[ale] [EXTERNAL] okay, totally OT - free win 10 virus scan?

[neal at mnopltd.com]

Thanks.

On 2021-11-08 09:17, Boris Borisov via Ale wrote:
> You basically have to run live CD version of antivirus software or
> attach that hard drive to known good Windows PC as secondary and then
> run anti-virus scan or whatever.

Yeah, since MalwareBytes found what Kaspersky didn't I may try that 
route.


> 
> I'm for the fresh install approach. Backup whatever user file is
> needed with Live Linux CD and go for it. Most laptops got the Windows
> install partition hidden so is likely not affected by virus.

Yeah........ somehow I'm reminded of that joke about the two guys hiking 
and one gets bit by a snake...

"What did he say?"

"Well, he said you gonna die..."

> 
> On Mon, Nov 8, 2021, 09:35 Allen Beddingfield via Ale <ale at ale.org>
> wrote:
> 
>> I've gotten to the point that when I do computer work for people,
>> replacing their hard drive with an SSD is just an automatic thing to
>> do.  I find that 90% of people don't have more than about 10GB of
>> data sitting on those slow 500GB and 1TB SATA drives,and I replace
>> them with one of the many cheap $20-25 120GB SSDs available on
>> Amazon.  Occasionally someone will have a little more, and a 240Gb
>> or 480/500GB is more appropriate.  Even the large ones are cost
>> effective.  I've still got people happily using Core 2 Duo systems
>> for basic work, and a LOT of people using really early generation
>> Core i3 systems.  The bottleneck is almost always the disk these
>> days, and the cheapest SSD is going to be an improvement.
>> Allen B.
>> 
>> --
>> Allen Beddingfield
>> Systems Engineer
>> Office of Information Technology
>> The University of Alabama
>> Office 205-348-2251
>> allen at ua.edu
>> 
>> ________________________________________
>> From: neal at mnopltd.com <neal at mnopltd.com>
>> Sent: Monday, November 8, 2021 8:07 AM
>> To: Atlanta Linux Enthusiasts
>> Cc: Allen Beddingfield
>> Subject: Re: [ale] [EXTERNAL]  okay, totally OT - free win 10 virus
>> scan?
>> 
>> Thanks muchly.
>> 
>> The bootable Kaspersky found nothing.
>> 
>> I renamed the folder with the OfficeClickToRun.exe.  Still 100% disk
>> busy.  rebooted.
>> 
>> It ran badly, but barely enough to download/install Malwarebytes and
>> run
>> that. Which found 42 files apparently related to one malware and
>> quarantine.  Rebooted again.
>> 
>> Still sluggish, but slightly better.  Was able to download/install
>> Avast
>> and do a deep scan, which took overnight, but found nothing.
>> 
>> The patient is now booting reasonably ok with low disk usage.
>> 
>> My working theory is that with only 6GB, the original virus got the
>> disk
>> so busy that the MS Antimalware scan was never able to complete, and
>> was
>> always running, making the disk even more busy.
>> 
>> regards,
>> 
>> Neal
>> 
>> On 2021-11-05 12:42, Allen Beddingfield via Ale wrote:
>>> I've found that the combination of running Malwarebytes first,
>> then
>>> installing/running the free version of Avast is pretty effective.
>>> 
>>> --
>>> Allen Beddingfield
>>> Systems Engineer
>>> Office of Information Technology
>>> The University of Alabama
>>> Office 205-348-2251
>>> allen at ua.edu
>>> 
>>> 
>>> ________________________________________
>>> From: Ale <ale-bounces at ale.org> on behalf of Neal Rhodes via Ale
>>> <ale at ale.org>
>>> Sent: Friday, November 5, 2021 12:33 PM
>>> To: ale at ale.org
>>> Cc: neal at mnopltd.com
>>> Subject: [EXTERNAL] [ale] okay, totally OT - free win 10 virus
>> scan?
>>> 
>>> Helping out a friend.
>>> 
>>> Win 10 computer shows signs of virus.  100% disk usage, but Task
>>> Manager
>>> shows nothing eating up that much.
>>> 
>>> Resource Monitor shows many copies of OfficeClickToRun.exe.
>>> googleation
>>> suggest this be virus.  Which appears to make many copies of
>> itself.
>>> 
>>> Thus it would appear that I should find a bootable anti-virus to
>> scan
>>> this computer.
>>> 
>>> Given I don't want to spend a major portion of my remaining life,
>>> suggestions?   I've used ClamAV in the past.   I don't want to
>> make
>>> things worse by running a virus-scan which is itself a virus.
>>> 
>>> regards,
>>> 
>>> Neal
>>> _______________________________________________
>>> Ale mailing list
>>> Ale at ale.org
>>> https://mail.ale.org/mailman/listinfo/ale
>>> See JOBS, ANNOUNCE and SCHOOLS lists at
>>> http://mail.ale.org/mailman/listinfo
>>> _______________________________________________
>>> Ale mailing list
>>> Ale at ale.org
>>> https://mail.ale.org/mailman/listinfo/ale
>>> See JOBS, ANNOUNCE and SCHOOLS lists at
>>> http://mail.ale.org/mailman/listinfo
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> https://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> https://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo