PPRuNe Forums - View Single Post - B88gger - I've got a Virus - Help !
View Single Post
Old 3rd February 2013 | 19:12
  #7 (permalink)  
Milo Minderbinder
 
Joined: Jan 2012
Posts: 2,173
Likes: 0
From: .
First boot into safe mode
Go online, download and run Rkill. This doesn't remove anything, but it will knock the malware out of memory during this session
The reset Internet Explorer to its defaults
And go into the Chrome settings and manually remove the rogue search engine and home pages.
Then right click the C: drive in Windows Explorer, go to properties, run the disk clean up tool. Basically you're doing this to try to clean out anything hidden in the temp folders
Then download and run in turn
Hitman Pro
Combofix
Malwarebytes
Spybot

Even then it may be neccessary to reset the Windows shell commands if IE doesn't run properly - post back if thats the case and we can point you to the correct tools


RKill Download
ComboFix Download
Home - SurfRight
Malwarebytes : Free anti-malware download
Spybot - Search & Destroy from Safer-Networking Ltd.

Note these are not alternatives - they need to be run sequentially
Even then you can't be sure they will get everything: personally I always first use Microsoft's Autoruns program to weed out unwanted stuff from loading, and then follow that up with a visual hunt through the registry

Finally, whatever is your antivirus / security program, bin it and get something that works, like Avast

If you don't want to get hijacked like this again, avoid Google Chrome
Its a vulnerable piece of crap thats easy to hijack. Use Firefox, locked down with a combination of No-Script / Adblock plus/ Adblock popup blocker / Ghostery & Better Privacy
As long as the AV software is up to date, little will get past that lot together

FWIW, Safari is equally vulnerable. IE is better, but not a lot.

Last edited by Milo Minderbinder; 3rd February 2013 at 19:20.
Milo Minderbinder is offline  
Reply