Malware Removal Guide for Windows [Feedback]

[geohac]

Hi everyone,

I would really like to get some feedback from you. What is your opinion on the guide? What can I do to make it better? I want to make the guide as user friendly as possible. Please give me your feedback, ideas, and suggestions. Thanks.

This guide will help you clean your computer of malware. If you think your computer is infected with a virus or some other malicious software, you may want to use this guide. It contains instructions that, if done correctly and in order, will remove most malware infections on a Windows operating system. It highlights the tools and resources that are necessary to clean your system.

Guide: http://www.selectrealsecurity.com/malware-removal-guide

[leofelix]

do not worry, please
you request is o.k

[Raymond]

Like I replied on your PM, there is no need to delete or close your old thread.
It is a few pages away and normally people won't see or reply to it.

[geohac]

Come on guys, please read the guide and let me know what you think. Am I asking too much?

[Raymond]

Am I asking too much?

You are now...

[Bluedot]

Geohac, people know how to read the threads in this forum, you know. You don't have to constantly remind everyone to visit your site. When they have the time, interested people will go there with or without you reminding them. I'm afraid your behavior is gradually shifting to advertising your website, which is not permitted here.

[geohac]

Hi Bluedot,

No, I am not advertising, although it may look like it to you. I wanted to use this thread to ask for feedback on my guide.

[jelson]

Just noticed this thread today. I took a look. Rather good job IMHO... of course I'm not especially skilled in malware removal -- my idea of malware removal is "Format" & restore from disk image (Data's on another drive!)

That said, seems like a good job to me. I especially liked the section on "Get expert advice." I referred a relative to Bl**ping Com*ter forum for step by step help. Wasn't familiar with the other ones, but I'm make a note of them. Thanks.

One question I have is concerning the rootkit section. TDSSKiller is a great choice since it simply lets the user know if a rootkit is detected or not. Other antirootkit tools take more than a bit of knowledge to understand their results. That said, I'm personally wondering just how broad a spectrum TDSSKiller can detect, or what are it's limitations.

Just read this thread started by leofelix. So you should add BitDefender's TDL4 remover to your guide.

[geohac]

Hi jelson,

Thank you for taking the time to look at the guide.

TDSSKiller was originally designed to remove most variants of TDSS; however, it now does a good job at removing other rootkits. It can detect hidden services, forged MD5 hashes, and MBR changes as well. The tool is updated often, which means it's able to detect new variants.

Here is a list of malware it currently detects:

Rootkit.Win32.TDSS;
Backdoor.Win32.Sinowal.knf, kmy;
Rootkit.Win32.Stoned.d;
Backdoor.Win32.Trup.a, b;
Trojan-Clicker.Win32.Wistler.a;
Backdoor.Win32.Phanta.a, b;
Rootkit.Win32.TDSS.mbr

You can read about TDSSKiller here: http://support.kaspersky.com/faq/?qid=208283363

So you should add BitDefender's TDL4 remover to your guide.

Thanks for reminding me. I will probably add it sometime soon.

Thank you for your feedback!

[geohac]

So you should add BitDefender's TDL4 remover to your guide.

I added FixTDSS from Symantec instead: http://www.symantec.com/security_response/writeup.jsp?docid=2010-090608-3309-99