Home Mail MemberMap Chat (0) Wallpapers
Go Back   ChiefsPlanet > The Royal Lounge > Media Center

Reply
 
Thread Tools Display Modes
Old 08-18-2010, 12:28 AM  
Bearcat Bearcat is offline
Rock Chalk
 
Bearcat's Avatar
 
Join Date: Nov 2000
Location: Kansas City
Casino cash: $6766
The Official Malware/Antivirus Thread - Need help or general advice? Read this first!

This thread provides information on malware removal, links to malware removal tools, and recommendations & links to anti-virus software. The intention of this thread is to provide quick and accurate support for malware-related issues and questions.

Many people here are willing to provide assistance if you're having computer problems, and this thread is not meant to discourage people from asking for help.... but, please read the information provided first, or else there's a good chance you'll be sent here, here, or here . We aren't Geek Squad, so while we won't grossly overcharge you for information and advice, we also aren't responsible for anything you do to your computer.

Also, feel free to make suggestions on the content of this post, and I'll try to keep it up to date.

Research


A lot of information can be found at this EliteKiller link, including...
  • Links to recommended malware scanning & removal tools, including the Rogue Removal Kit (which includes combofix), malwarebytes (aka MBAM), and Hitman Pro.
  • A link to HiJackThis, which creates a log of registry entries, running services, etc; that can be posted here for additional support.
  • Reviews, recommendations, and links to antivirus software, on-demand scanners, and online scanners.
  • Information on firewalls and unsecured networks, as well as malware/virus prevention.

Malware Removal

If you think your computer is infected, the EliteKiller link provides a thorough solution. Simply put...

Quote:
Originally Posted by mikeyis4dcats. View Post
Step 1 go here http://www.elitekiller.com/malware.htm and read up

Step 2 download the Rogue Removal Kit http://www.elitekiller.com/files/rogueremoval.zip

Step 3 unzip the Kit, read the instruction file and run the tools in the order given.

Step 4 Thank me in about 3 hours for fixing your shit.

The Rogue Removal Kit is is a zipped file that includes malwarebytes, CCleaner (a registry cleaner that will also delete temporary files), Combofix, Hitman Pro, and HiJackThis (HiJackThis is optional, see below). The instructions guide you through running these tools in Safe Mode With Networking; then running malwarebytes and an online scanner in Normal Mode.

Some people don't recommend running Combofix unless you're fairly certain you need to use it, but I've never heard of people having major problems with it. Here's a list of symptoms to Vundo infections, which may help determine if you need to run Combofix. You can also look here to see instructions with screenshots on how to use Combofix.

Taken from the readme in the Rogue Removal Kit:

Quality Online Virus Scanners: (all scanners offer detection and removal)


F-Secure
NOD32
Bitdefender

Quality Free Anti-Virus Software:

Panda Cloud
Microsoft Security Essentials
Antivir
Avast!
AVG


My two cents on downloading anti-malware software...
  • Download it from another computer if possible, or from Safe Mode With Networking on the infected machine.
  • Verify you are downloading from a legit source and are not being redirected to a site where you'll end up downloading more malware. If you click on any links above, verify the link in the bottom left before clicking on it, then after clicking the link verify that's where you were taken in the address bar.
  • The elitekiller article mentions downloading the software to a USB drive. Do not download the software to a USB drive on the infected machine if you're not in Safe Mode, or else you risk infecting the USB drive and other computers you connect the drive to in the future.

Other Helpful Tips & Tools

Rkill will kill processes that may be preventing scanners from completely removing malware.

To get into Safe Mode With Networking, press F8 every couple of seconds while the computer is starting (before the Windows splash screen). If you see the Windows splash screen, you will need to try again. The safe thing to do is log into Windows, restart, and try pressing F8 several times before seeing the Windows splash screen. Alternatively, my advice that falls into the category of “what I'd do if it was my own computer, but wouldn't tell someone to do it if I worked in tech support” would be, if you didn't get into Safe Mode the first time and you're at the Windows splash screen, hold down the power button until the computer turns off. When you start the computer again, it should automatically ask you if you want to go into Safe Mode With Networking.

If you get a Blue Screen of Death after selecting Safe Mode With Networking, read the following posts on how to fix it:
http://blog.didierstevens.com/2006/06/22/save-safeboot/
http://blog.didierstevens.com/2006/0...ring-safeboot/
http://blog.didierstevens.com/2007/0...th-a-reg-file/


Still infected, or just want to make sure everything is okay?

HiJackThis is a tool that will create a log file that can be analyzed by geeks to see what is running on your computer. Install and run HiJackThis (preferably in Safe Mode With Networking), and select 'Do a system scan and save a log file'. You can then copy/paste the output to this thread, and with any luck, someone will stop by and let you know what you can delete. You can then checkmark the items in HiJackThis and click 'Fixed checked'.

If you don't get a quick response here or would rather do it yourself, you can also go to http://hijackthis.de/, which is an online analyzer for your HiJackThis log. Simply copy and paste the log into the text box and click the Analyze button. During my testing of the site, I found it wasn't perfect, especially when a proxy was setup (the visitor rating would be 'extremely nasty', but the site itself would say it was safe)... but, it's at least a good tool that can significantly shorten the time it takes to analyze the log, and it gives you an idea of which entries you can delete or at least Google/post here for further research.

You can also look at the responses to HiJackThis posts in this thread to get an idea of what is safe and what should be removed.


Windows Performance

A good starting point to knowing what processes and services are running on your computer is a HiJackThis log. There's also a lot of information that's only a Google search away.

To manage the process that start when Windows starts, use msconfig (Start button -> Run... -> msconfig -> Startup tab). This is a good resource on startup processes, and it includes a large database of startup processes with information on whether they're required to run Windows or if it's okay to uncheck them. You basically want processes that are in c:\Windows checked, and you can generally uncheck processes in c:\program files (but there are exceptions, like your antivirus), but do some research (Google, the provided links, this thread) if you're not sure. Adobe, Apple (including qttask, Boujour, AppleUpdater, etc), and any messenger program (unless you have it sign you in at startup) are always the first ones to get unchecked on my computer.

Services can be a little tougher to manage, because it's usually a much longer list, and it's not as simple as flipping them on or off. This is a great resource for managing Windows services (Start button -> Run... -> services.msc). Simply choose your version of Windows and then click on the Service Configuration link. It presents the default setup, a safe setup (what most people can use without any consequences), a tweaked setup for faster startup, and a bare bones setup for the super geek. There's also a Tweaks page for stuff like Adding/Removing programs and System Restore.

Last edited by Bearcat; 03-27-2012 at 04:07 PM..
Posts: 27,171
Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.
  Reply With Quote
Old 08-18-2010, 12:57 AM   #2
Bearcat Bearcat is offline
Rock Chalk
 
Bearcat's Avatar
 

Join Date: Nov 2000
Location: Kansas City
Casino cash: $6766
So, worked on it a little while tonight & I think this is the info most people need.... maybe a little lengthy, and I can shorten it if people think it'll take away from people reading it.
__________________
Posts: 27,171
Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.
  Reply With Quote
Old 08-18-2010, 09:05 AM   #3
DaFace DaFace is offline
Version 3.0
 
DaFace's Avatar
 

Join Date: Aug 2005
Location: Donkey Land
Casino cash: $6656
Thanks, man. Hopefully this will help some people out.
Posts: 28,075
DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.
  Reply With Quote
Old 08-18-2010, 09:08 AM   #4
siberian khatru siberian khatru is offline
21st Century Schizoid Fan
 
siberian khatru's Avatar
 

Join Date: Jul 2002
Location: The Gates of Delirium
Casino cash: $9221
This was a great idea.
__________________
If you make enough good decisions, three-year plans turn into two-year plans and five-year plans turn into three-year plans. If you make bad decisions, 10-year plans turn into no plan. -- Dayton Moore, 2006

"I'm not talking about getting to .500, I'm talking about winning the World Series when I say eight to 10 years." -- Dayton Moore, May 20, 2009
Posts: 44,265
siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.siberian khatru has enough rep power to blowy ou to bits.
  Reply With Quote
Old 08-18-2010, 09:39 AM   #5
irishjayhawk irishjayhawk is offline
Feelin' Alright
 
irishjayhawk's Avatar
 

Join Date: Aug 2004
Casino cash: $5000
For preventative measures, I believe these should be mentioned:

Lavasoft's AdAware
Spybot Search and Destroy
Spywareblaster

It's been a while since I've actively used those, but they were gold back in the day. Ran the first two at 3am once a week. Updated the third one once a month (You can purchase autoupdates for $10).
__________________
"Think about how stupid the average person is. Then remember that half the people in the world are stupider than that." --George Carlin
Posts: 16,887
irishjayhawk is a favorite in the douche of the year contest.irishjayhawk is a favorite in the douche of the year contest.irishjayhawk is a favorite in the douche of the year contest.irishjayhawk is a favorite in the douche of the year contest.irishjayhawk is a favorite in the douche of the year contest.irishjayhawk is a favorite in the douche of the year contest.irishjayhawk is a favorite in the douche of the year contest.irishjayhawk is a favorite in the douche of the year contest.
  Reply With Quote
Old 08-18-2010, 10:10 AM   #6
Bearcat Bearcat is offline
Rock Chalk
 
Bearcat's Avatar
 

Join Date: Nov 2000
Location: Kansas City
Casino cash: $6766
Quote:
Originally Posted by irishjayhawk View Post
For preventative measures, I believe these should be mentioned:

Lavasoft's AdAware
Spybot Search and Destroy
Spywareblaster

It's been a while since I've actively used those, but they were gold back in the day. Ran the first two at 3am once a week. Updated the third one once a month (You can purchase autoupdates for $10).
I had forgotten about AdAware.. I used to use AdAware, Spybot, and malwarebytes all the time. I've read Spybot is no longer one of the highly recommended tools, but I'll look into those 3 some more.

I'll probably expand on the preventive stuff... the EliteKiller link provides links to reviews of scanners, and the readme of the rogue kit provides links to online scanners, so it's a challenge to not repeat stuff and keep the post fairly concise.
__________________
Posts: 27,171
Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.
  Reply With Quote
Old 08-19-2010, 08:31 AM   #7
thecoffeeguy thecoffeeguy is offline
That Rascally wabbit!
 
thecoffeeguy's Avatar
 

Join Date: Aug 2009
Location: San Diego
Casino cash: $5580
Quote:
Originally Posted by Bearcat View Post
This thread provides information on malware removal, links to malware removal tools, and recommendations & links to anti-virus software. The intention of this thread is to provide quick and accurate support for malware-related issues and questions.

Many people here are willing to provide assistance if you're having computer problems, and this thread is not meant to discourage people from asking for help.... but, please read the information provided first, or else there's a good chance you'll be sent here, here, or here . We aren't Geek Squad, so while we won't grossly overcharge you for information and advice, we also aren't responsible for anything you do to your computer.

Also, feel free to make suggestions on the content of this post, and I'll try to keep it up to date.

Research


A lot of information can be found at this EliteKiller link, including...
  • Links to recommended malware scanning & removal tools, including the Rogue Removal Kit (which includes combofix), malwarebytes (aka MBAM), and Hitman Pro.
  • A link to HiJackThis, which creates a log of registry entries, running services, etc; that can be posted here for additional support.
  • Reviews, recommendations, and links to antivirus software, on-demand scanners, and online scanners.
  • Information on firewalls and unsecured networks, as well as malware/virus prevention.

Malware removal

If you think your computer is infected, the EliteKiller link provides a thorough solution. Simply put...




The Rogue Removal Kit is is a zipped file that includes malwarebytes, CCleaner (a registry cleaner that will also delete temporary files), Combofix, Hitman Pro, and HiJackThis (HiJackThis is optional, see below). The instructions guide you through running these tools in Safe Mode With Networking; then running malwarebytes and an online scanner in Normal Mode.

Some people don't recommend running Combofix unless you're fairly certain you need to use it, but I've never heard of people having major problems with it. Here's a list of symptoms to Vundo infections, which may help determine if you need to run Combofix. You can also look here to see instructions with screenshots on how to use Combofix.

My two cents on downloading anti-malware software...
  • Download it from another computer if possible, or from Safe Mode With Networking on the infected machine.
  • The elitekiller article mentions downloading the software to a USB drive. Do not download the software to a USB drive on the infected machine if you're not in Safe Mode, or else you risk infecting the USB drive and other computers you connect the drive to in the future.

To get into Safe Mode With Networking, press F8 every couple of seconds while the computer is starting (before the Windows splash screen). If you see the Windows splash screen, you will need to try again. The safe thing to do is log into Windows, restart, and try pressing F8 several times before seeing the Windows splash screen. Alternatively, my advice that falls into the category of “what I'd do if it was my own computer, but wouldn't tell someone to do it if I worked in tech support” would be, if you didn't get into Safe Mode the first time and you're at the Windows splash screen, hold down the power button until the computer turns off. When you start the computer again, it should automatically ask you if you want to go into Safe Mode With Networking.

If you get a Blue Screen of Death after selecting Safe Mode With Networking, read the following posts on how to fix it:
http://blog.didierstevens.com/2006/06/22/save-safeboot/
http://blog.didierstevens.com/2006/0...ring-safeboot/
http://blog.didierstevens.com/2007/0...th-a-reg-file/


Still infected, or just want to make sure everything is okay?

HiJackThis is a tool that will create a log file that can be analyzed by geeks to see what is running on your computer. Install and run HiJackThis (preferably in Safe Mode With Networking), and select 'Do a system scan and save a log file'. You can then copy/paste the output to this thread, and with any luck, someone will stop by and let you know what you can delete. You can then checkmark the items in HiJackThis and click 'Fixed checked'.
Good write up. Well done.

I will see what I can come up with as well.

I have a few ideas of stuff that we can add and future items coming out that will help with malware crap.

Quote:
Originally Posted by irishjayhawk View Post
For preventative measures, I believe these should be mentioned:

Lavasoft's AdAware
Spybot Search and Destroy
Spywareblaster

It's been a while since I've actively used those, but they were gold back in the day. Ran the first two at 3am once a week. Updated the third one once a month (You can purchase autoupdates for $10).
I am not a fan of any of the above. AdAware and Spybot used to be pretty good, probably the best to use at one time. However, many other tools have surpassed these.

I still believe hijack this is still one of the better tools to use to find malware and crap. Removing it, is another thing.
Posts: 1,421
thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.thecoffeeguy must have mowed badgirl's lawn.
  Reply With Quote
Old 08-19-2010, 01:16 PM   #8
DaFace DaFace is offline
Version 3.0
 
DaFace's Avatar
 

Join Date: Aug 2005
Location: Donkey Land
Casino cash: $6656
Quote:
Originally Posted by thecoffeeguy View Post
Good write up. Well done.

I will see what I can come up with as well.

I have a few ideas of stuff that we can add and future items coming out that will help with malware crap.



I am not a fan of any of the above. AdAware and Spybot used to be pretty good, probably the best to use at one time. However, many other tools have surpassed these.

I still believe hijack this is still one of the better tools to use to find malware and crap. Removing it, is another thing.
Agreed.
Posted via Mobile Device
Posts: 28,075
DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.DaFace is obviously part of the inner Circle.
  Reply With Quote
Old 08-19-2010, 01:37 PM   #9
Hays Hays is offline
Starter
 
Hays's Avatar
 

Join Date: Jan 2008
Location: Columbia MO
Casino cash: $5699
According to my sonicwall the link to the downloads of the elite and hitman are viruses

Gateway Anti-Virus Alert: Suspicious#kkrunchy (Worm) blocked

not sure if this is true or not but sonicwall seems to think so right now.
Posts: 476
Hays is a favorite in the douche of the year contest.Hays is a favorite in the douche of the year contest.Hays is a favorite in the douche of the year contest.Hays is a favorite in the douche of the year contest.Hays is a favorite in the douche of the year contest.Hays is a favorite in the douche of the year contest.Hays is a favorite in the douche of the year contest.
  Reply With Quote
Old 08-19-2010, 03:25 PM   #10
Bearcat Bearcat is offline
Rock Chalk
 
Bearcat's Avatar
 

Join Date: Nov 2000
Location: Kansas City
Casino cash: $6766
Quote:
Originally Posted by thecoffeeguy View Post
Good write up. Well done.

I will see what I can come up with as well.

I have a few ideas of stuff that we can add and future items coming out that will help with malware crap.



I am not a fan of any of the above. AdAware and Spybot used to be pretty good, probably the best to use at one time. However, many other tools have surpassed these.

I still believe hijack this is still one of the better tools to use to find malware and crap. Removing it, is another thing.
Thanks. Yeah, any contributions would be great... and if the original post gets too cluttered, I can just link to single posts.

Quote:
Originally Posted by Hays View Post
According to my sonicwall the link to the downloads of the elite and hitman are viruses

Gateway Anti-Virus Alert: Suspicious#kkrunchy (Worm) blocked

not sure if this is true or not but sonicwall seems to think so right now.
Interesting... I'm thinking it's a false positive...

http://forum.bitdefender.com/lofiver...php/t5966.html

...however, one thing I thought about adding to the original post was something about making sure you're downloading from a legit site, and I could see why someone might think the Hitman Pro site is iffy since it's .nl. So, I might link to cnet or something to avoid any confusion or the false positive.
__________________
Posts: 27,171
Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.
  Reply With Quote
Old 08-20-2010, 11:19 PM   #11
Mosbonian Mosbonian is offline
On Hiatus
 

Join Date: Aug 2000
Casino cash: $25070
What about rkill? I have had to use it a couple of times on my kids computer whenever he forgets and gets that fake Antivirus crap....

mmaddog
********
Posts: 8,550
Mosbonian has disabled reputation
  Reply With Quote
Old 08-23-2010, 09:45 PM   #12
BryanBusby BryanBusby is offline
MVP
 
BryanBusby's Avatar
 

Join Date: Mar 2006
Casino cash: $5045
Quote:
Originally Posted by thecoffeeguy View Post
Good write up. Well done.

I will see what I can come up with as well.

I have a few ideas of stuff that we can add and future items coming out that will help with malware crap.



I am not a fan of any of the above. AdAware and Spybot used to be pretty good, probably the best to use at one time. However, many other tools have surpassed these.

I still believe hijack this is still one of the better tools to use to find malware and crap. Removing it, is another thing.
I'm not a fan of adaware at all any longer. Last time I installed it on a system, it was a system resource whore.

If you have a legit copy of Windows installed, I strongly recommend using Microsoft Security Essentials. Not only is it pretty damn good, easy on system resources, it's FREE.

http://www.microsoft.com/security_essentials/
Posts: 6,367
BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.BryanBusby Forgot to Remove His Claytex and Got Toxic Shock Syndrome.
  Reply With Quote
Old 08-24-2010, 09:37 PM   #13
Bearcat Bearcat is offline
Rock Chalk
 
Bearcat's Avatar
 

Join Date: Nov 2000
Location: Kansas City
Casino cash: $6766
Quote:
Originally Posted by mmaddog View Post
What about rkill? I have had to use it a couple of times on my kids computer whenever he forgets and gets that fake Antivirus crap....

mmaddog
********
Added, thanks... it would definitely help if Safe Mode isn't working. There have been a few times where I've resorted to changing security and/or deleting random DLLs as a last resort, and something like this would have been useful.
__________________
Posts: 27,171
Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.Bearcat has an IQ even higher than Frankie's.
  Reply With Quote
Old 08-29-2010, 02:57 PM   #14
WilliamTheIrish WilliamTheIrish is offline
Champion Golfer Of The Year
 
WilliamTheIrish's Avatar
 

Join Date: Aug 2001
Casino cash: $9384
Quote:
Originally Posted by irishjayhawk View Post
For preventative measures, I believe these should be mentioned:

Lavasoft's AdAware
Spybot Search and Destroy
Spywareblaster

It's been a while since I've actively used those, but they were gold back in the day. Ran the first two at 3am once a week. Updated the third one once a month (You can purchase autoupdates for $10).

Quote:
Originally Posted by thecoffeeguy I am not a fan of any of the above. AdAware and Spybot used to be pretty good, probably the best to use at one time. However, many other tools have surpassed these.

I still believe hijack this is still one of the better tools to use to find malware and crap. Removing it, is another thing.

I've waited for this: *Takes deep breath in*
Attached Thumbnails
Click image for larger version

Name:	nerds.jpg
Views:	592
Size:	30.4 KB
ID:	94136  
Posts: 25,183
WilliamTheIrish has disabled reputation
  Reply With Quote
Old 08-31-2010, 08:17 PM   #15
KcMizzou KcMizzou is offline
Supporter
 
KcMizzou's Avatar
 

Join Date: Sep 2002
Location: Parkville MO
Casino cash: $5270
This thread's already helped me. I knew something was going on, because MBAM wouldn't run. I ignored that for a while, because there were no other symptoms. Eventually, I started getting redirected on Google searches... so I came here. Hitman Pro nabbed a couple things, and everything's working and back to normal. All the scanners work, and all come up clean.

Thanks fellas. I'm sick of letting it go until you have to wipe the HD.
Posts: 54,696
KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.KcMizzou is obviously part of the inner Circle.
  Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump




All times are GMT -6. The time now is 02:14 PM.


This is a test for a client's site.
A new website that shows member-created construction site listings that need fill or have excess fill. Dirt Monkey @ https://DirtMonkey.net
Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.