bcastner
Premium,MVM
join:2002-09-25
Chevy Chase, MD
clubs: 
 ·Verizon Online DSL
edit:
April 12th, @10:05PM
| reply to trparky
Re: Using Process Explorer to remove hard to remove malware
Start first, not last, with the "Automated Tools". You mentioned several of note, although SpySweeper Trial will not remove anything. Many here have liked "SuperAntispyware", so I note that for userland issues of Vundo, and some Zlob.
In any case, this is just wrong in my opinion:
quote:
Half the time I don't care about looking up something, I don't have the time... I just dive right on it and start ripping things out of the startup routines, drivers, BHOs, services, etc. I try to get the machine that I'm working on back to a sterile environment in which at that point, I let loose the tools of automated removal.
There are so many things that are perfectly legitmate entries, that using HijackThis or MSCONFIG to "rip out" entries" is a serious mistake. If you had written instead:
quote:
I start with Add or Remove Programs, and remove any entry that is non-critical or unknown to me...."
I might have had some sympathy.
Please do not use HijackThis or MSCONFIG as removal tools. You can, with training, use them as an AutoStart entry editor, a kind of friendly REGEDIT. But nothing more.
Finally, as this Forum and many others offer friendly, one-on-one, malware removal, please take advantage of this. I can assure you that most of the folks who respond can do this better than you can. I know this for a fact, as many can do it better than I can.
Bill Castner
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
