Jump to content



Photo

Malware removal issues

malware

  • Please log in to reply
4 replies to this topic

#1 jnelsoninjax

jnelsoninjax

    A custom title? Cool!

  • Tech Issues Solved: 1
  • Joined: 16-December 07
  • Location: Jacksonville, FL
  • OS: Windows 7 Pro X64
  • Phone: Samsung Galaxy Exhibit SGH-T599N

Posted 28 November 2012 - 13:01

My daughter's laptop has some sort of malware on it, and when I run MWB it freezes at 90 seconds in, and 2 items detected. I have to kill the process in task manager and it never completes scanning so there is no log. I have looked in task manager and nothing looks out of place. What should I do next?


#2 Farstrider

Farstrider

    The Clash

  • Joined: 16-March 03
  • Location: Somerset West, Cape Town, SA
  • OS: Arch Linux

Posted 28 November 2012 - 13:08

Have you tried to run MWB in safe mode? Silly question I know, found that this can help. Also before you start the scan see if any weird instances are running and kill them if you can.

#3 OP jnelsoninjax

jnelsoninjax

    A custom title? Cool!

  • Tech Issues Solved: 1
  • Joined: 16-December 07
  • Location: Jacksonville, FL
  • OS: Windows 7 Pro X64
  • Phone: Samsung Galaxy Exhibit SGH-T599N

Posted 28 November 2012 - 13:28

^Not yet, I plan on doing some more with it later today... as far as odd processes, I do not see any thing out of the ordinary running.

#4 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 23
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 28 November 2012 - 15:48

lets just barage it instead of figuring out what it is....because that is what everyone wants, a magic little pill that gets rid of everything. It needs to be done in the following order, do not deviate...well at least don't change the first three as they are the most critical. Reboot as prompted by each scanner (if prompted).

edit: slight change in run order, added ccleaner.

rkill (this kills known malware processes from stopping scanners from running properly)
ccleaner under each profile
rkill again
tdsskiller (this kills many redirect rootkits)
combofix (you will need to disable or uninstall any resident any antimalware programs like norton antivirus, this kills most other rootkits and some malware)
malwarebytes (this kills malware that aren't rootkits)
superantispyware (this cleans up what the others miss)


and if you so choose or it is still occurring after running all of that.
avira (this can take care of some rootkits missed by the other two root kit removers)
eset online scanner (this puts the final nail in the coffin to malware)

#5 +warwagon

warwagon

    Only you can prevent forest fires.

  • Tech Issues Solved: 2
  • Joined: 30-November 01
  • Location: Iowa

Posted 29 November 2012 - 04:34

lets just barage it instead of figuring out what it is....because that is what everyone wants, a magic little pill that gets rid of everything. It needs to be done in the following order, do not deviate...well at least don't change the first three as they are the most critical. Reboot as prompted by each scanner (if prompted).

edit: slight change in run order, added ccleaner.

rkill (this kills known malware processes from stopping scanners from running properly)
ccleaner under each profile
rkill again
tdsskiller (this kills many redirect rootkits)
combofix (you will need to disable or uninstall any resident any antimalware programs like norton antivirus, this kills most other rootkits and some malware)
malwarebytes (this kills malware that aren't rootkits)
superantispyware (this cleans up what the others miss)


and if you so choose or it is still occurring after running all of that.
avira (this can take care of some rootkits missed by the other two root kit removers)
eset online scanner (this puts the final nail in the coffin to malware)


Before you run ccleaner it's a good idea to see if all of your shortcuts are missing under programs. Because if they are you want to copy the smtp (or whatever folder) out of the temp directory before you nuke it.



Click here to login or here to register to remove this ad, it's free!