The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

Malware/virus problem

Free HotelFree Hotel Registered User regular
edited June 2009 in Help / Advice Forum
So last night I was browsing some site in Google Chrome and got a bad virus, it rebooted my computer, installed itself in my registry and made itself look like a virus removal program. Luckily I had just downloaded Malwarebytes latest update earlier and I rebooted into safe mode, ran malwarebytes and it found and deleted the problem. Then in normal mode I downloaded the latest Spybot S&D and that found some problems that I then deleted. I re-set my Windows Firewall and downloaded avast! which I now have running.

That is the extent of my computer knowledge though (I was lucky to even know about safe mode). Is there a chance these viruses are still on my computer? Are there other applications I should run/be running? How can I tell if I am safe now? I was going to do some online banking tonight but I'm kind of concerned that maybe I still have a virus that will steal that info. Is that realistic?

Free Hotel on

Posts

  • ANTVGM64ANTVGM64 Registered User regular
    edited June 2009
    Might as well grab Adaware and run that in safe mode as well, and if you're feeling particularly frisky run a full system scan with all of those anti-malware spyware programs in safe mode, wait, reboot to safe mode again, and run them all again.

    Anything that's still there may be a bit tricky.

    ANTVGM64 on
  • Dark ShroudDark Shroud Registered User regular
    edited June 2009
    Forget Adaware, Malwarebytes blows it out of the water. Avast is alright, you might want to checkout Avira for a second opinion scan.

    Dark Shroud on
  • GPIA7RGPIA7R Registered User regular
    edited June 2009
    Malwarebytes is the end-all antivirus/malware remover.

    Get it, and rejoice.

    (This user does not believe that there is a single greatest program out there to protect against everything, but is moreso aware that the MalwareBytes community is very serious and constantly improving the program on a near-daily basis with hundreds of updates on definitions, while remaining lightweight and free)

    GPIA7R on
  • mspencermspencer PAX [ENFORCER] Council Bluffs, IARegistered User regular
    edited June 2009
    One more thing you might consider, if you're slightly technical and can use the command line when a program gives you instructions: get BartPE, and also get the latest "super DAT" from McAfee's update service at ftp.nai.com. (You're looking for an sdat####.exe file, which they post daily on their company FTP server.)

    Essentially a BartPE disk with the latest McAfee dat files is the modern day equivalent to what geeks USED to use to clean their PCs: a known-clean boot floppy from which to run DOS antivirus software.

    Instructions are roughly as follows:
    1) Run the BartPE installer
    2) Point it at your Windows XP disk and let it copy and extract the files it needs
    3) Follow the instructions required for use of the McAfee superDAT. Run the sdat####.exe file with the command line options they give you, and it will extract the antivirus definition files into a directory.
    4) Copy the antivirus definition files to the directory BartPE's instructions tell you
    5) Edit BartPE options and enable the McAfee GUI wrapper for their command line scanning engine
    6) Make the BartPE disk
    7) Boot from BartPE disk, edit scan options, and let the scan run.

    Why go to all this trouble? Some malware and virus software is completely silent, using rootkit-like methods to make themselves difficult to detect. More importantly, they have no direct payload. They don't make your system do anything weird that makes you believe you're still infected. They're just there to silently wait for new commands from a malicious third party. If the malware can configure itself so Windows runs it before it runs your antivirus software, your antivirus software will likely never be able to detect it.

    Booting from a BartPE DVD and scanning from that environment bypasses that rootkit behavior. With a recent SuperDAT (that is, you should update the SDAT and burn a new DVD every time you scan) you can catch viral threats that are impossible to detect otherwise.

    mspencer on
    MEMBER OF THE PARANOIA GM GUILD
    XBL Michael Spencer || Wii 6007 6812 1605 7315 || PSN MichaelSpencerJr || Steam Michael_Spencer || Ham NOØK
    QRZ || My last known GPS coordinates: FindU or APRS.fi (Car antenna feed line busted -- no ham radio for me X__X )
Sign In or Register to comment.