PCBUILD Archives

Personal Computer Hardware discussion List

PCBUILD@LISTSERV.ICORS.ORG

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
don penlington <[log in to unmask]>
Reply To:
Personal Computer Hardware discussion List <[log in to unmask]>
Date:
Fri, 23 Jul 2010 12:10:12 +1000
Content-Type:
text/plain
Parts/Attachments:
text/plain (38 lines)
Don wrote:
>I have been scanning the computer all day
>with AVG, Superantispyware and Malwarebytes in normal mode and also in safe
>mode and these programs seem to be incapable of removing this infection.>>


Many of these nasties these days simply self-replicate as they are deleted. 
If they are in the system before your security software is updated, they 
generally will protect themselves from removal. You can scan away till the 
cows come home, but it won't do you any good.

The simplest way to defeat these things is to remove the hard drive from 
your computer, insert it into a known clean computer, and run Avira and 
Malwarebytes scans from there.
The second computer will simply see your "dirty" hard dive as an additional 
drive in My Computer, but as nothing from your drive is booting at startup, 
nothing on it will be active. In this way, you are effectively defeating 
any protection such malware may possess.

Of course, this supposes that you have a 2nd clean computer available to 
you which already has the appropriate security software installed and 
updated. And if you happen to own a laptop, this procedure won't generally 
be possible without additional tools.

This is, in principle, much the same as Bob Wright's excellent suggestion 
of running your scans from a boot disk.

If the system is too badly infected, a reformat may be the only practical 
answer. I've seen some classes of virus which can replace vital Windows 
files with their own versions. When you remove the virus, you also remove 
these system files which will leave you with an unbootable computer.

Don Penlington

            Do you want to signoff PCBUILD or just change to
                    Digest mode - visit our web site:
                   http://freepctech.com/pcbuild.shtml

ATOM RSS1 RSS2