANSER. (no need to scan shit you can just delete)

CCLEANER : http://filehippo.com/download_ccleaner/

PROCESS KILLERS AND ROOTKIT REMOVALS

RKILL : http://www.bleepingcomputer.com/download/rkill/
COMBOFIX : http://www.bleepingcomputer.com/download/combofix/
TDSSKILLER : http://www.bleepingcomputer.com/download/tdsskiller/

MALWARE/VIRUS REMOVERS

MALWAREBYTES : https://www.malwarebytes.org/mwb-download/
SPYBOT : http://www.safer-networking.org/mirrors/
MICROSOFT SE : http://windows.microsoft.com/en-us/w...tials-download
SUPERANTISPYWARE : http://www.superantispyware.com/down...NTISPYWAREFREE

ANTIVIRUS / FIREWALL

ZONEALARM : http://download.zonealarm.com/bin/fr...32_015_000.exe

REGISTERY & CLEANUP PROCEDURE

AUTORUNS : http://download.sysinternals.com/files/Autoruns.zip

Great post and great thread. A special thanks to you and most of the contributors. I will say a special prayer for you and your machines at the shrine in Geek heaven in Akihabara this friday.

[Juicy D. Links]

Originally Posted by timlover

Thats because the others you have the option of whether or not you want to scan zip files. Usually in MB's and SpyBot, archive scanning is turned off by default.

MSE has it on by default. You can uncheck archive files in the settings in MSE

good point alot of em have it off ... gonna check my shit now lolol

[Rochard]

I bookmarked this thread because I knew I would need it eventually... Sure enough this morning I had some crap and couldn't get rid of it like I normally do.

Thanks Tim!

[Klen]

Originally Posted by rosx

use minimal linux distro and dont use windows if u are not very careful when browsing porn sites many adult xxx sites will try to download virus or malware on ur pc

on the other hand the browser will be constantly under attack , watch out

i'm happy linux user

Yep,i think 99% of malware installs target windows,meaning tries to deploy exe files into your system.Tho when it comes to infecting servers,situation is a little different.So we have a attacker which infect linux server to spread windows malware.

[timlover]

Originally Posted by Rochard

I bookmarked this thread because I knew I would need it eventually... Sure enough this morning I had some crap and couldn't get rid of it like I normally do.

Thanks Tim!

You are welcome good sir! :P

[PaperstreetWinston]

Very nice, thanks for sharing