Solved

Malware removal - Am I done?

Posted on 2012-12-28
5
465 Views
Last Modified: 2013-11-22
My method for cleaning malware is to pull the hard drive and attach it as a slave to a Windows 7 machine.  Then I boot  Windows 7 and run Kaspersky on the questionable drive. After Kaspersky finds a bunch of Trojans and Java exploits. I run "M.S. Stand-Alone-Scanner" and often it  finds a bunch more Trojans and Java exploits. This makes me wonder what I might find if I run other Anti-Virus programs that might find stuff that Kaspersky and "M.S. Stand-Alone-Scanner" did not find.

Sometimes the malware changes the registry settings and I need to use Combo Fix.

Is there a better method I can use to assure I have cleaned up all the malware?

How do I know when a system is clean?
0
Comment
Question by:scottjnorris
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 96

Expert Comment

by:Experienced Member
ID: 38728509
Once you put the system back into operation, run the online Malwarebytes to see if it finds yet more stuff.

Once a system is infected (especially if it gets a rootkit), there is no guarantee you got it all. But what you did plus Malwarebytes is at least a very good attempt. See what happens after a day or two.

.... Thinkpads_User
0
 
LVL 8

Expert Comment

by:Scott Thompson
ID: 38728520
Malwarebytes is a great suggestion. Also, you can run TDSSKiller slaved, but only with the functions 'Detect TDLFS System' and 'Scan Boot Sectors'. Great for removing pesky rootkits.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 38728619
On all serious infections I start with ComboFix followed by Malwarebytes.  Sometimes I have to use a Linux Live disk to find and remove the main virus program first so I can load those two programs.
0
 
LVL 4

Accepted Solution

by:
Haslerct earned 500 total points
ID: 38728907
Rule of thumb... When the system infected by malware before, reformat it! There is no 100% "way" other than this...

Unless you use all anti malware/virus scanner available in the world... As every vendor have their own anti malware pattern and that's why some can detect some cannot.

Cheers...
0
 
LVL 9

Expert Comment

by:abolinhas
ID: 38731446
Try kaspersky rescue disk
https://support.kaspersky.com/4131
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Operating system developers such as Microsoft (https://www.microsoft.com) and Apple have made incredible strides in virus protection over the past decade. Operating systems come packaged with built in defensive tools such as virus protection and a f…
You cannot be 100% sure that you can protect your organization against crypto ransomware but you can lower down the risk and impact of the infection.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question