We are still actively working on the spam issue.

Difference between revisions of "Malware removal"

From InstallGentoo Wiki
Jump to: navigation, search
m (link to backups article)
Line 1: Line 1:
 
You have failed to use Common Sense, and now your computer is infected.  What do?
 
You have failed to use Common Sense, and now your computer is infected.  What do?
 
 
== An answer ==
 
== An answer ==
 
# [[Backups | Backup]]
 
# [[Backups | Backup]]
Line 8: Line 7:
 
(Source: http://technet.microsoft.com/en-us/library/cc700813.aspx)
 
(Source: http://technet.microsoft.com/en-us/library/cc700813.aspx)
  
Alternatively: Wipe the entire system, reformat the drive, and install [[Gentoo]]. Once you are openly infected, there is no way you can ever be sure you still aren't harboring some kind of nasty [[Botnet (Computer Network)|botnet]] (the REAL kind, not the [[botnet|/g/ kind]]) even if you seem to have gotten rid of the most obvious symptoms.
+
Alternatively: Wipe the entire system, reformat the drive, and reinstall your operating system. Now, why do we advice you to go to such lengths to get rid of malware? The reason is that once you are openly infected, there is no way you can ever be sure you still aren't harboring some kind of nasty [[Botnet (Computer Network)|botnet]] (the real kind, not the meme [[botnet|/g/ kind]]) even if you seem to have gotten rid of the most obvious symptoms.
  
== But if you MUST... ==
+
== But if you must... ==
  
If there are any toolbars or search add-ons listed in Programs and Features, try to uninstall them from there first. Sometimes that's enough to get rid of it.
+
If you don't want or can do the above, do this instead. If there are any toolbars or search add-ons listed in Programs and Features, try to uninstall them from there first. Sometimes that's enough to get rid of it.
  
Check your list of browser extensions and add-ons, remove anything suspicious, sometimes adware will install as a "managed" extension and chrome won't let you remove it, you'll have to delete the whole chrome folder in AppData and then reinstall.
+
Check your list of browser extensions and add-ons, remove anything suspicious, sometimes adware will install as a "managed" extension and your browser probably won't let you remove it, you'll have to delete the folder where your browser is installed and then reinstall.
  
 
Also run MSConfig and disable suspicious startup items that aren't supposed to be there. (Google the name if you're suspicious.)
 
Also run MSConfig and disable suspicious startup items that aren't supposed to be there. (Google the name if you're suspicious.)
  
If neither of those fix your problems, try scanning with Malwarebytes Anti-Malware, then if that doesn't fix it, try TDSSKiller, ADWCleaner and F.Secure Blacklight.
+
If none of these fix your problems, try scanning with Malwarebytes Anti-Malware, Clamwin, and if that doesn't fix it, try TDSSKiller, ADWCleaner and F.Secure Blacklight.
  
 
[[Category:Recommendations]]
 
[[Category:Recommendations]]
 
[[Category:HowTo]]
 
[[Category:HowTo]]

Revision as of 01:56, 21 April 2017

You have failed to use Common Sense, and now your computer is infected. What do?

An answer

  1. Backup
  2. Reformat
  3. Reinstall

(Source: http://technet.microsoft.com/en-us/library/cc700813.aspx)

Alternatively: Wipe the entire system, reformat the drive, and reinstall your operating system. Now, why do we advice you to go to such lengths to get rid of malware? The reason is that once you are openly infected, there is no way you can ever be sure you still aren't harboring some kind of nasty botnet (the real kind, not the meme /g/ kind) even if you seem to have gotten rid of the most obvious symptoms.

But if you must...

If you don't want or can do the above, do this instead. If there are any toolbars or search add-ons listed in Programs and Features, try to uninstall them from there first. Sometimes that's enough to get rid of it.

Check your list of browser extensions and add-ons, remove anything suspicious, sometimes adware will install as a "managed" extension and your browser probably won't let you remove it, you'll have to delete the folder where your browser is installed and then reinstall.

Also run MSConfig and disable suspicious startup items that aren't supposed to be there. (Google the name if you're suspicious.)

If none of these fix your problems, try scanning with Malwarebytes Anti-Malware, Clamwin, and if that doesn't fix it, try TDSSKiller, ADWCleaner and F.Secure Blacklight.