Ramnit A and potentially other viruses which should i use?

MajorFoley · 11 Aug 2017

Ok so i recently scanned my portable drive with the new malwarebytes 3.0, apparently didn't find anything on that.
As soon as i installed MSE the moment i started scanning the drive Malware bytes went nuts quarantining SVChost.exe and MSE keeps apparently cleaning and quarantining them as well along with some programs like team viewer but on the actual laptop and not located on my portable. It keeps apparently detecting Jeefos on SVChosts and tries to clean and quarantine every 2 minutes.

So my friend is letting me borrow one of his older laptops to use Windows 10 defender to scan it but it keeps freezing at about 3 quarters, so we had the idea of trying to scan it file by file. When i scanned my photos folder nothing was found but apparently scanning one of my other folders (EPSXE) it found 82 threats most of them Ramnit A's. The problem is i had to do an individual file scan because the entire HDD scan the scanning freezes and refuses to continue on
I'm at a loss of what to do it, of course defender offers the option of clean but i'm not 100% sure it will work and i have some old school stuff that im worried that those virtual images themselves could be infected.

So i was wondering should i try making a virtual image, connect the HDD directly there and scan or make an image of the laptop (with macrium reflect) as a restore and then plug it in and do a scan and try cleaning it? I remembered once on those images i tried a bit defender and avast scan and it cameup with these
( JS dropper AQ (trj), win32 rmndrp, win32:quolko, win32:Genmalicious-GOW[Trj],and win32:Crypt-SJB [Trj])
I want to try and save as many files as i possibly can.

Tony K · 11 Aug 2017

Hi there. You may want ti try this: https://support.microsoft.com/en-us/...-protect-my-pc

MajorFoley · 11 Aug 2017

HippsieGypsie said:

Hi there. You may want ti try this: https://support.microsoft.com/en-us/...-protect-my-pc

Whats happening is the moment i entered the drive defender claims its cleaning malware every couple of minutes then just stops.

Tony K · 11 Aug 2017

MajorFoley said:

Whats happening is the moment i entered the drive defender claims its cleaning malware every couple of minutes then just stops.

My mistake. I thought you were on your W7.

Try this: Safety Scanner - Windows Defender Security Intelligence

Borg 386 · 12 Aug 2017

Before you run any malware scanner, D/L & run RKill. It appears the malicious processes are running in the background & effecting the scans of these programs. RKill will attempt to terminate any malicious processes from running.

Important: DO NOT REBOOT after running RKill. Instead immediately scan your PC with Malware scanners. Once the malicious processes have been stopped you have a better chance of removing them.

RKill Download

When RKill runs it will kill malware processes and then removes incorrect executable associations and fixes policies that stop us from using certain tools. When finished it will display a log file that shows the processes that were terminated while the program was running.

As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again. Instead, after running RKill you should immediately scan your computer using some sort of anti-malware or anti-virus program so that the infections can be properly removed.

Try AdwCleaner. You may also wish to run JRT (Junkware Removal Tool)

Also, it wouldn't hurt to run a scan with TDSSKiller to be sure you don't have a rootkit causing reinfection.

TDSSKiller Download

Note

When running TDSSKiller, launch the program, click on the blue text "Change Parameters" & check the box marked "Detect TDLFS File system." Click OK & then run the scan.

Since you are showing multiple infections you may wish to d/l & run an AV scanner such as SuperAntiSpyware Portable Scanner or Norton Power Eraser.

Another option you have is to make a bootable rescue disk.

11 Top free bootable antivirus rescue discs for Windows PCs | Digital Citizen