mike13 Posted June 3, 2012 Share Posted June 3, 2012 (edited) I have a friends computer infected with Fraud.security essentials. I know that because Spybot S & D has found it twice, but can not remove it. I then slaved the infected hard drive to my test computer and ran Malwarebytes, and Superantivirus, MSE, and Avast. Neither program found anything. I do not have Spybot S & D on my test computer, but tomorrow I plan to download it and then scan the infected hard drive again. Maybe with it being slaved and not active and running, Spybot can remove the infections. Any other suggestions ?? Thanks, Mike Edited June 3, 2012 by mike13 Link to comment Share on other sites More sharing options...
Tripredacus Posted June 4, 2012 Share Posted June 4, 2012 You may not have good results doing an offline scan on a drive, because a lot of virii will only make themselves known to scanners when they are actively running. I'd run some apps (malwarebytes or whatever) on the live system or maybe in Safe Mode. Link to comment Share on other sites More sharing options...
mike13 Posted June 4, 2012 Author Share Posted June 4, 2012 Tripredacus, Thanks for the reply. I can not run Malwarebytes on the infected computer. I thought that it might be corrupted, so I removed it and re-downloaded Malwarebytes. Still can not run the program, even in SAFE mode. I can run MSE, but it finds nothing. As I said in my first post, Spybot does find two entries of Fraud.security essentials, but can not remove it. I have spent about 6 hours on this computer already. I guess it is time for nuke and pave. Mike Link to comment Share on other sites More sharing options...
Tarun Posted June 5, 2012 Share Posted June 5, 2012 Run Malwarebytes Anti-Malware Chameleon. Link to comment Share on other sites More sharing options...
Tripredacus Posted June 5, 2012 Share Posted June 5, 2012 Yeah, some viruses will write anti-execution code into the Registry to stop programs from running. Usually renaming them after installing works, and this is the reason why Gmer downloads as a random string of characters.exe. Link to comment Share on other sites More sharing options...
mike13 Posted June 6, 2012 Author Share Posted June 6, 2012 Tarun---Thanks for the reply, but I can not even open Malwarebytes, so I can't look for TOOLS etc. Link to comment Share on other sites More sharing options...
Tripredacus Posted June 6, 2012 Share Posted June 6, 2012 Tarun---Thanks for the reply, but I can not even open Malwarebytes, so I can't look for TOOLS etc.Rename the malwarebytes.exe in its Program Files folder and try to run it. Name it something funny or creative. I'd post what mine is named but I might break a forum rule. Link to comment Share on other sites More sharing options...
mike13 Posted June 7, 2012 Author Share Posted June 7, 2012 Success---I think. I was finally able to open and run Malwarebytes. I did not try for updates, I just wanted to run the program since it opened. It ran and found 874 items, about 6 were trojans. It removed everything. I then opened Malwarebytes again, and got the updates this time. This time it found only one item, and removed it. I then ran Spybot Search and Destroy twice. It came up clean. Prior to all this I had run Microsoft Security Essentials. It never found anything. My only issue now is that when I do a manual update for MSE, it takes forever, like 5 minutes when it should take maybe a minute. Then after the manual update, it never closes. I have to shut down the computer. Last evening I did another full scan with MSE. I stopped it after about two hours. Maybe it is me, but it looked like it was scanning the same folders somethimes. Now, prior to this I had tried to install Avast. It never really loaded properly. But if I open Windows Explorer, I see a few folders pertaining to Avast, but i can't delete them. When I try, I get a message that "the file may be in use" etc, or something like that. Avast does NOT appear in Add / Remove programs, so I can't remove it that way. I then Googled "Remove Avast' and found and downloaded a program to delete it. I will try to remove Avast this evening. Hopefully when I remove Avast, MSE will work better. Any other suggestions to try ?? Any other anti malware programs I should download and run, before I feel confident that all the viruses/ trojans, malware are removed ?? Many thanks. I think I am almost finished. Link to comment Share on other sites More sharing options...
mike13 Posted June 8, 2012 Author Share Posted June 8, 2012 Update---I ran that Avast uninstaller, and all seems good now. When I do that manual update for MSE, it only takes about a minute now instead of over 5 like before. I then ran a full scan with MSE and it only took about 45 minutes instead of close to three hours. So I guess Avast was causing the problem. I then searched the malware section that Tarun has. (PC cleanup). I downloaded and ran Eset, Trendmicro, and Kasperski. Eset found two more worms and cleaned them. So I guess I should be clean now. I wish all these antivirus developers, and anti-malware developers would get together and develope one super program that would get rid of everything instead of running many programs etc, but that will never happen. Well, thanks for the help and suggestions. Great site !!!!! Mike Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now