How to clean an infected Windows PC: A guide, plus advice needed.

When dealing with an infected Windows PC, there are five programs that I rely on.

I'll tell you what I use, but since I haven't researched different programs for a few years, I would love to hear what you use.

Everything I use is freeware, but if you use commercial programs, that's fine as well.

1. My favorite antivirus is Avast.

https://www.avast.com/en-us/index

It's not perfect, but I usually have it running, and when I run into a problem I use their boot-time scan.

2. The quickest program I use is AdwCleaner.

https://www.malwarebytes.com/adwcleaner/

3. I also like IObit Malware Fighter.

https://www.iobit.com/en/malware-fighter.php

4. And MalwareBytes.

https://www.malwarebytes.com/

5. And finally, SUPERAntiSpyware.

http://www.superantispyware.com/

How do YOU clean an infected Windows PC?

I used Kaspersky, Anti MalwareBytes and Spybot - Search & Destroy. Got rid of everything with these.
But usually using your common sense helps to avoid malware in the first place.

I haven't used Spybot in a while.

Thanks for the tip!

Oh, and my computers rarely get infected.

I'm working on my mom's computer, and I've tried all of my favorite programs, and it's still infected.

format c:

Reinstall.

If you download the windows 10 DVD (or USB stick version) from windows.com, it’s actually pretty painless. Windows automatically grabs all the right drivers, etc. You do have to reinstall your own software, but I find at least 50% I don’t use anymore so it’s good to get rid of it.

All of the tools you’ve listed about work well for me and have done so for years; however, I tend to find that to give it a really good clean you need to take out the hard drive(s) from the system and manually clean them. It usually takes a couple of hours so I make sure that my schedule is clear. I will use the room with the least dust and close the door so that no more dust can be introduced. First of all I’ll take the drive out and use a precision screwdriver to undo the screws of the drive unit. Once the cover is off I set it to one side and wipe my fingers to get rid of the dust on them. I then carefully disassemble the actuator assembly and then the spindle, which now gives me free access to the platters… This is where we really get to work. I will then clean the platters using Brasso and a soft microfibre cloth. If there is a lot of malware then after use Brasso I will then also put the platters into a lint free pouch and put it into the washing machine on a very gentle cycle - I only use nonbio for platters. Once all of this is done I will reassemble the unit, making sure to use a straw as I’m just about to close the unit to recreate the hermetic environment they were in. SSDs are much easier to be cleaned and I simply use a diluted mixture of lemon juice, avacado, and greek yoghurt.

This is the only real answer. Everything else is a game of cat and mouse/arms race between you and the malware deployer.

If you’re infected - consider the WHOLE PC COMPLETELY AND TOTALLY COMPROMISED. Disconnect the network immediately and begin the process of backing up important non-executable files like pictures, then format and reinstall from scratch from a known, trusted source.

I like Avira for the daily protection. Malware-Bytes is a long time favorite as well. But as others have said the last two clean-ups I have done were total wipes. Some family members sadly fell for the Microsoft support calls and turned over control of their PC’s to the scammers. I don’t trust anything after that.

Oh no, I've been using the dustiest room!

You learn something new everyday.

Reinstall is the most secure and reliable way - using ofc clean media. (I don’t make bank transactions from ex-infected PCs)

In case you cant reinstall quick way is AdwCleaner. After this Mallwarebytes for a more thorough clean. Then I use Kaspersky and/or Bitdefender always the “Internet Security” version.

I want to clarify that between free and 50EUR/year paid, I chose the free one. Since I can find decent offers at kinguin I use paid versions.

H.

I like the back-up, format, and reinstall path. I’ve used most of the free cleaners mentioned and probably like Spybot the most, but feel like they’re all a crapshoot/patch job vs. the clean install fix.

If the PC is more than a couple of years old, another viable option might be to throw it in the trash and buy your Mom an inexpensive Chromebook. I bought a couple of refurbished ASUS Chromebooks for my kids right after Christmas to keep them off my PC, no malware issues since. #whocouldaknowed?

Daily protection : Webroot - Solid performance for the last few years when it comes to detection, protection, and removal tests

when SHTF, Avira has one of the highest detection and removal rates, but wasnt too good at real time protection for some reason, I typically use this.
Malwarebytes gets a full scan
SuperAntispyware gets a full scan

When that fails, format and reinstall.

First off I use Acronis backup software— anything that makes an Disc image will work— After clean install I make an image— then periodically make new images as I ad programs updates etc—-This way if you get infected you restore to the closest image you have (saves hours and hours of work) One of the most important things I feel is to put all my data files on a separate partition—that way if you have to restore or reinstall you don’t loose all your shit—— for years I have been using Ace Utilities for clean up (registry temp files etc) I also run Webroot Antivirus only —it has a firewall and malware software included—I find it has the least drain on resources,Every now and then I might have some sort of bull crap happen but it’s rare—No big deal when you have backups

Recently I had 2 machines after installing Windows 10 major update—they ran fine a day or two —but then all of a sudden when restarting they just sat in an endless loop—one was my stepson’s — his backup was about 1 1/2 yrs old so he lost all of his programs he had added but none of his data—— I usually check to see how current my last Backup is — even before doing updates— I’ve had a new version of Quickbooks crash my wifes payroll PC before

Always have a clean backup system with the latest Antivirus handy that is set NOT to automatically run any media that is connected to it. Pull the HDD/SSD on infected machine use cable/enclosure connect to clean system and procceed to clean. The programs you mentioned are all usefull in there particular way just make sure you only have one running at a time or you can get false positives. I dont clean machines like i used to, but another safer way that only let one program run at a time is Hirens boot CD running on the clean system and connecting hdd/ssd. You can create a custom Hirens CD and boot to from infected machine and clean straight from CD. Also, BleepingComputer.com has everything you need plus tutorials for beginners.

I format the disk and install Linux on it. :smiling_imp:

What I do when I’m too lazy to format / reinstall Windows AND the system is seriously infected :

  1. offline disinfection (boot your system with an antivirus boot CD or usb drive)
  2. boot system and run another stand-alone disinfection tool (DrWeb CureIt generally works OK for me)
  3. install a good AV

Basically a 2-stage disinfection.

If there’s still some malicious crap after that, then :person_facepalming:

Also all my personal computers run Linux :smiling_imp:

Using NOD32 I didn’t have infection since a few years.
Not browsing porn or warez sites helps a lot xD
Mike

My mom doesn't browse that kinda stuff; I think she opened an infected email link.

She's usually pretty good at avoiding infections, but she's not perfect.

I, on the other hand, browse some dangerous sites, but I claim that I know what I'm doing.

I haven't had an infection in years, so maybe I'm right.

Sure, but that’s only because I wouldn’t be using my computer at all! :wink:

Give it a shot of antibiotics. :wink: