How to clean all the installers?
-
Before any further reading, i want to apologise for posting this question here, and im aware im hurting my reputation by doing this, but im really desperate. If is very unappropriated, i will delete it myself. But if you can help me with a solution to my problem... oh boy. I wrote to malwarebytes Forum the same question,and now im waiting. But on other AV websites, its just problematic to even log in to their forums, from my side at least: avast,avg,norton. You guys here i really respect and i hope you can help me more than 'dedicated' chaps out there. I wonder if is a MANUAL way possible of cleaning those 'infections', that i strongly suspect is just a parameter written in the executable file. Or if only automatic way exists... Either way, i need a way to preserve my bunch of stuff that i'm so scared to loose at this time. ------------------ here is my problem: I keep the instalation software that i tested and i liked. I am doing it for years. I have a special folder with all my instalations kits, and i gathered in time somewhere like 200 perhaps. So when i have to reinstal my windows, i reinstall my usual software from that folder. Thats it's purpose, a backup. Some time ago, i received a troian (virus), and i manage to clean it yesterday from my C partition and from windows too. But i scanned my D drive also, where this folder i have with all the instalation kits. And nearly all the executables are found infected with this latest trojan and from other old ones i had in the past. I am a bit desperate about this situation because i can not get back the specific software versions i gathered anymore. Is there a posibility to clean all these installers? But not cleaning by deletion or quarantine, but cleaning the actual virus that is inside them/or/attach to them ? And leave intact my instalation kit, ready to use another time, uncorupted or damaged? I used: MalwareBytes free version and also AVG antivirus free version. Both softwares didnt clean eficiently from windows scan. Only from boot scan! But im refering for the elimination of all windows infections. Drive D is well scanned from windows and eficient enough. These are the viruses that are infecting my installers: win32: Gardih (this was the latest one) win32: Crypt-SJB [Trj] (this was the latest one) win32: Evo-gen [Susp] win32: Rootkit-gen [Rtk] win32: MalwareX-gen [Trj] win64: Trojan-gen FileRepMalware MSIL:GenMalicious-AAS [Trj] BV: ExitWindows-K [Trj] BV: Agent-BGV [Expl] Other: Malware-gen [Trj] Thank you !
Would I risk it? No. Unless your antivirus - and this if nothing else should convince you to get one and use it - can disinfect all the files for you, there is no good way to remove a mess of virii from your system. Me? I'd reformat and restore the whole thing from a clean backup just to be sure - I've seen cases in the past when multiple virii make it next to impossible to get rid of them all and a complete reset is the best - and quickest - way to proceed.
Sent from my Amstrad PC 1640 Never throw anything away, Griff Bad command or file name. Bad, bad command! Sit! Stay! Staaaay... AntiTwitter: @DalekDave is now a follower!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt -
Would I risk it? No. Unless your antivirus - and this if nothing else should convince you to get one and use it - can disinfect all the files for you, there is no good way to remove a mess of virii from your system. Me? I'd reformat and restore the whole thing from a clean backup just to be sure - I've seen cases in the past when multiple virii make it next to impossible to get rid of them all and a complete reset is the best - and quickest - way to proceed.
Sent from my Amstrad PC 1640 Never throw anything away, Griff Bad command or file name. Bad, bad command! Sit! Stay! Staaaay... AntiTwitter: @DalekDave is now a follower!
It's the only way to be sure[^]. :)
"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer
"These people looked deep within my soul and assigned me a number based on the order in which I joined" - Homer
-
It's the only way to be sure[^]. :)
"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer
Wise words! If they had listened, they might have survived ... :laugh:
Sent from my Amstrad PC 1640 Never throw anything away, Griff Bad command or file name. Bad, bad command! Sit! Stay! Staaaay... AntiTwitter: @DalekDave is now a follower!
-
Before any further reading, i want to apologise for posting this question here, and im aware im hurting my reputation by doing this, but im really desperate. If is very unappropriated, i will delete it myself. But if you can help me with a solution to my problem... oh boy. I wrote to malwarebytes Forum the same question,and now im waiting. But on other AV websites, its just problematic to even log in to their forums, from my side at least: avast,avg,norton. You guys here i really respect and i hope you can help me more than 'dedicated' chaps out there. I wonder if is a MANUAL way possible of cleaning those 'infections', that i strongly suspect is just a parameter written in the executable file. Or if only automatic way exists... Either way, i need a way to preserve my bunch of stuff that i'm so scared to loose at this time. ------------------ here is my problem: I keep the instalation software that i tested and i liked. I am doing it for years. I have a special folder with all my instalations kits, and i gathered in time somewhere like 200 perhaps. So when i have to reinstal my windows, i reinstall my usual software from that folder. Thats it's purpose, a backup. Some time ago, i received a troian (virus), and i manage to clean it yesterday from my C partition and from windows too. But i scanned my D drive also, where this folder i have with all the instalation kits. And nearly all the executables are found infected with this latest trojan and from other old ones i had in the past. I am a bit desperate about this situation because i can not get back the specific software versions i gathered anymore. Is there a posibility to clean all these installers? But not cleaning by deletion or quarantine, but cleaning the actual virus that is inside them/or/attach to them ? And leave intact my instalation kit, ready to use another time, uncorupted or damaged? I used: MalwareBytes free version and also AVG antivirus free version. Both softwares didnt clean eficiently from windows scan. Only from boot scan! But im refering for the elimination of all windows infections. Drive D is well scanned from windows and eficient enough. These are the viruses that are infecting my installers: win32: Gardih (this was the latest one) win32: Crypt-SJB [Trj] (this was the latest one) win32: Evo-gen [Susp] win32: Rootkit-gen [Rtk] win32: MalwareX-gen [Trj] win64: Trojan-gen FileRepMalware MSIL:GenMalicious-AAS [Trj] BV: ExitWindows-K [Trj] BV: Agent-BGV [Expl] Other: Malware-gen [Trj] Thank you !
and from other old ones i had in the past.
:omg:
The Master said, 'Am I indeed possessed of knowledge? I am not knowing. But if a mean person, who appears quite empty-like, ask anything of me, I set it forth from one end to the other, and exhaust it.' ― Confucian Analects
-
Before any further reading, i want to apologise for posting this question here, and im aware im hurting my reputation by doing this, but im really desperate. If is very unappropriated, i will delete it myself. But if you can help me with a solution to my problem... oh boy. I wrote to malwarebytes Forum the same question,and now im waiting. But on other AV websites, its just problematic to even log in to their forums, from my side at least: avast,avg,norton. You guys here i really respect and i hope you can help me more than 'dedicated' chaps out there. I wonder if is a MANUAL way possible of cleaning those 'infections', that i strongly suspect is just a parameter written in the executable file. Or if only automatic way exists... Either way, i need a way to preserve my bunch of stuff that i'm so scared to loose at this time. ------------------ here is my problem: I keep the instalation software that i tested and i liked. I am doing it for years. I have a special folder with all my instalations kits, and i gathered in time somewhere like 200 perhaps. So when i have to reinstal my windows, i reinstall my usual software from that folder. Thats it's purpose, a backup. Some time ago, i received a troian (virus), and i manage to clean it yesterday from my C partition and from windows too. But i scanned my D drive also, where this folder i have with all the instalation kits. And nearly all the executables are found infected with this latest trojan and from other old ones i had in the past. I am a bit desperate about this situation because i can not get back the specific software versions i gathered anymore. Is there a posibility to clean all these installers? But not cleaning by deletion or quarantine, but cleaning the actual virus that is inside them/or/attach to them ? And leave intact my instalation kit, ready to use another time, uncorupted or damaged? I used: MalwareBytes free version and also AVG antivirus free version. Both softwares didnt clean eficiently from windows scan. Only from boot scan! But im refering for the elimination of all windows infections. Drive D is well scanned from windows and eficient enough. These are the viruses that are infecting my installers: win32: Gardih (this was the latest one) win32: Crypt-SJB [Trj] (this was the latest one) win32: Evo-gen [Susp] win32: Rootkit-gen [Rtk] win32: MalwareX-gen [Trj] win64: Trojan-gen FileRepMalware MSIL:GenMalicious-AAS [Trj] BV: ExitWindows-K [Trj] BV: Agent-BGV [Expl] Other: Malware-gen [Trj] Thank you !
_Q12_ wrote:
Is there a posibility to clean all these installers?
No; part of the original gets overwritten. Data that is overwritten is lost and cannot be retrieved.
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^] "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
-
Before any further reading, i want to apologise for posting this question here, and im aware im hurting my reputation by doing this, but im really desperate. If is very unappropriated, i will delete it myself. But if you can help me with a solution to my problem... oh boy. I wrote to malwarebytes Forum the same question,and now im waiting. But on other AV websites, its just problematic to even log in to their forums, from my side at least: avast,avg,norton. You guys here i really respect and i hope you can help me more than 'dedicated' chaps out there. I wonder if is a MANUAL way possible of cleaning those 'infections', that i strongly suspect is just a parameter written in the executable file. Or if only automatic way exists... Either way, i need a way to preserve my bunch of stuff that i'm so scared to loose at this time. ------------------ here is my problem: I keep the instalation software that i tested and i liked. I am doing it for years. I have a special folder with all my instalations kits, and i gathered in time somewhere like 200 perhaps. So when i have to reinstal my windows, i reinstall my usual software from that folder. Thats it's purpose, a backup. Some time ago, i received a troian (virus), and i manage to clean it yesterday from my C partition and from windows too. But i scanned my D drive also, where this folder i have with all the instalation kits. And nearly all the executables are found infected with this latest trojan and from other old ones i had in the past. I am a bit desperate about this situation because i can not get back the specific software versions i gathered anymore. Is there a posibility to clean all these installers? But not cleaning by deletion or quarantine, but cleaning the actual virus that is inside them/or/attach to them ? And leave intact my instalation kit, ready to use another time, uncorupted or damaged? I used: MalwareBytes free version and also AVG antivirus free version. Both softwares didnt clean eficiently from windows scan. Only from boot scan! But im refering for the elimination of all windows infections. Drive D is well scanned from windows and eficient enough. These are the viruses that are infecting my installers: win32: Gardih (this was the latest one) win32: Crypt-SJB [Trj] (this was the latest one) win32: Evo-gen [Susp] win32: Rootkit-gen [Rtk] win32: MalwareX-gen [Trj] win64: Trojan-gen FileRepMalware MSIL:GenMalicious-AAS [Trj] BV: ExitWindows-K [Trj] BV: Agent-BGV [Expl] Other: Malware-gen [Trj] Thank you !
Nope. You're screwed. Usually, when an .EXE gets infected, part of all of the original file gets overwritten. There's no way to reverse that except by restoring from a known-good backup. .MSI's are no different. They're just a database file with tables, columns and rows. That data can easily be overwritten too.
Asking questions is a skill CodeProject Forum Guidelines Google: C# How to debug code Seriously, go read these articles.
Dave Kreskowiak -
Would I risk it? No. Unless your antivirus - and this if nothing else should convince you to get one and use it - can disinfect all the files for you, there is no good way to remove a mess of virii from your system. Me? I'd reformat and restore the whole thing from a clean backup just to be sure - I've seen cases in the past when multiple virii make it next to impossible to get rid of them all and a complete reset is the best - and quickest - way to proceed.
Sent from my Amstrad PC 1640 Never throw anything away, Griff Bad command or file name. Bad, bad command! Sit! Stay! Staaaay... AntiTwitter: @DalekDave is now a follower!
@OriginalGriff You're still believe I have a operating system virus problem. But that i resolve it already using a boot scan cleaning. Im asking something else instead. On non operating system, on a diferent drive, drive D in my case, where everything is STORED, and very rarely executed, there inside all those (pasive) installers, the AV found infected executables, that are most of the time passive. That is the issue. I moved away all the installers on external drive, AntiVirus scan D drive and eliminate majority of exe in there, since its automatic, and then i copy back from my external drive to the D drive all the infected originals, in the hope there is a way to repair them. Im not talking about C drive program files stuff where is installed everything. But passive storred programs, on diferent drive away from C. All i want is to clean them.
-
@OriginalGriff You're still believe I have a operating system virus problem. But that i resolve it already using a boot scan cleaning. Im asking something else instead. On non operating system, on a diferent drive, drive D in my case, where everything is STORED, and very rarely executed, there inside all those (pasive) installers, the AV found infected executables, that are most of the time passive. That is the issue. I moved away all the installers on external drive, AntiVirus scan D drive and eliminate majority of exe in there, since its automatic, and then i copy back from my external drive to the D drive all the infected originals, in the hope there is a way to repair them. Im not talking about C drive program files stuff where is installed everything. But passive storred programs, on diferent drive away from C. All i want is to clean them.
No, I believe that you've had a massive virus problem - and once this is over you need to do two things: 1) Identify where the viruses came from and put systems in place to ensure this doesn't happen again. And 2) Install a good quality AV, and keep it updated and scanning regularly. If whatever you used to remove the viruses from your system disk can't safely get rid of the virus problem on the data drive, then those files are screwed: modern viruses are complicated beasties who mutate code in files, not just add to it (they try to hide by not adding identifiable strings) - so unless the virus scanner knows exactly what a virus did to the file, it can't be undone. And when you get multiple infections it very quickly becomes impossible to work out the order in which the code was corrupted and thus have no idea what the original looked like. Without that, your files will be and will always remain too dangerous to run - and must be replaced with "clean" versions, either from backup, or by re-install. Me? If I find a computer with that many viruses, I will always reformat and load from clean - because I've seen the results when multiple viruses start "fighting" among themselves and the problems that causes the AV scanner. It's honestly quicker, easier, and safer to start over from scratch!
Sent from my Amstrad PC 1640 Never throw anything away, Griff Bad command or file name. Bad, bad command! Sit! Stay! Staaaay... AntiTwitter: @DalekDave is now a follower!
-
No, I believe that you've had a massive virus problem - and once this is over you need to do two things: 1) Identify where the viruses came from and put systems in place to ensure this doesn't happen again. And 2) Install a good quality AV, and keep it updated and scanning regularly. If whatever you used to remove the viruses from your system disk can't safely get rid of the virus problem on the data drive, then those files are screwed: modern viruses are complicated beasties who mutate code in files, not just add to it (they try to hide by not adding identifiable strings) - so unless the virus scanner knows exactly what a virus did to the file, it can't be undone. And when you get multiple infections it very quickly becomes impossible to work out the order in which the code was corrupted and thus have no idea what the original looked like. Without that, your files will be and will always remain too dangerous to run - and must be replaced with "clean" versions, either from backup, or by re-install. Me? If I find a computer with that many viruses, I will always reformat and load from clean - because I've seen the results when multiple viruses start "fighting" among themselves and the problems that causes the AV scanner. It's honestly quicker, easier, and safer to start over from scratch!
Sent from my Amstrad PC 1640 Never throw anything away, Griff Bad command or file name. Bad, bad command! Sit! Stay! Staaaay... AntiTwitter: @DalekDave is now a follower!
@OriginalGriff Very interesting what you tell me. I didn't think on this 'mutation' ability before. In reality, my installers (some of them) have cracks too. And patches. And some of them i know they are 'infected' but with old and too general viruses that are very easy to remove from a single quick scan. Those files were see as being the latest and meanest viruses on earth from this late and updated AV perspective. They are treating almost everything as the 'highest risk' and every executable that it finds. I like more those old AV they were more dedicated than these general atitude from today. But that is me. I scanned my backup software from another OS, from a laptop, and it find those eazy cracks viruses. I also scanned with a very old AV as well and it confirmed this (forgotten) reality. Eh well. The conclusion, the secondary external scan, didn't find those mean viruses that i get from my PC. So my installers are not 'infected' by anything new that lurks in my computer. In the best case is a false positive. In reality, is a wrapper of some sort attributing the same virus signature to every installer i have there. Or its just how the new AV think these days, if he found a high level virus, then everything it finds it must be that high.
-
Before any further reading, i want to apologise for posting this question here, and im aware im hurting my reputation by doing this, but im really desperate. If is very unappropriated, i will delete it myself. But if you can help me with a solution to my problem... oh boy. I wrote to malwarebytes Forum the same question,and now im waiting. But on other AV websites, its just problematic to even log in to their forums, from my side at least: avast,avg,norton. You guys here i really respect and i hope you can help me more than 'dedicated' chaps out there. I wonder if is a MANUAL way possible of cleaning those 'infections', that i strongly suspect is just a parameter written in the executable file. Or if only automatic way exists... Either way, i need a way to preserve my bunch of stuff that i'm so scared to loose at this time. ------------------ here is my problem: I keep the instalation software that i tested and i liked. I am doing it for years. I have a special folder with all my instalations kits, and i gathered in time somewhere like 200 perhaps. So when i have to reinstal my windows, i reinstall my usual software from that folder. Thats it's purpose, a backup. Some time ago, i received a troian (virus), and i manage to clean it yesterday from my C partition and from windows too. But i scanned my D drive also, where this folder i have with all the instalation kits. And nearly all the executables are found infected with this latest trojan and from other old ones i had in the past. I am a bit desperate about this situation because i can not get back the specific software versions i gathered anymore. Is there a posibility to clean all these installers? But not cleaning by deletion or quarantine, but cleaning the actual virus that is inside them/or/attach to them ? And leave intact my instalation kit, ready to use another time, uncorupted or damaged? I used: MalwareBytes free version and also AVG antivirus free version. Both softwares didnt clean eficiently from windows scan. Only from boot scan! But im refering for the elimination of all windows infections. Drive D is well scanned from windows and eficient enough. These are the viruses that are infecting my installers: win32: Gardih (this was the latest one) win32: Crypt-SJB [Trj] (this was the latest one) win32: Evo-gen [Susp] win32: Rootkit-gen [Rtk] win32: MalwareX-gen [Trj] win64: Trojan-gen FileRepMalware MSIL:GenMalicious-AAS [Trj] BV: ExitWindows-K [Trj] BV: Agent-BGV [Expl] Other: Malware-gen [Trj] Thank you !
You're doomed. Your machine shouldn't even be allowed to connect to the internet.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
