SafeHex

Some notes on cleaning infected PCs

• Do not connect to network unless cleaned
• MalwareBytes
  • Download latest copy on a clean PC - http://www.malwarebytes.org/
  • Install onto clean PC
  • Run on clean PC and download latest definitions
  • Copy the installation file and the rules file from the clean PC to the infected machine
    • For Windows XP and 2000 "C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref"
    • For Windows Vista and Windows 7 "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref"
  • Install on the clean PC and then manually update the rules definition
  • Run MalwareBytes scanner
• Other scanners to try
  • Check for fake antivirus software with http://www.mcafee.com/us/downloads/free-tools/how-to-use-stinger.aspx http://www.mcafee.com/us/downloads/free-tools/how-to-use-stinger.aspx
  • SUPERAntiSpyware http://www.superantispyware.com/ (available as a portable application)
  • Vipre Rescue http://live.sunbeltsoftware.com/
• After cleanup, install Microsoft Security Essentails
  • Install, update definitions, and run full scan