Solved

Malware removal - Am I done?

Posted on 2012-12-28
5
369 Views
Last Modified: 2013-11-22
My method for cleaning malware is to pull the hard drive and attach it as a slave to a Windows 7 machine.  Then I boot  Windows 7 and run Kaspersky on the questionable drive. After Kaspersky finds a bunch of Trojans and Java exploits. I run "M.S. Stand-Alone-Scanner" and often it  finds a bunch more Trojans and Java exploits. This makes me wonder what I might find if I run other Anti-Virus programs that might find stuff that Kaspersky and "M.S. Stand-Alone-Scanner" did not find.

Sometimes the malware changes the registry settings and I need to use Combo Fix.

Is there a better method I can use to assure I have cleaned up all the malware?

How do I know when a system is clean?
0
Comment
Question by:scottjnorris
5 Comments
 
LVL 90

Expert Comment

by:John Hurst
ID: 38728509
Once you put the system back into operation, run the online Malwarebytes to see if it finds yet more stuff.

Once a system is infected (especially if it gets a rootkit), there is no guarantee you got it all. But what you did plus Malwarebytes is at least a very good attempt. See what happens after a day or two.

.... Thinkpads_User
0
 
LVL 8

Expert Comment

by:Scott Thompson
ID: 38728520
Malwarebytes is a great suggestion. Also, you can run TDSSKiller slaved, but only with the functions 'Detect TDLFS System' and 'Scan Boot Sectors'. Great for removing pesky rootkits.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
ID: 38728619
On all serious infections I start with ComboFix followed by Malwarebytes.  Sometimes I have to use a Linux Live disk to find and remove the main virus program first so I can load those two programs.
0
 
LVL 4

Accepted Solution

by:
Haslerct earned 500 total points
ID: 38728907
Rule of thumb... When the system infected by malware before, reformat it! There is no 100% "way" other than this...

Unless you use all anti malware/virus scanner available in the world... As every vendor have their own anti malware pattern and that's why some can detect some cannot.

Cheers...
0
 
LVL 9

Expert Comment

by:abolinhas
ID: 38731446
Try kaspersky rescue disk
https://support.kaspersky.com/4131
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

To Remove Security Suite for Windows Malware from a Windows XP Machine:  Restart computer in Safe Mode (to do this see http://tinyurl.com/me78p) Login as Administrator Go to My Computer /Tools/ Folder Options/ View/  check mark the selectio…
You cannot be 100% sure that you can protect your organization against crypto ransomware but you can lower down the risk and impact of the infection.
This video discusses moving either the default database or any database to a new volume.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now