Malware Scanners What do you use most?

[Abet Computers]

MalwareBytes Anti-Malware

Emsisoft Anti-Malware

SUPERAntiSpyware

Other

And Why?

If you chose other - What is it and why do you choose that?

I prefer using malwarebytes and then using hijackthis to do some extra clean-up

 

[ajc196]

Mine:

First is a mix of manual removal, MSE, Avast BART, and/or ComboFix.
Second is MBAM, SAS, or/and SpyBotSD.

 

[nmdotcom]

Yeah usually if its bad like AntiVirus 2010 locking the system down its a safe mode boot for me and running ComboFix. Then I run malware bytes to clean up all the left overs.

 

[HubCityPC]

After a lil manual removing I usually follow up with MRT, MBAM, and SAS. For older machines I may run Spybot. I also like Kaspersky's boot CD.

 

[vdub12]

I voted other.

Manual removal.

It not only saves tons of time but its normally more affective. In this job I see windows machines all day. It does not take long to know which process belong and which do not.

Why waste time with scanners. Those are for end users.

 

[vdub12]

Yeah usually if its bad like AntiVirus 2010 locking the system down its a safe mode boot for me and running ComboFix. Then I run malware bytes to clean up all the left overs.

I'm sorry but in what world is AV2010 bad. Thats like the easiest virus in the world to remove. In a controlled environment on my VM I have removal manually down to less then 10 minutes. On a customers system its less then a half hour taking in to consideration they might have other bugs.

 

[PC Ops]

1) Manual search.
2) Combofix, Dr.Web, Threatfire, SAS, MBAM, MSE, (McAfee Stinger, just started experimenting on this one).
3) "Outside" scan from any PE.
4) Register check (mostly CCleaner's).
This should nuke out any bug after on-demand scanning each one.

Successful so far...

Cheers.

 

[gunslinger]

After cleaning temp files with ATF cleaner and Ccleaner I use Combofix, SAS, MBAM and Vipre. After this I will use hijackthis and autoruns to make sure I got everything.

 

[cpaul123]

I usually use MSE, Malwarebytes and SuperAntiSpyware. I also check MSCONFIG startup to see if there is anything suspicious there.

 

[NeutronTech]

I usually use MSE, Malwarebytes and SuperAntiSpyware. I also check MSCONFIG startup to see if there is anything suspicious there.

You should really use autoruns instead of MSCONFIG.

 

[iisjman07]

You should really use autoruns instead of MSCONFIG.

+1. Autoruns = msconfig on steroids. Seriously though, msconfig is alright for programs starting with the computer, but autoruns can do so much more

 

[xxsilk109xx]

After a lil manual removing I usually follow up with MRT, MBAM, and SAS. For older machines I may run Spybot. I also like Kaspersky's boot CD.

What is MRT? Also I want to know how you set up the network access on the kaspersky CD, I am having issues with it connecting so that I can update it before I scan...

Anyone like the Dr. Web disk?

 

[PC Ops]

What is MRT?

MRT = Windows Malicious Removal Tool (X:\Windows\System32\mrt.exe)

Sends a lot of info on the system to MS though.

 

[iisjman07]

Anyone like the Dr. Web disk?

It's very good for repairing infections, whereas most boot disks just delete the infections. It's also very good at repairing rootkit infected drivers, but I try to avoid it because I find it very slow at scanning/updating

 

[ajc196]

2) Combofix, Dr.Web, Threatfire, SAS, MBAM, MSE, (McAfee Stinger, just started experimenting on this one).

I've played around with Stinger too, and I've found that it's most useful for removing rogues offline(mainly the live XP in Hiren's). It's great, but nothing beats ComboFix for ruining a rogue's day!

 

[NeutronTech]

It's very good for repairing infections, whereas most boot disks just delete the infections. It's also very good at repairing rootkit infected drivers, but I try to avoid it because I find it very slow at scanning/updating

Yeah, it is very very slow. I've used it twice. Both times it was so slow, I just gave up and went into safe mode and found a different way of cleaning. Of course I was onsite both times, and I get very impatient while waiting for scanners onsite.

 

[sapphire_blue]

First thing I like to do is use either autoruns or hijack this to see what I am dealing with. This usually tells me what I need to do manually. When I am confident I have removed as much as I can manually, I run tdss killer, and if the situation calls for it combofix. Malwarebytes and nod32 on demand scanner are next. Crap cleaner and atf are next. Finally, I poke around and see if there is anything I missed.

 

[gazza]

If I am able to get into Windows then one of my go to tools now is Hitman Pro!, great detection results and fast scan time. If I can't get into windows then I use my MSDART live disc to manually clean the folders and registry or simply try a restore point.

 

[NeutronTech]

I start by running rkill, then ATF to eliminate most of the garbage, thus decreasing scan time. Next is tdsskiller, autoruns, manually remove what I can, Combofix, MBAM, Rootkit Revealer, Sophos, verify everything is gone, then ccleaner. After that I run some registry tweaks and run a tweak program to see if I need to adjust anything else. Run Crystal Disk Info, defrag the registry. There's a couple more things, but I can't remember off the top of my head. They're just basic things like looking at device manager to make sure all drivers are installed and so on.

All of my virus removals include a cleanup and "tune up".

 

[dipper]

I have a quick look to see if can be removed manually and then usually use MBAM and then Super Antispyware. After that I also scan using AVAST AV and even Trend Micro AV.