Guide to clean your computer from virus & malware

JerkPork

All Star
Supporter
Joined
May 2, 2012
Messages
2,378
Reputation
1,474
Daps
10,762
Reppin
ATL
bump...

Back when I had spare time I used to load Virtual Machines with an OS and "break" them with Malware and figure out how to fix them, but sadly I have no time for that anymore. But it gave me a better understanding on where these malware like to hide, simply put - i know how to manually remove them so I do not always have to rely on scanners.

With patience you can remove even the toughest of malware by using
Process Explorer - Process Explorer
Autoruns - Autoruns for Windows
Process Monitor - Process Monitor

Mark Russinovich, the creator of these tools has a lengthy guide on how to use them. I recommend watching it.


Why not first throw a barrage of scanners at a machine you ask? Because if you come across a heavily infected machine, scanners might not always run and if you did get it to run it might take FOREVER to scan on a slower machine. But I do like end my cleaning sessions with Malwarebytes and a couple of other scanners like TDSSKiller, Rougekiller, ADWCleaner, and CCleaner.

I use Sandboxie - Sandboxie - Sandbox software for application isolation and secure Web browsing - like someone mentioned before. It's like opening programs with a condom on...the website will tell you what you need to know. But essentially, if you infect yourself. All you gotta do is close the sandbox and it will be as if you've been been infected. Read up on it.
 
Last edited:

Tunez

Lloyd Banks Stan
Supporter
Joined
Jun 29, 2013
Messages
43,683
Reputation
6,777
Daps
76,615
Reppin
Southside, 2gz Up
bump...

Back when I had spare time I used to load Virtual Machines with an OS and "break" them with Malware and figure out how to fix them, but sadly I have no time for that anymore. But it gave me a better understanding on where these malware like to hide, simply put - i know how to manually remove them so I do not always have to rely on scanners.

With patience you can remove even the toughest of malware by using
Process Explorer - Process Explorer
Autoruns - Autoruns for Windows
Process Monitor - Process Monitor

Mark Russinovich, the creator of these tools has a lengthy guide on how to use them. I recommend watching it.


Why not first throw a barrage of scanners at a machine you ask? Because if you come across a heavily infected machine, scanners might not always run and if you did get it to run it might take FOREVER to scan on a slower machine. But I do like end my cleaning sessions with Malwarebytes and a couple of other scanners like TDSSKiller, Rougekiller, ADWCleaner, and CCleaner.

I use Sandboxie - Sandboxie - Sandbox software for application isolation and secure Web browsing - like someone mentioned before. It's like opening programs with a condom on...the website will tell you what you need to know. But essentially, if you infect yourself. All you gotta do is close the sandbox and it will be as if you've been been infected. Read up on it.


You could boot scan or connect the HDD to another machine
 

JerkPork

All Star
Supporter
Joined
May 2, 2012
Messages
2,378
Reputation
1,474
Daps
10,762
Reppin
ATL
You could boot scan or connect the HDD to another machine
True. You could do that as well. But it's still very great to know. Options are great, each scenario is different. Multiple ways to approach.

edit: you'll have a better understanding on how malware behaves. then you can double-check yourself with out a scanner telling you your machine is "clean". You wont always have the luxury of functioning USB ports or DVD drives.

not the norm for some folks but I'd like to be able to tackle any scenario
 
Last edited:

Hood Critic

The Power Circle
Joined
May 2, 2012
Messages
24,272
Reputation
3,816
Daps
110,669
Reppin
דעת
bump...

Back when I had spare time I used to load Virtual Machines with an OS and "break" them with Malware and figure out how to fix them, but sadly I have no time for that anymore. But it gave me a better understanding on where these malware like to hide, simply put - i know how to manually remove them so I do not always have to rely on scanners.

With patience you can remove even the toughest of malware by using
Process Explorer - Process Explorer
Autoruns - Autoruns for Windows
Process Monitor - Process Monitor

Mark Russinovich, the creator of these tools has a lengthy guide on how to use them. I recommend watching it.


Why not first throw a barrage of scanners at a machine you ask? Because if you come across a heavily infected machine, scanners might not always run and if you did get it to run it might take FOREVER to scan on a slower machine. But I do like end my cleaning sessions with Malwarebytes and a couple of other scanners like TDSSKiller, Rougekiller, ADWCleaner, and CCleaner.

I use Sandboxie - Sandboxie - Sandbox software for application isolation and secure Web browsing - like someone mentioned before. It's like opening programs with a condom on...the website will tell you what you need to know. But essentially, if you infect yourself. All you gotta do is close the sandbox and it will be as if you've been been infected. Read up on it.


Mark Russinovich's sysinternal presentations and Don Jone's powershell talks are always the highlight of TecEds(Ignite now) conferences. I was in the audience of this particular one.
 
Top