View Full Version : Getting Rid of malware
n2ize
12-23-2011, 04:39 PM
My dad, who is an avid Linux user, asked me to install a certain Windows program on his dual boot machine.. But when i booted it into windows and tried to do anything I discovered that the machine is chock full of viruses and malware and crap. I think this is due to the fact that when my nieces come over they often boot that machine into Windows and do a lot of chatting and other activities that can often lead to malware and virus infections. Since my dad never boots into windows he hasn't noticed the problem...until now.
One thing I noticed is that there is some thing called "media shifting" which usurps and hijacks your browser. You do a Google search or click on a link and instead of going to the site you desire it comes up with some completely unrelated advertisement garbage and the url says "www.mediashifting.com" instead of "the_site_that_I_actually_want.com" I checked on a few sites that explain how to manually remove media shifting but I cannot seem to locate any of the files that they say are connected with media shifting.
I would really like to get this trash off the computer and off my network. I don;t appreciate these criminal scumsuckers putting garbage on my systems. Any suggestions or ideas ?? I am starting to think that it will probably be time to just re-install the whole darned thing.
I would love to have the pleasure of slamming my fist down the throats of these slimeballs but I doubt that would be possible. In the meantime and suggestions appreciated.
kf0rt
12-23-2011, 05:10 PM
Get the free version of Malwarebytes and run it:
http://www.malwarebytes.org/
n2ize
12-23-2011, 05:50 PM
Get the free version of Malwarebytes and run it:
http://www.malwarebytes.org/
Thanks... I'll download it tonight and give it a try.
N1LAF
12-23-2011, 06:41 PM
What Rob recommended - malwarebytes is the best!
KC2UGV
12-24-2011, 12:04 AM
Wipe windows, and reinstall. Easiest, and simplest. 100% Sure to work.
kf0rt
12-24-2011, 08:11 AM
Wipe windows, and reinstall. Easiest, and simplest. 100% Sure to take days.
FTFY. :yes:
Wipe windows, and reinstall. Easiest, and simplest. 100% Sure to work.
Something about an elephant gun and a mouse comes to mind. :roll:
kb2vxa
12-24-2011, 01:51 PM
Then when you're done password protect Windows to keep little source of the problem fingers out of it.
Then when you're done password protect Windows to keep little source of the problem fingers out of it.
Setting up account without administration privileges for the nieces' use might help a little. That way they can get on the Web or whatever it is the little brats sweethearts do but won't be able to install anything without the admin password. Not total protection but it might slow down the advent of reinfection a bit.
W1GUH
12-25-2011, 02:53 AM
FTFY. :yes: :agree:
W1GUH
12-25-2011, 02:54 AM
Something about an elephant gun and a mouse comes to mind. :roll:
Corey says he'll do it for you. At the going rate, of course! ;):lol:
kf0rt
12-25-2011, 06:52 AM
Corey says he'll do it for you. At the going rate, of course! ;):lol:
He'll format your hard drive, though. :geek:
n2ize
12-26-2011, 01:42 PM
Well, so far "malwarebytes" has failed. Apparently whatever virus is on that computer is way too smart for malwarebytes. I installed malwarebytes and when I tried to run it it ran for about 10 seconds and then something killed it and deleted it. I tried re-installing and running it and the same thing happened each time. Seems virus writer is smarter than malwarebytes writer. Or maybe same guy... ;)
Looks like I am going to have to go with a clean wipe and re-instal. But first I need to remember how to re-install the GRUB bootloader because Windows re-install overwrites the MBR and you lose access to your other OS untill you re-install GRUB.
KC2UGV
12-26-2011, 01:44 PM
Something about an elephant gun and a mouse comes to mind. :roll:
Winderz needs a reinstall once a year or so, to clear out the cruft anyways. Winderz is a disposable OS.
W1GUH
12-26-2011, 01:47 PM
Aren't the all? ;)
KC2UGV
12-26-2011, 01:48 PM
Aren't the all? ;)
No. I have one OS with a 3 year uptime (With out a reboot). And, guess which OS is isn't?
N1LAF
12-26-2011, 01:48 PM
Winderz needs a reinstall once a year or so, to clear out the cruft anyways. Winderz is a disposable OS.
No it doesn't. Especially if you do it right, you can get 5 years or more. I have on multiple computers. I have one physical drive for the OS and program install, and one drive just for data.
KC2UGV
12-26-2011, 01:50 PM
No it doesn't. Especially if you do it right, you can get 5 years or more. I have on multiple computers. I have one physical drive for the OS and program install, and one drive just for data.
And, where is your registry?
Software has this nasty tendency to leave it's crap in the registry, in several places. So, unless you prefer digging through your registry annually, to clean crap out; rather than using your OS, suit yourself.
I prefer using my computers, not maintaining them.
Windows: The OS that keeps PC techs in business.
N1LAF
12-26-2011, 01:51 PM
Well, so far "malwarebytes" has failed. Apparently whatever virus is on that computer is way too smart for malwarebytes. I installed malwarebytes and when I tried to run it it ran for about 10 seconds and then something killed it and deleted it. I tried re-installing and running it and the same thing happened each time. Seems virus writer is smarter than malwarebytes writer. Or maybe same guy... ;)
Looks like I am going to have to go with a clean wipe and re-instal. But first I need to remember how to re-install the GRUB bootloader because Windows re-install overwrites the MBR and you lose access to your other OS untill you re-install GRUB.
Run Malwarebytes in safe mode. A virus before the malwarebytes install gives the virus the upper hand.
W1GUH
12-26-2011, 01:51 PM
No. I have one OS with a 3 year uptime (With out a reboot). And, guess which OS is isn't?
Oh yea? Well, my XP went for a good 8 years...and then the only reason it got wiped was 'cuz I broke the machine when I spilt a glass of wine on it. This Visa is going on 4 years & no problems!
So there! :stickpoke::neener:
N1LAF
12-26-2011, 01:54 PM
And, where is your registry?
Software has this nasty tendency to leave it's crap in the registry, in several places. So, unless you prefer digging through your registry annually, to clean crap out; rather than using your OS, suit yourself.
I prefer using my computers, not maintaining them.
Windows: The OS that keeps PC techs in business.
Are you installing software every day? Problems occur when program uninstall/reinstall leaves behind residue.
I never had a problem with the registry either.
n2ize
12-26-2011, 02:27 PM
Run Malwarebytes in safe mode. A virus before the malwarebytes install gives the virus the upper hand.
I'll give it a try. Thanks. Now I just have to figure out how to get in to "safe mode".
n2ize
12-26-2011, 02:42 PM
And, where is your registry?
Software has this nasty tendency to leave it's crap in the registry, in several places. So, unless you prefer digging through your registry annually, to clean crap out; rather than using your OS, suit yourself.
I prefer using my computers, not maintaining them.
Windows: The OS that keeps PC techs in business.
In general I find my *nix boxes to be far less problematic than Windows machines. I would say that 95% of the major computer problems around here have Windows related. The *nix boxes are much more stable and work with far less glitches enabling me to get more work done with less hassles.
Also, what is up with Windows that every time I install a piece of software I have to take down the whole machine and reboot ? On my *nix machines all I do is install the software and run it. Even when it comes to the kernel. On Linux I can add/remove functionality by inserting or removing a module from a running kernel. On Windows a full shutdown is mandated.
kf0rt
12-26-2011, 03:01 PM
I'll give it a try. Thanks. Now I just have to figure out how to get in to "safe mode".
Hit F8 while booting.
KC2UGV
12-26-2011, 03:45 PM
Are you installing software every day? Problems occur when program uninstall/reinstall leaves behind residue.
I never had a problem with the registry either.
Not everyday, but often enough. Adobe Reader does a full install with every update, leaving cruft from the last version sitting around.
If you've never had a problem with the registry, I'd hazard you never use Windows. There's a reason Windows includes Regedit and Regedit32 :)
n2ize
12-26-2011, 05:41 PM
So far so good. I ran the "malwarebytes" in safe mode. It found and removed whole load of garbage. Now the system is working properly on Windblows. I was able to install the software package. Also, the browser is no longer being usurped by the "media shifting" slimeball thugs. So, I may not have to do a whole re-install time sink after all.
N1LAF
12-26-2011, 06:01 PM
So far so good. I ran the "malwarebytes" in safe mode. It found and removed whole load of garbage. Now the system is working properly on Windblows. I was able to install the software package. Also, the browser is no longer being usurped by the "media shifting" slimeball thugs. So, I may not have to do a whole re-install time sink after all.
I'm not surprised.
That's why you need to ask the experts, like Rob and Luke, and not some hack from Buffalo...
;)
n2ize
12-26-2011, 10:07 PM
I'm not surprised.
That's why you need to ask the experts, like Rob and Luke, and not some hack from Buffalo...
;)
Hah, well thanks for the help and i am glad it worked. Saved me time. However, I have had times where a full reinstall was the best option. Fortunately this time the malwarebytes worked out.
Winderz needs a reinstall once a year or so, to clear out the cruft anyways. Winderz is a disposable OS.
Ran XP for several years (I think about 4) without a wipe. The only reason I wiped XP was to try Vista. Went back to XP until this install of 7, which has been at least a year ago, maybe coming up on 2.
Just because you have clients that don't know how to maintain a PC, doesn't mean everyone is inept at doing so.
Based on the advice you seem to give regarding Windoze (and I have no real love for it, either), I wouldn't let you near my stuff. :hand:
So, I may not have to do a whole re-install time sink after all.
You shouldn't have to, despite Corey's "slash and burn" advice to the contrary. :roll:
I've been disinfecting Windoze machines for some time. I've rarely run across a situation where I thought a wipe was needed. I don't give up that easily.
n2ize
12-27-2011, 12:02 AM
You shouldn't have to, despite Corey's "slash and burn" advice to the contrary. :roll:
I've been disinfecting Windoze machines for some time. I've rarely run across a situation where I thought a wipe was needed. I don't give up that easily.
For me its a time factor. being I rarely use Windows and I generally have very little at stake on the Windows side a clean wipe and re-install is more economical time wise and is guaranteed to bring results. In this case it went smooth and fixing it actually saved me time. In other cases I wasn't so lucky and the re-install went smooth and painless.... However, I rarely chose a wipe and re-install as a first line of defence. I try a few fixes first and if they don;t work I do the reinstall.
N1LAF
12-27-2011, 12:07 AM
Is the hard drive large enough for another partition? You could store the image of the Windows system, so if the situation is bad enough, restore image can be performed.
kf0rt
12-27-2011, 07:12 AM
You shouldn't have to, despite Corey's "slash and burn" advice to the contrary. :roll:
I've been disinfecting Windoze machines for some time. I've rarely run across a situation where I thought a wipe was needed. I don't give up that easily.
I've done the "slash and burn" thing for eons; mostly because it coincided with the need for a bigger boot drive anyway, so a good opportunity to do a massive cleanup.
Got a relative's machine on the bench now that's been slow as hell for ages. De-installed all McAffee stuff and tons of HP printer stuff. Installed Avast! and just the printer driver needed. Ran Malwarebytes (nothing found). Ran defrag (didn't need it). Looks like that's all it'll need. Running fine now on an installation of XP that is 5 years old.
I'll give it a try. Thanks. Now I just have to figure out how to get in to "safe mode".F8 during WinBoot?
...never mind, now that I'm caught up, I see you got it...
The fundamental problem remains that there are users of this machine who do not practice, for whatever reason, safe computing, if you know what I mean.
A suggestion for the future: Find a way to load a Virtual Windows machine for use by the kids when they come over. And when they're done, blow it away. That way, any damage that's done within the "sandbox" doesn't get into the machine itself.
We're running a bunch of VM's here at at work, and if you didn't know that the box you were RDP'ing into was a VM... you wouldn't know. Now, I'm not suggesting that you go out and buy a big server to serve as the VM host, but there are ways to load a VM from a workstation & not save any changes to the configuration file (or overwrite it from a master stored elsewhere, like on a CD).
Just a thought.
Powered by vBulletin® Version 4.2.5 Copyright © 2025 vBulletin Solutions Inc. All rights reserved.