Graalians

Graalians (https://www.graalians.com/forums/index.php)
-   Technology (https://www.graalians.com/forums/forumdisplay.php?f=54)
-   -   Step by step guide to removal of viruses! (HackForums Link) (https://www.graalians.com/forums/showthread.php?t=5675)

DragonRider 04-18-2012 06:13 AM

Step by step guide to removal of viruses! (HackForums Link)
 
http://www.hackforums.net/showthread.php?tid=2292231
Guide to remove viruses. but in case some admin doesn't like the link, I'll quote it.
Spoiler
Quote:

Posted by SuaveSalmon' pid='20674926' dateline='1331434954
Here is a simple Virus Removal guide. Think you have a virus? Computer slow, popups, random ads, or just want to check? Well in this case you have come to the right thread. Here I will show you how to take all that off with simple programs. All links will be provided straight to the download link. So lets get started.
All the adf.ly money will go to hackforums and member giveaways! All links are from the authorized sites

First: Install Mozilla firefox (I recommend it because it has a virus detection built in, it will scan all files before download them, it takes around 3 seconds for them to scan it) at
http://adf.ly/65Nbi

Second: open it up. You can transfer all your passwords from Internet Explorer (or what you are using) to Firefox if you would like. I wouldn't suggest it but you can if you want.

Third: Once you have Firefox installed go to this link
http://adf.ly/65Ne5
and save the the file.
It is eset online scanner. When you save it a little box will appear double and download the file. Click esetsmartinstaller.exe and click run. Accept the terms of use. Let it do its three steps. It may open and close a few times but just wait.
http://i1168.photobucket.com/albums/...almon/eset.png
You should be brought to this box. Check off clean archives and once you have done that look under the scan archives options. You should see an icon that say advanced options. Click on that and check the options I have checked. Once you have done so click start. It will download its virus database so let it do so.
http://i1168.photobucket.com/albums/...n/Untitled.png
Once this is done it should start a scan automatically. Let this run and go watch a YouTube episode (http://adf.ly/65NTY YouTube link. Just trying to scrape up some cash). It may make your computer lag (depending on your specs) a little bit but not to bad.

Once the scan is done click the remove the programs button or next. When it is done click next or the other option it gives you. It will tell you to download and their program and explain it so when you have completed and removed all harmful programs you can close it. I would suggest eset it is paid but it is a very effective antivirus. http://adf.ly/65OZT there is the link to their homepage if you want the amazing program!You even get a free 30 day trial!

Step four: You are going to need to reopen Firefox and download malwerbytes. Here is the main website
http://adf.ly/65Nhk
but it may be down and if so download from cnet
http://adf.ly/65NmA
Once you have downloaded it will bring up the download box. Once done downloading double click it and run the mbam.exe file.
Click English (or the language you would prefer) and follow through the setup. Once at the end of the setup click install. It will say launch and update malwerbytes so just click finish and it will do so. It will connect to their server and download the virus detection database. Just let it download and click ok.
http://i1168.photobucket.com/albums/...almon/mbam.png

Go to the “Settings” tab and make sure you have everything I have checked (don't forget the boxes below the check marks). Once you have these settings checked go back to the “Scanner” tab and click perform full scan. It may take a while so go watch another YouTube video ( http://adf.ly/65NTY ). Once it is done click show results in the bottom corner if you have any results make sure there is a check next to all of them and then click remove all. It will ask you to restart so do so!

Step 5: Download ccleaner

http://adf.ly/65No1
run the .exe in the pop up box.
One you have done that follow through with the steps. One you get to the recycle bin menu check off what you feel you should. Then click finish and it will open. Check off all the options I have checked off in the picture below.
http://i1168.photobucket.com/albums/...eSalmon/cc.png
Check off network passwords too. One you have done that go to the applications tab, right next to the cleaner/windows button. Make sure every single application has a check next to it. ALL OF THEM! Then click run cleaner. Do not analyze just click the “Run Cleaner” button. It may take a while depending on how much junk you may have. Then go to the registry tab and click scan for issues. You may see a bunch of problems so click fix. Then click fix all selected issues. It will ask you to save a copy of the registry so click yes and let it save.

Step 6: Download spybot search and destroy
http://adf.ly/65Npr
click save file. Double click the spybot.exe in the pop up once it is done downloading. Now you have spybot open click, English (or the language you prefer)and accept the terms of use. Now check of these options.
http://i1168.photobucket.com/albums/...mon/spybot.png
Click next then next again and next. You may want to install teatimer. I would not prefer it. You can use it as a free antivirus but it may make your computer lag (depending on your specs). I would suggest it if you click on a lot of random links. It blocks some malicious/virus filled links. But if you do not have a great computer than just leave it off. Also go ahead and check off the internet explorer tool. Click next and install. It will give you two bars downloading the program. Then it will extract. You will get a box with three options checked. That is good leave that and click finish. It will load.
Then it will give you two boxes. Click create a registry back up. Let it do its thing. Then click next and click start using program now. Click search for updates. Click any of the options with your country’s flag next to it, as it downloads the virus database from that server making it faster in your country.
http://i1168.photobucket.com/albums/...n/spybotsd.png
Check off the options in the picture above.
Then click download. It will download. Once done go to the immunize tab on the main bar (shown in the picture below).
http://i1168.photobucket.com/albums/...mon/dsfdsg.png
Close all browsers and click immunize. While it is immunizing go to the search and destroy bar./tab Click on check for problems. It may say you have some temp files and it wants to delete them so just click yes and let it scan. When it is completed you will get some options. Put a check next to all the options and fix selected problems. Now I recommend re-scan but not crucial.

Step 6/Recommended: Download Vulcan's virus scanner http://adf.ly/7IKG6 The great member ๖ۣۜMephobia made this amazing scanner! Few things to note: This is a homemade/handmade scanner, you will not find a tool like this, and it is free forever. It gives you a popup when you open it and a popup when its done scanning. Here is what the GUI looks like when you are done scanning http://i1168.photobucket.com/albums/...mon/Vulcan.png . This tool, Scans the whole system, has an Active Anti-Virus, has Quarantine List, has CPU Info, can Restore Regedit, CMD, Run, Folder Options, UAC, Hosts File, System Restore, and Task Manager (Scans are under 1 minute). Thread to his scanner http://www.hackforums.net/showthread.php?tid=2141173 . It is a great tool, I would recommend it!

Step 7/Possibility: This step is not needed but recommended. There is a slight chance you may have a darkcomet R,A.T. If Vulcan's scanner didn't pick up on this then this is just an optional step! It is the darkcomet removal tool http://adf.ly/7IMvg It is a tool for removing another tool that can have someone else controlling your computer, also known as a R.A.T. You can get them from running any untrusted file! Download it, open up the darkcomet folder and run the .exe file http://i1168.photobucket.com/albums/...metremoval.png Click scan, it may take a while to scan, then if it finds it, remove it. If it doesn't find anything then just click the fine button. There is a slight chance you could have the darkcomet rat out of the thousands of rats because it is a free program.

Step 8: Get tdss killer. http://adf.ly/65pMT it removes rootkits. Click download and let it update itself. One that is done click change parameters. Then make sure everything has a check next to it. If you have any threats then click next or remove. Keep scanning until the rootkits are gone.
http://i1168.photobucket.com/albums/...almon/tdss.png

Step recommended: Download Infested cleaner http://adf.ly/65T4x go to the botkill section, check advanced and click botkill http://i1168.photobucket.com/albums/...Salmon/yes.png click yes, http://i1168.photobucket.com/albums/...almon/yes2.png click ok, http://i1168.photobucket.com/albums/...almon/yes3.png then hit ok. Bam you are done. This tool will kill most R.A.T.s and unauthorized programs running and prevent them from starting up.

Step 9: Reboot your computer and enjoy it begin clean of viruses.

PS: I took all these pictures on my personal computer!

Thank you for using and or reading my guide. Any further problems just PM me!


Ace 04-18-2012 06:15 AM

spyware

DragonRider 04-18-2012 06:16 AM

Quote:

Posted by Ace (Post 97913)
spyware

dude wut

The Doctor 04-18-2012 06:49 AM

I've seen it on Hack Forums before...

Ace 04-18-2012 07:41 AM

Quote:

Posted by DragonRider (Post 97915)
dude wut

I'm kidding XD

RicardoKills 01-04-2013 06:18 AM

Virus Guide: Dont click random links to things/offers that seem so good to be true

XENA* 01-04-2013 06:23 AM

http://www.internet-guide.co.uk/viruses.html

Spoiler
A computer virus is probably the best known and most dangerous threat to computer security. Just like an organic virus, a computer virus attaches itself to healthy computer programs (body cells). With over 1000 different types of viruses, there is a variety of different parts of the computer they can attack eg, boot sector. The most common symptoms that indicate your computer has been infected,



files and data is deleted
the computer takes longer to load programs/applications
items and images on your screen are distorted and unusual images and text appears
unusual noises come from your keyboard, hard disk
hard disk operates excessively or is inaccessible
disk space and filenames change for no reason
system tools such as Scandisk return incorrect values


Below is a list of the most common types of viruses,
Polymorphic Viruses
A polymorphic virus is an encrypted virus that hides itself from anti-virus through encrypted (scrambled) data and then decrypts itself to beable to spread through the computer. The thing that makes it hard for anti-virus software to detect polymorphic viruses is that the virus generates an entirely new decryption routine each time it infects a new executable file, making the virus signature different in each signature.
Stealth Viruses
A Stealth virus hides the modifications made to files and boot records by modifying and forging the results of calls to functions, therefore programs believe they are reading the original file and not the modified file. A good anti-virus software will probably detect a stealth virus due to the fact that a stealth virus attempts to hide itself in memory when a anti-virus software is launched.
Slow Viruses
A Slow virus is a difficult virus to detect due to the fact it only modifies and infects files when they have been modified or copied. Therefore the original file will not be infected by the actual copied file. A good way to protect yourself against slow viruses is by using an integrity checker or shell.
Retro Viruses
A Retro virus attacks the anti-virus software designed to delete it. The retro virus usually attempts to attack the anti-virus data files such as the virus signature store which disables the ability of the anti-virus software to detect and delete viruses. Otherwise the retro virus attempts to alter the operation of the anti-virus software.
Multipartite Viruses
A Multipartite virus attempts to attack and infect both the boot sector and executable files at the same time.
Armored Viruses
A Armored virus attempts to protect itself from anti-virus software by trying to make anti-virus software believe it is located somewhere else. Therefore the Armored virus has made itself more difficult to trace, disassemble and understand.
Companion Viruses
A Companion virus creates a companion file for each executable file the virus infects. Therefore a companion virus may save itself as scandisk.com and everytime a user executes scandisk.exe, the computer will load scandisk.com and therefore infect the system.
Phage Viruses
A Phage virus is a very destructive virus that re-writes a executable program with it's own code, rather than just attaching itself to a file. Therefore a Phage virus will usually attempt to delete or destroy every program it infects.
Revisiting Viruses
A Revisiting virus is a worm virus and attempts to copy itself within the computers memory and then copy itself to another linked computer using TCP/IP protocols. The Morris Worm virus in the late 1980's was the first major virus threat to hit the Internet.
The best way to protect yourself against viruses is to buy a good anti-virus software package such as Norton or McAfee and keep installing the latest updates. These packages may not always protect you against the latest virus, but offer the best solution possible. You should always try the following

Install anti-virus software.
Keep your anti-virus software up-to-date.
Install a personal firewall
Use Windows / Apple / Linux updates to patch security holes.
Don't open email messages that look suspicious
Don't click on email attachments you were not expecting
Viruses on the Mac

All the above topics are mainly concerned with Viruses, worms and Trojan Horses on windows PC's. It is a much bigger problem for the PC than for the Mac. In 2004 of all the thousands of viruses identified by McAfee only a small handful target the Mac. There has however been famous mac viruses and worms such as INIT-29-B and Hypercard HC-9507 virus. Some of the most famous worms are listed below,

AutoStart - originated in Asia in 1998
Like many recently dangerous viruses and worms this originated in Asia in 1998. It first appeared in Hong Kong and then spread across the world. Autostart used QuickTime's AutoStart and infected any PowerPC systems running the MacOS or later. It also usually required QuickTime 2.0 or above. The damage it created was by adding invisible files to every disk partition and also overwriting some data files with random data. In the fallout it caused John Norstad to retire Disinfectant, a shareware program which was a popular alternative to commercial antivirus packages.

Xavier 01-04-2013 06:02 PM

Virus prevention guide:

1. Don't click the giant flashing button saying DOWNLOAD

Kyle Kol 01-05-2013 05:38 AM

Quote:

Posted by Xavier (Post 273448)
Virus prevention guide:

1. Don't click the giant flashing button saying DOWNLOAD



All times are GMT. The time now is 10:04 AM.

Powered by vBulletin/Copyright ©2000 - 2026, vBulletin Solutions Inc.