You're going to go through automated malware removal tools.
Now if you look at one or a couple of these automated tools we'll be able to detect and remove the malware
problem for you especially if it's been out for a while that much more light to be able to identify
and remove it.
So let's go through some automated tools that you can use.
First I have to point out that Microsoft has their own version their own Malware Removal Tool.
So we should be aware of that and that is available here.
Now as far as the malware removal tool that I recommend first we have Kaspersky and say this is the
2015 edition which is a little bit older.
But when you get it you can update the latest version of the signatures.
It doesn't really matter if it's a 2015 version but when you listen to this lecture there might be an
updated version but even the 2015 version as I said you can update their signatures to today.
So it's fine today for you anyway.
This too is portable and free.
So that's Kaspersky.
You've got malware.
BARNES This one has to be installed it is free.
And this is very very good as well.
Let me give you an example of this one.
So here we are I've downloaded it.
I'll install it
there were Nabl in the free trial and we're launching the program it checks for updates.
And essentially you can just click scan.
Now there is settings they can add files and folders that need to be excluded.
There's lots of settings there but since you just click Start scan.
So that's my website and all of them are pretty much the same.
You install them run the scan and if it finds known signatures known behavior of malware it will identify
it and remove it if it can.
Sometimes they flag up cookies and things like that which aren't necessarily a problem and sometimes
they flag an ad where as well.
The other one I recommend is super anti-spyware free edition and another one Hitman Pro which actually
would run this one first.
The ones I've gone through.
It's portable and they allow you to remove the malware for free if you register a very fast scan.
Great detection and removal capabilities must install a lot.
So this is a screen you get when it first pops up.
You can go to settings and there is quite a lot of things you can set here.
Back then we go on the vault scan which is recommended or a quick scan on next to the license.
And I started scanning one thing about this product as it does find a lot of cookies and things cookies
are not malware.
We don't really care about cookies.
To be honest
and they're doing it scan in one minute and five seconds.
Pretty impressive.
And what is it.
Found it.
It should have found anything because there is anything on this system.
It's just found tracking cookies eggnog cookies saying cookies are a problem because well there a privacy
concern at the moment we're looking at now when it comes to malware cookies and not a problem and is
found this is a suspicious file which is quite good really because of the files on here that is probably
the most suspicious file and we can choose what we would want to do with it quarantine etc..
This tool is particularly good at removing problems which is why I suggested when it first read this
first and then the Malware Bytes tool and if it still hasn't gone then potentially Kaspersky unless
you're confident that one of them has actually removed the threat it will tell you if it's identified
something and we'll ask you to remove it and then if you see the characteristics of it stopped then
you can be somewhat confident that it has been removed.
If you're not confident I recommend you run all of them as I said and proceed through each of their
removal process the last malware removal I had to do.
I actually use three tools to make sure everything was removed.
Hitman Pro my website and I know that all of them are about to go through.
Those tools are just gone through.
You can run all of those offline as well.
So here what we've done is an online approach.
The viruses live and running against a live system.
You can do it off line as well so he can boot the system using a live operating system would have to
boot it into a Windows Live operating system and put these tools on and then run the tools against the
file system.
That's a slightly different approach because only looking at a file system it is possible to do it that
way.
Or you can take the disk out and put the disk in a different machine scan it that way as well.
Again off line.
We're going to look at live operating systems in another lecture and doing that last year so you know
this is online at the moment.
There's another tool you can look at if you need more.
This is row killer anti-malware this is portable is a free version but this is best to run against a
live system not off line because this looks at active processes with Harris sticks to find things like
DL injections more specialised tools.
Now if you believe you may have some sort of master boot record issue there's a master boot record scanner
here.
Kaspersky has a specific rootkit removal tool which is here now but it also has its own anti rootkit
removal tool and uses anti rootkit tools because once you have something that's a root kit it can hide
itself completely from you.
And really it's time we should start reformatting the drive and re-install the operating system.
And here is a tool specifically for Ad-Aware.
This is the third I was talking about before when I was cleaning a friend's machine the other tools
that are used were not quite as specialised on adware and there was a couple of browser extensions that
should have been there and this was able to remove them.
This is a good site to go to for a list of free tools for anti-malware anti rootkit anti everything
really when it comes to things you want to remove from your machine.
Others that already you have quite a few options when it comes to how to use these tools if you can
download and run them while the mouse is active or you want to on your system.
The malware could interfere with that or it could literally prevent the tools from even running and
I've seen that happen and it could provide inaccurate results so they can be a downside to running the
tools while the malware is active.
But in other instances when the malware is running it can be easier for them to detect.
So there's no clear answer there.
If you are having trouble rolling the tools one option for you to do in Windows is you can boot into
Safe Mode if you're not familiar with that you restart your machine and then you need to press a function
key specific to your device that will allow you to enter into the boot options that you can see here
and then you select safe mode in safe mode it doesn't load all the software and drive is that it would
do normally.
So it's possible that it then may not start the mouse as well.
So once it's booted into safe mode you can try using these tools that I've mentioned.
Another trick which surprisingly actually does work is you can try to rename the tool to something else
and that can help actually allow the tool to run.
If that doesn't work you can try or kill this attempts to kill known malware processes to allow you
to run the malware removal software.
If you're struggling to even download tools via the browser then you can use Chako for Windows this
is Chako in Mac you can use homebrew.
I only actually can use the standard app get or equivalent repository to the Linux download any tool
that you want to download.
And obviously a Mac or Linux you can use a tool do you get or Kerl download the tool that you need so
you'd put in.
Do you get.
And then the location of the tool that you want to download if the browser is just not working properly.
Back to Windows and Chako you'll need to install this.
If you go on to install now I have already run through this on the course already and this is the command
that you need to put in and you press enter there it will download Chako for you.
So there are chocker has been installed and you can see from that version there and if you want to install
the software Chako install minus one Malware Bytes.
So that's my web site as an example.
So there we go that's installed as well.
So we're going install Kaspersky as well Chako installed white Y2K VRT.
And that one actually failed to download.
Sometimes I do fail to download when you use an Chako.
Now you may be wondering how did I know that this was K VRT or how did I know that it was Malware Bytes
to install Let me show you.
If we go to the chocker Web site and then you go to package's you can do a search here
and there we can see Kaspersky and if you want to look for other antivirus software and go to here click
on antivirus or you can see all the other ones that you can potentially install the free versions
so you can see it is quite a lot there.
And perhaps maybe it's not available in chocker what it is you're trying to get.
You can then try to get W get.
And once you have double you get and of course you can download the software that you want to download.
So here we've got super anti-spyware downloading.
So the browser not working is not a problem and you will have seen Brue on the course already.
But Brue is the equivalent so you can see here Brue install you get that's actually just the same as
what I've just installed with Chako.
If this doesn't work in the malware still causing problems with you installing things there we need
to get off line read to access the file system in some way.
We need to use a live CD to boot the device.
We're going to cover that next and run these same tools and different tools against the boot partition
in the file system.
Now you can use that with a live CD on a Mac or Linux box to scan the file system of these two.