Win32:KipodToolsCby

Thelps · 10 Nov 2017

Hi all,

Was running a Full System Scan with AV software and detected the following malware:

Win32:KipodToolsCby

It's described by Microsoft as a 'high' threat piece of Malware.

The AV claimed to have 'partially removed' it.

Is anyone very familiar with this particular piece of Malware? Where it installs itself and what it does? I'm only asking to help confirm its removal and increase my understanding of malware/viruses/hacking as a whole to better protect myself.

Borg 386 · 10 Nov 2017

If it only partially removed it, that probably means it's spread out all over the system in pieces in various files. Partial removal may have also occurred because the malware process was running in the background, preventing full removal.

D/L & run Malwarebytes, the free version will work fine.

Also wouldn't hurt to run AdwCleaner.

If those have problems removing it, d/l & run RKill to try to terminate the malware processes. After running RKill, DO NOT reboot your computer, instead immediately scan with you malware scanners.

In fact, you may wish to go ahead & run it first anyway to insure more of a success for the malware scanners.

Samuria · 10 Nov 2017

You need to reset your browser to totally remove it Remove BrowserModifier:Win32/KipodToolsCby (Virus Removal Guide)

simrick · 10 Nov 2017

Samuria is correct. You need to reset all browsers on the system, whether you use them all or not.

.

Thelps · 11 Dec 2017

Malwarebytes doesn't ever seem to find any Malware/Viruses/Trojans/etc. It's very strange. Had a subscription with them for a very long time. Hopefully that's a good thing.

csun · 11 Dec 2017

Thelps - What is your current AV that found the malware ? Just curious of one that did its job.