[Question] Oh, balls. Malware detection/deletion

[Chad Sexington]

I think my colleague's computer has some less-than great sneaky files on it. What're my best options?

Working on Windows 7 64bit

MSE says no threats are detected, but she's getting a pop up near the start menu that says "Backup your computer now for free!" and there are few things in the task manager that are unkillable: they just start up again when ended.

 

[strawman]

Yep, you got a bug.

Spyware search and destroy is a good option for that.

 

[Tinwhistler]

malwarebytes
AVG antivirus

 

[GasBandit]

Malwarebytes. A lot of these "ad pop up" things aren't technically classified as viruses and virus scanners like MSE, AVG and the rest may not catch them (plus new ones come out every day). Malwarebytes is pretty good at ferreting out this stuff though.

 

[PatrThom]

Another vote for MalwareBytes as your first go-to solution.
HijackThis is another extremely competent tool, but it has a startlingly steep learning curve.

--Patrick

 

[Chad Sexington]

Another vote for MalwareBytes as your first go-to solution.
HijackThis is another extremely competent tool, but it has a startlingly steep learning curve.

--Patrick

I've used HijackThis in the past, but it was a challenge, you're quite right about the learning curve.

 

[PatrThom]

Oh! And if it's just a process you can't kill (one that keeps relaunching), sometimes you can use selective startup to get rid of it.
Here is an article from a rather surprising source that may help you with this process.

--Patrick

 

[Zappit]

Run Malwarebytes, then Spybot: Search and Destroy. Should handle your business.

 

[Jay]

CC Cleaner

 

[GasBandit]

CC Cleaner

Big old heapin' help'a placebo.exe.

 

[Ravenpoe]

Big old heapin' help'a placebo.exe.

Don't crush Jay's dreams.

 

[PatrThom]

CCleaner (not to be confused with Carbon Copy Cloner) is useful for getting rid of registry entries that don't point to anything any more, or for removing things you don't want it to point to any more. But I wouldn't really call it an antimalware solution.

--Patrick

 

[Terrik]

I just use System Mechanic for everything.

 

[bhamv3]

Would nuking the site from orbit be a valid backup plan?

And by nuking the site I mean reformatting and reinstalling.

Or you could nuke it.

 

[Ravenpoe]

Would nuking the site from orbit be a valid backup plan?

And by nuking the site I mean reformatting and reinstalling.

Or you could nuke it.

Put it in the microwave. No virii will survive.

 

[PatrThom]

Put it in the microwave. No virii will survive.

You're thinking of sponges.

--Patrick

 

[drawn_inward]

@Chad Sexington your "colleague's" PC? Really?

 

[Chad Sexington]

@Chad Sexington your "colleague's" PC? Really?

Really. I'm the 'boss' in the office, and really I could just call up IT but opening a ticket and getting them to fix things takes forever, and I'm generally tech savvy enough to solve most problems. So I did what I could, consulted y'all, which helped me fine 108 objects with Malwarebytes; uninstalled a handful of toolbars, etc, and her comp seems fine now.

Thanks to all!

 

[Bowielee]

Tell her not to download attachments, even if they do say they have pictures of Ryan Gosling naked

 

[Chad Sexington]

Tell her not to download attachments, even if they do say they have pictures of Ryan Gosling naked

I think it was actually the person who used the computer previous to her, but... Given her Ryan Gosling love, I am definitely going to leave that as a note on her desk!