How would you fix a badly infected PC?

[Gaz]

walterbyrd wrote:
> Please note: I am not asking about prevention.
>
> Let's suppose somebody gives you a PC that is loaded with malware, and
> it's your job to fix it.
>
> What is the fastest, easiest, way to go about it?
>

i) install a good virus checker (update it)
ii) install a good spyware checker, spybot, adaware, superantispyware and
hijackthis. (update them all)
iii) Go into safe mode, and run virus checker, run adaware, run spybot
reboot into normal windows
iv) Run hijackthis and thin out most of the **** on there....
v) Make sure that you have the windows firewall or a third party firewall
switched on, install firefox and you are probably safe.

Gaz

[kurt wismer]

Andy Walker wrote:
> kurt wismer wrote:
>
>> David H. Lipman wrote:
>>> From: "kurt wismer" <kurtw@sympatico.ca>
>> [snip]
>>> | rebuilding a system is often expedient but certainly not necessary...
>>>
>>> I think it needs a Cost Benefit Analysis (CBA) based upon the sheer number and type of
>>> infections and balanced upon the capability of the person doing it.
>> i think the activation limitations in vista may just change the cost
>> part of the equation considerably...
>
> A base line disk image would make the job a lot easier and eliminate
> the problem with re-activation of products (unless, of course, they
> are subscription based and the license has run out when you reuse the
> base line image.
>
> I always make a base line image of all my systems, and then do
> periodic full images in between incremental images.

that type of preparation should probably be able to save one a lot of
time and effort (and maybe even money)... it's definitely worth doing,
but it's been my experience most people don't take preparatory
measures... it's for those people that i think the cost is probably
going to change...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"

[walterbyrd]

Gaz wrote:
> i) install a good virus checker (update it)
> ii) install a good spyware checker, spybot, adaware, superantispyware and
> hijackthis. (update them all)
> iii) Go into safe mode, and run virus checker, run adaware, run spybot
> reboot into normal windows
> iv) Run hijackthis and thin out most of the **** on there....
> v) Make sure that you have the windows firewall or a third party firewall
> switched on, install firefox and you are probably safe.

Do you think it's a good idea to try to install AV and anti-spyware
software on a PC that is already badly infected? My understanding is
that the existing malware can afect such installations.


>
> Gaz

[Crispy Critter]

On 30 Oct 2006 19:07:45 -0800, walterbyrd wrote:


> Do you think it's a good idea to try to install AV and anti-spyware
> software on a PC that is already badly infected? My understanding is
> that the existing malware can afect such installations.
>

What would be ideal is anti spyware software that runs off a thumb drive or
boot cdrom and doesn't require any instalation into windows. I don't know
of any such software though except rootkit revealers and Clamwin
anti-virus. Once compromised I always format but the approach you take is
up to you. Actually, I've recently invested in some imaging software
(Acronis True Image) so if I am ever compromised restoring will be a minor
thing and won't require reactivation of XP. Haven't needed to use it yet
though.

[Crispy Critter]

On Wed, 01 Nov 2006 00:18:07 GMT, f/fgeorge wrote:


> Kaspersky AV people make a boot cd just for that purpose. I have used
> it and it works okay. I did have to reload Windows afterward, it
> deleted well over a hundred trojans, spam, spyware, etc. You boot from
> the cd and then run the program. It is based on a Knoppix Linux style
> bootdisk.

OK, thanks, I'll look into getting that. I did download Kaspersky AV once
but never did get around to checking it out. I hear it is good though.
Thing is with boot cd's is that you can't update the definition data base
so it may well misss a newer viris. I have an old Norton boot cd that has
boot-time AV too but again it is way out of date. Bootable thumb drive with
boot-time AV is the answer because you could update the virus database on
the thumb drive. Like you found out though you had to format and resinstall
anyway.