Windows 7 Malware Removal

[thatPC]

Hi guys,

With Windows 7 now being significantly more locked down than XP how are you having to change your malware removal procedures?

For example, I had one laptop in today. With XP I'd just pull out the HDD pop it as a secondary on my desktop and scan it from there. With 7 you can't access a lot of the files without being logged in as that specific user so Malwarebytes doesn't detect anything.

Would be interested to hear your opinions.

 

[Morrison5891]

Pretty much same as you. As far as the issue ur having with windows 7 - There are tools to allow you to have full access so this wont be a problem

 

[vdub12]

I have the same problem with windows Vista and 7. Many of the folder in documents and settings are off limits. I have to end up changing the security settings on those directory's in order to access them. I wish you could just right click on the primary drive and click run as administrator.

 

[Morrison5891]

I use this to take control of that problem ... Works great and saves time

http://www.bpsoftware.com/download/bpacler.zip

 

[Morrison5891]

Sorry... file went missing from the host...

This will add "Take Ownership" to right click

 

[vdub12]

Sorry... file went missing from the host...

This will add "Take Ownership" to right click

Thanks, just added to my thumb drive.

 

[RegEdit]

For example, I had one laptop in today. With XP I'd just pull out the HDD pop it as a secondary on my desktop and scan it from there. With 7 you can't access a lot of the files without being logged in as that specific user so Malwarebytes doesn't detect anything.

Malwarebytes is designed to be run from the machine itself (NOT as a slave drive). Doing otherwise will VERY often render the computer unbootable because it doesn't load the registry hives. Your first priority should be to make every effort to fix it from the desktop using r-kill (renaming the shortcut "Firefox" if you have to), manually searching for malware in known "hideouts" including startup locations in the registry, using Process Explorer, AutoRuns, etc, then keep trying to run Malwarebyes, renaming it to "Firefox" if you have to sidestep rootkits that block it. 2nd choice is safe mode virus removal. 3rd choice is using a Bart PE CD to do a manual removal. Last choice, such as if the computer is unbootable, is to use a rescue CD like Bit Defender's rescue CD.

This method also eliminates the risk of accidentally breaking pins off the hard drive if it's an older drive. Then you're really screwed.