Best tools to use when removing malware?

[essexboy]

If it was a file infector then Avast would have been alerting on system files

[Coolmario88]

Guys thanks for trying to help earlier.. I have learned something from all this..
Like don't go on shady sites, and stuff like that.. Tomorrow updating back to win8.1 and installing over a GB of updates..

I promise this may be last time my PC gets infected by my stupid act..

[Coolmario88]

So does all downloaders similar to the one download (dot) com uses is and can cause what happened to me?

In other news I got windows 8.1 up and running again finally

[Rednose]

Hey Pony

You should make regular images, and store them on an external HD.

Greetz, Red.

[essexboy]

It is really easy to use Macrium to make an image

Download and install Macrium Reflect free

CREATE EMERGENCY USB

Once installed run the programme
Insert a 4GB USB drive into the system
On the left of the dialogue select Other Tasks
Select Create bootable Rescue media
In the window that opens select Windows PE 5.0
Click Next


Select  Default base WIM on the next dialogue and press next


On the next dialogue select  your USB drive and enable multiboot  MBR/EUFI  USB support (If available)
Click Finish and your rescue USB will be created


Once the burn has finished you will be asked to test the USB
Do this by rebooting the computer with the USB inserted
The computer should then start in the recovery mode
Exit from this and remove the USB
Keep the USB safe as this will enable an unbootable computer to boot

TO MAKE AN IMAGE

Connect your external Hard Disc
Run the programme and tick the partitions you wish to image (In my case I have selected System and OS )


Then click Image selected disc on this computer at the top left
Ensure that the correct partitions are selected to image
Under destination locate and select the external   drive in my case G


Click next and a summary of actions will be shown
If you are happy click finish


You will be asked to confirm the backup
Select OK

Once it has completed select close and unplug the external drive. Job done


To use the image from an unbootable computer
Start the computer with the recovery USB
Plug in the external drive and just follow the prompts

[Coolmario88]

It is really easy to use Macrium to make an image

Download and install Macrium Reflect free

CREATE EMERGENCY USB

Once installed run the programme
Insert a 4GB USB drive into the system
On the left of the dialogue select Other Tasks
Select Create bootable Rescue media
In the window that opens select Windows PE 5.0
Click Next


Select  Default base WIM on the next dialogue and press next


On the next dialogue select  your USB drive and enable multiboot  MBR/EUFI  USB support (If available)
Click Finish and your rescue USB will be created


Once the burn has finished you will be asked to test the USB
Do this by rebooting the computer with the USB inserted
The computer should then start in the recovery mode
Exit from this and remove the USB
Keep the USB safe as this will enable an unbootable computer to boot

TO MAKE AN IMAGE

Connect your external Hard Disc
Run the programme and tick the partitions you wish to image (In my case I have selected System and OS )


Then click Image selected disc on this computer at the top left
Ensure that the correct partitions are selected to image
Under destination locate and select the external   drive in my case G


Click next and a summary of actions will be shown
If you are happy click finish


You will be asked to confirm the backup
Select OK

Once it has completed select close and unplug the external drive. Job done


To use the image from an unbootable computer
Start the computer with the recovery USB
Plug in the external drive and just follow the prompts

Does this restore my PC to the date the image was made if ever needed? Also does it have to be a USB drive or SD card will do?

[Rednose]

Hi my friend

Does this restore my PC to the date the image was made if ever needed?

That is the whole idea : You make an exact copy of the partition(s) you want, and you can restore it any time.
I personaly make an image every week. And of cource before a Windows update, Avast! Beta install etc.

Also does it have to be a USB drive or SD card will do?

It should be a bootable device, so you should make the SD slot bootable in the BIOS. If that is possible with you.
Maybe Essexboy can advise you better 

Greetz, Red.

[Rednose]

Btw. a nice tutorial from Essexboy

Greetz, Red.

[REDACTED]

What are some good tools other than avast  that is good to run on a infected machine to remove malware? I'm wanting to learn about tools there is to use to remove stuff like that..

Btw anybody that knows how to use OTL please tell me how can i learn to use it.. Thanks.

I'm partial to AdwCleaner and JRT. Easy to use, fast and effective.

[digmor crusher]

Essexboy, yikes, that doesn't look that easy, but I guess after you've done it a few times it would be. I use Drive Snapshot, just 2 or 3 buttons to click, thats it. Not sure how effective it is though as I haven't had to do a restore yet.

[essexboy]

After you have done the initial USB set up and set the parameters.  The hardest part is remembering to plug in the USB drive for a backup

[bob3160]

Essexboy, yikes, that doesn't look that easy, but I guess after you've done it a few times it would be. I use Drive Snapshot, just 2 or 3 buttons to click, thats it. Not sure how effective it is though as I haven't had to do a restore yet.

You seem to forget that Windows already comes with a very reliable Imaging tool.
I've used it often and have never had a problem.
Simple to set up in Windows 7 and for Windows 8, 8.1 and Windows 10.
Simply follow the directions in the video to create a desktop shortcut to access the function:
https://youtu.be/m5h9Kug5HTI

[digmor crusher]

I actually use Windows and Snapshot for backups Bob.

[Para-Noid]

AOMEI Backupper is one that has yet to fail for me and it's free as is Macrium Reflect.
As it was pointed out before make weekly backups. Doing this will mean you may lose
only one weeks worth of work but it saves all of those weeks before. It takes less time to
restore a backup than to re-do what may have been lost.

[polonus]

Read here why uBlock is very good when we compare it to ABP -> https://forum.avast.com/index.php?topic=169054.0

Why uBlock prevents loading this website: http://members.tripod.com/  See: https://www.virustotal.com/nl/ip-address/209.202.252.50/information/
This is a Suspicious Cloud destination, Symantec detects Suspicious.Cloud.5, a detection technology designed to detect entirely new malware threats without traditional signatures. This technology is aimed at detecting malicious software that has been intentionally mutated or morphed by attackers.
Avast detects Win32:CIH there.

polonus