Total Members: 14197
Posted by: hazedaze
« on: 02. December 2010., 14:39:50 »YOU WILL NEED A SPARE PC/LAPTOP FOR THIS PROCEDURE.
But Just to point out that if anyone has trouble cleaning any of the latest virus's/trojans,
then the best trick you can always do is to pop the HDD out of the infected machine and connect it to what I class as a donar machine via a SATA or IDE to usb cable or equivelent.
MAKE SURE THE DONAR MACHINE IS FULL PROTECED A/V WISE AND IF POSS ENSURE NOTHING CAN WRITE TO THE C: DRIVE, (i.e McAfee Access Protection - all boxes ticked!!) THIS WILL STOP THE LITTLE NASTYS FROM JUMPING FROM ONE INFECTED DRIVE TO YOUR NICE CLEAN DONAR MACHINE.
Once you know that your donar machine is fully protected and up to date definition wise you can connect you infected drive and let it perform a complete scan. (Mcafee or NOD32 + SuperAntispyware + Malware Bytes) run it several times just in case!!
This tends to works alot better than trying to run any of the clean up software on the infected drive itself as the files that would normally report back as being locked or in use by another process will not be live as the drive is only connected essentually as a data drive, this will almost always get rid of the clone files too. (the ones that write themselves back after they have been so say cleaned)
You should find that you can clean your drive up to 99 - 100% using this method and is my prefered method for getting rid of some of the hard to eradicate payloads.
Obiously it's always worth having a clean backup stored on DVD or portable HDD as you never know what backdoors some of these payloads leave open. I know what it's like though and having a complete clean backup is sometimes easier said than done.
Hope this helps some of you out there...
Regrads
HD
But Just to point out that if anyone has trouble cleaning any of the latest virus's/trojans,
then the best trick you can always do is to pop the HDD out of the infected machine and connect it to what I class as a donar machine via a SATA or IDE to usb cable or equivelent.
MAKE SURE THE DONAR MACHINE IS FULL PROTECED A/V WISE AND IF POSS ENSURE NOTHING CAN WRITE TO THE C: DRIVE, (i.e McAfee Access Protection - all boxes ticked!!) THIS WILL STOP THE LITTLE NASTYS FROM JUMPING FROM ONE INFECTED DRIVE TO YOUR NICE CLEAN DONAR MACHINE.
Once you know that your donar machine is fully protected and up to date definition wise you can connect you infected drive and let it perform a complete scan. (Mcafee or NOD32 + SuperAntispyware + Malware Bytes) run it several times just in case!!
This tends to works alot better than trying to run any of the clean up software on the infected drive itself as the files that would normally report back as being locked or in use by another process will not be live as the drive is only connected essentually as a data drive, this will almost always get rid of the clone files too. (the ones that write themselves back after they have been so say cleaned)
You should find that you can clean your drive up to 99 - 100% using this method and is my prefered method for getting rid of some of the hard to eradicate payloads.
Obiously it's always worth having a clean backup stored on DVD or portable HDD as you never know what backdoors some of these payloads leave open. I know what it's like though and having a complete clean backup is sometimes easier said than done.
Hope this helps some of you out there...
Regrads
HD
Hope you will also recommend us to your friends etc. 
.
) anyway, I wanted to provide a fresh HJT before I do this, and tell me if there's anything else I need to 'fix'.