We help IT Professionals succeed at work.

how to remove IDP.Program.D1B0A5C0 virus

tonyadam
tonyadam asked
on
686 Views
Last Modified: 2014-11-16
This looks to be a bad virus (IDP.Program.D1B0A5C0) on a W7 laptop.  I haven't been able to find any good "easy" way to remove it.  Most tools do not do a good job of completely removing it.  Any thoughts?
Comment
Watch Question

Neil RussellTechnical Development Lead

Commented:
format c:

The only safe way to end up with a stable fully functional computer system after a virus infection of this type is to format your drive and start again.
Removal of the actual infection is one thing but the correcting of the problems that they cause that are deep rooted in the OS, registry, corrupt data etc are another.
If this is a business computer then consider the cost in your time and your users time in spending days trying to A) Remove the virus and B) correct all the problems afterwards.
David Johnson, CDSimple Geek from the '70s
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
This one is a bear to remove.. Manual removal is the only way
follow this guide http://virusremovalguideline.blogspot.ca/2014/06/idpprogramd1b0a5c0-affection-what-is-it.html
Gary CaseRetired
CERTIFIED EXPERT
Most Valuable Expert 2013
Top Expert 2009

Commented:
First, the BEST way to remove this is to simply revert your system to an image taken prior to infection.    But of course if you don't have an image, that's not an alternative.

Second, it CAN be removed automatically, but the only time I've done that, I did it by removing the drive from the infected system; attaching it to another system; and then running a full scan on the drive with Malwarebytes, which found the virus and wanted to "quarantine" the associated files -- I changed that to "delete"; then rebooted and ran another full scan against the drive to confirm it was clean ... then reinstalled it in the original system and all was well.

Doing it like this ensures that there are no active processes from the malware that are monitoring and interfering with removal efforts ... something that's often the case with very persistent "bad boys" :-)
Neil RussellTechnical Development Lead

Commented:
The Wrong way to remove a virus is to mount it in another system.  The likes of MalwareBytes are spefically designed to and will function best when used as designed. In a full windows boot, not safe mode and not in as a slave disk.
Retired
CERTIFIED EXPERT
Most Valuable Expert 2013
Top Expert 2009
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
tonyadamRetired

Author

Commented:
I elected to remove the drive from the system, attach it to a clean system and run Malwarebytes and a virus program against the drive with the virus. Malwarebytes found 4 additional issues and those were removed.  I reinstalled the drive natively into the laptop, ran Malwarebytes again as well as AVG and all seems well.
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.