+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: How To delete viruses. (Noob friendly) (/Thread-How-To-delete-viruses-Noob-friendly)
How To delete viruses. (Noob friendly) - Sebastionay - 02-25-2013
I expect many of you out there have browsed through the folders in your computer before, after realizing you were infected by a virus.
Then you find the virus folder! great! but when you go to delete it, you get that annoying sound and a warning message telling you that you can't delete. I'm gonna show you the simple solution to this without needing to go and download any tools.
Right click properties on the file or folder, uncheck read only.
Try to delete again. If it tells you the same thing that you don't have permission to delete.
This means the virus is actually already running already on your computer.
Press ctrl+alt+delete and open up the processes part of task manager.
Now look through the virus folders at the .exe files and so on, and find the one that is running in your processes, it will have the same name in the folder as it does in the process list.
select the process, click on end process, go back to the virus folder... uncheck read only again. If you have ended all the processes in the folder, you will be able to delete it without any problem.
Problem solved
RE: How To delete viruses. (Noob friendly) - Deque - 02-25-2013
This is a nice tutorial, thanks for sharing. It will probably only help for really weak malware or parts of malware.
If you really have virusses they may have infected files that you need (or your operating system needs) and disinfecting them is not as easy as deleting some files.
RE: How To delete viruses. (Noob friendly) - stranded4eva - 02-26-2013
ok this is fine i like it
RE: How To delete viruses. (Noob friendly) - Sebastionay - 02-26-2013
(02-25-2013, 02:39 PM)Deque Wrote: This is a nice tutorial, thanks for sharing. It will probably only help for really weak malware or parts of malware.
If you really have virusses they may have infected files that you need (or your operating system needs) and disinfecting them is not as easy as deleting some files.
My computer is 7 years old it accumulated about 15 different malware/viruses that AVG,Malwarebytes and MSSE never identified for me.
It was pretty quick and simple to delete everything I found using the method above. about 80% of the time I found them in the program files folder. It was always blatantly obvious to the naked eye, because names of things you know you never wanted to download stick out like sore thumbs, plus sometimes you get folders titled like someone mashed the keys, or only numbers etc. It all sticks out as being unwanted material.
I stopped using AV active protection about 6 months ago. I'll do a scan from time to time, but its more thorough and quite easy to just have a backup that I know is virus free to restore to if anything goes wrong and just always have task manager open. So that I can see if anything is out of line.
Just google any process that I don't recognize, If it shouldn't be running I end process, find the folders it was operating out of and delete them.
I also browse through all my folders if there is any strange activity until I've found it and removed it. its always pretty obvious even when they are using the same names as legit system processes, because you know you shouldn't be seeing svchost.exe in a folder of a third party company for example with some dodgy logo that you have just started to notice appear in your browser without your consent.
Also I go to 'run' and enter 'msconfig' every so often, or if something is out of place. The virus/malware often sets itself up on startup which is easy to notice and just a tick box to disable. Then I know that unwanted process is not running after a reboot unless I click on it.
Its much less hassle than an AV for me because the AV freaks out and recognizes lots of my hacking tools as viruses. Last time I scanned took 21 hours, recognized over 900 files that I want as malicious programs, which their not to me, and didn't find the actual virus I was looking for.
Its like trying to find a tree in a forest for the AV, which its not really designed for.
RE: How To delete viruses. (Noob friendly) - Deque - 02-26-2013
(02-26-2013, 06:37 PM)Sebastionay Wrote:(02-25-2013, 02:39 PM)Deque Wrote: This is a nice tutorial, thanks for sharing. It will probably only help for really weak malware or parts of malware.
If you really have virusses they may have infected files that you need (or your operating system needs) and disinfecting them is not as easy as deleting some files.
My computer is 7 years old it accumulated about 15 different malware/viruses that AVG,Malwarebytes and MSSE never identified for me.
It was pretty quick and simple to delete all of it using the method above. about 80% of the time I found them in the program files folder. It was always blatantly obvious to the naked eye, because names of things you know you never wanted to download stick out like sore thumbs, plus sometimes you get folders titled like someone mashed the keys, or only numbers etc. It all sticks out as being unwanted material.
I stopped using AV active protection about 6 months ago. I'll do a scan from time to time, but its more thorough and quite easy to just have a backup that I know is virus free to restore to if anything goes wrong and just always have task manager open. So that I can see if anything is out of line.
Just google any process that I don't recognize, If it shouldn't be running I end process, find the folders it was operating out of and delete them.
I also browse through all my folders if there is any strange activity until I've found it and removed it. its always pretty obvious even when they are using the same names as legit system processes, because you know you shouldn't be seeing svchost.exe in a folder of a third party company for example with some dodgy logo that you have just started to notice appear in your browser without your consent.
Also I go to 'run' and enter 'msconfig' every so often, or if something is out of place. The virus/malware often sets itself up on startup which is easy to notice and just a tick box to disable. Then I know its not running after a reboot unless I click on it.
Its much less hassle than an AV for me because the AV freaks out and recognizes lots of my hacking tools as viruses. Last time I scanned took 21 hours, recognized over 900 files that I want as malicious programs, which their not to me, and didn't find the actual virus I was looking for.
Its like trying to find a tree in a forest for the AV, which its not really designed for.
But how do you know that you have catched all of the virus by deleting those files?
Maybe the virus has infected other files as host. A usual virus infection works this way. It copies itself into a host file, i.e. by adding a new section to an .exe file and changing the entry point of that .exe file to point to that section. Everytime that host file is run, the virus code is run first, but the host code will be run right after. This way you won't recognize the virus as a certain file, nor as a process. And if this host file is set at startup to run, you won't be able to recognize this as a virus too, because this is just a well known file for you.
15 infections that you know of, seems a lot to me. I've had only 2 in the past 15 years. It might be an indication that your system was reinfected by virusses you didn't clean thoroughly or that you download a lot of stuff without taking enough care.
RE: How To delete viruses. (Noob friendly) - Sebastionay - 02-27-2013
(02-26-2013, 08:00 PM)Deque Wrote: But how do you know that you have catched all of the virus by deleting those files?
Maybe the virus has infected other files as host. A usual virus infection works this way. It copies itself into a host file, i.e. by adding a new section to an .exe file and changing the entry point of that .exe file to point to that section. Everytime that host file is run, the virus code is run first, but the host code will be run right after. This way you won't recognize the virus as a certain file, nor as a process. And if this host file is set at startup to run, you won't be able to recognize this as a virus too, because this is just a well known file for you.
15 infections that you know of, seems a lot to me. I've had only 2 in the past 15 years. It might be an indication that your system was reinfected by virusses you didn't clean thoroughly or that you download a lot of stuff without taking enough care.
I'm a little unsure of what your asking about here weather your talking about an actual system file being modified to contain a virus, without a file of its own separate? If I had that problem I would restore my computer to an earlier point in time before the infection.
I can't say that I know that has not happened to me for sure because I don't read the code of the system files, If that is what you mean. You can't say you know for sure with an AV scan either due to the countless 0 days in circulation.
If you were not referring to that and instead talking about new .exe files that have the same name as important system processes in another location in the computer then yes I'm certain I don't have any of those because I've looked through every folder in my computer and find them easily, I addressed that in the previous post with the svchost.exe example, that was the last one I found.
15 infections in 7 years seemed pretty good to me with the amount I download, the amount I had in 15 years is a lot bigger. Your taking a risk whenever you download something.
I use programs that my computer barely meets the system requirements for and they work fine, so I can only assume that none of my system resources are being diverted by viruses/malware.
I also analyze the packets sent from my computer.
RE: How To delete viruses. (Noob friendly) - Deque - 02-28-2013
I was talking about a real system file that was infected/modified by a virus.
Alright. You cleared some things up to me.
And the infection rate makes sense if you download that much.
RE: How To delete viruses. (Noob friendly) - Coder-san - 02-28-2013
Instead of deleting virus right away, I request people to take a minute and upload it and post in a thread in [link=http://www.hackcommunity.com/Forum-File-and-Log-Analysis]File and Log Analysis[/link] and then delete it.
RE: How To delete viruses. (Noob friendly) - Sebastionay - 02-28-2013
(02-28-2013, 06:18 AM)Coder-san Wrote: Instead of deleting virus right away, I request people to take a minute and upload it and post in a thread in [link=http://www.hackcommunity.com/Forum-File-and-Log-Analysis]File and Log Analysis[/link] and then delete it.
That's really great.
My last infection was a bunch of Malware (4 seperate softwares) that came along with 'sandboxie' without my consent. That was from downloading from either Cnet or Sourceforge top result, and got past my AV scan.
The most elaborate looking malware in the package was called 'Imminent' and had a logo of a red speech bubble with eyes. From what I could see it appeared to come from Israel.
Next time I will upload for analysis before deletion.
RE: How To delete viruses. (Noob friendly) - SergenteJoker98 - 02-28-2013
It's really good that guide, but for deleting virus I use msconfig
