+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: How to make sure my computer is COMPLETELY clean from virus's and hidden 0day virus's (/showthread.php?tid=5557127)
How to make sure my computer is COMPLETELY clean from virus's and hidden 0day virus's - Z ezima - Feb 21, 2017
How to make sure my computer is completely clean from any virus's and 0day exploit virus's? Am i better off just re installing a fresh copy of a new operating system? I use mac os x.
* - Alex Fisher - Feb 21, 2017
Want to get smart with your computer system? Stop using Mac OS X
:p
* - ProtonRouting - Feb 21, 2017
"0day exploit virus's"
im sorry i cant take you seriously after you say this
also mac os x doesnt execute .exe's so chances are you're safe.
* - Z ezima - Feb 21, 2017
(Feb 21, 2017 06:44 PM)ProtonRouting Wrote: "0day exploit virus's"
im sorry i cant take you seriously after you say this
also mac os x doesnt execute .exe's so chances are you're safe.
Sorry that i dont have your knowledge...
Rather than speculating, can someone assist me please?
* - Wαlrυѕ - Feb 21, 2017
It sounds like you are using a really bad translator, to be honest.
* - Z ezima - Feb 21, 2017
Yeah, i dont have much knowledge about this stuff.
* - Nation4000 - Feb 22, 2017
(Feb 21, 2017 09:54 AM)Z ezima Wrote: How to make sure my computer is completely clean from any virus's and 0day exploit virus's? Am i better off just re installing a fresh copy of a new operating system? I use mac os x.
Yeah you can reinstall your computer
Add anti viruses
Do daily scans
Don't download anything stupid or always scan the file/run in sandbox
* - CuteKit - Feb 22, 2017
1- First Clean all your Drives from : unnecessary files including 0 byte files and/or folders which is a waste on your system and any other file even if its small size bytes, you can do so manually any unneeded files/folders remove for ever.
this will make full antivirus scan(s) and system speed more faster on the long run
as files count more the full scan processor will handle each on small lag, so deleting
like around 400 k files will reduce virus Processing time by 20-28 minutes, more deleted files means lesser time to finish full scan.
2- Delete browser(s) temporary files/cookies/certificates/ uninstall any flash or shockwave from adobe, and later on you can reinstall most recent versions .
don't forget application temp install folder contents too .
3- Install a Complete Virus Protection and perform full system scan with full-extent detection all enabled .
disable any system restoration methods to minimize repetitive Virus/Trojans.. Appearance .
4- uninstall the previous Virus program and download different proven trusty Virus Protection
as Virus Protection detection differ from one company to another .
repeat step 4 with multiple different ones , and use anti-malware / anti-spywares / anti root-kits / Anti-Trojans from Filehorse (all free but make sure its Trust worthy by other reviewers) , there is a lot of softwares there for free .
* - Z ezima - Feb 23, 2017
(Feb 22, 2017 12:56 PM)CuteKit Wrote: 1- First Clean all your Drives from : unnecessary files including 0 byte files and/or folders which is a waste on your system and any other file even if its small size bytes, you can do so manually any unneeded files/folders remove for ever.
this will make full antivirus scan(s) and system speed more faster on the long run
as files count more the full scan processor will handle each on small lag, so deleting
like around 400 k files will reduce virus Processing time by 20-28 minutes, more deleted files means lesser time to finish full scan.
2- Delete browser(s) temporary files/cookies/certificates/ uninstall any flash or shockwave from adobe, and later on you can reinstall most recent versions .
don't forget application temp install folder contents too .
3- Install a Complete Virus Protection and perform full system scan with full-extent detection all enabled .
disable any system restoration methods to minimize repetitive Virus/Trojans.. Appearance .
4- uninstall the previous Virus program and download different proven trusty Virus Protection
as Virus Protection detection differ from one company to another .
repeat step 4 with multiple different ones , and use anti-malware / anti-spywares / anti root-kits / Anti-Trojans from Filehorse (all free but make sure its Trust worthy by other reviewers) , there is a lot of softwares there for free .
Thank you for taking the time to help me man.
Any more opinions?
* - Praet0rian - Feb 23, 2017
You are never truly safe, but you can take the required steps in order to secure your system, here is a short tutorial I wrote not too long ago:
Don't forget to install malwarebytes with another AV on
Analysis
If you feel that you are infected and your AV scan isn't showing any red, then it's time to do things yourself, you'll need to download some programs in order to make your hunt easier, while you can still use the standard tools that you get in windows almost as well, it is very tedious, for example, to check to see what programs are booting up on startup you'll have to check msconfig, the startup folder, task scheduler, and more...
the tools that I personally like are the Sysinternals Autoruns, Sysinternals Process Explorer, and the Sysinternals Process Monitor.
Autoruns is by far the most useful, it will list every single exe or dll that has to be loaded on startup on several tabs that have the sources as their list, for example, booting from the startup folder, booting from registry, it goes on, anohter useful aspect is that it also has the date it was added, and whether or not the program is signed, and allowing you to effectively disable them.
Process Explorer is task manager on steroids, you will have far more information and control over tasks, you'll get a GPU tab to spot for miners, entry coloring to show if the target process is signed or unsigned, the ability to suspend a process [freeze it] to fight "buddy malware" - malware that has 2 processes and spawns itself again once it spots that the other one is dead,
entry coloring to see if a process has recently closed or started, and far far more.
The process monitor is not as useful, it monitors I/O events to the registry and filesystem, it might be useful in some cirucmstances, such as a keylogger which writes on every keystroke..
Wireshark will also be useful to try and spot strange network activity.
Misc
An interesting method to help fight malware is to use software that will snapshot drives or filesystems, Faronics Deep Freeze, you should freeze the C: drive so you can prevent malware from installing itself into your system to start the next time you boot up, not a total defence against malware, but it can help save you from having malware on your computer undetected for a long time.
* - Tryingtorecoveraccount - Feb 23, 2017
(Feb 21, 2017 03:30 PM)AlyxFisher Wrote: Want to get smart with your computer system? Stop using Mac OS X
:p
Yeah cause the thousands of computer programmers, security analysts, sysadmins, professors, and what not who use OS X know nothing about computing.
(Feb 21, 2017 06:44 PM)ProtonRouting Wrote: "0day exploit virus's"
im sorry i cant take you seriously after you say this
also mac os x doesnt execute .exe's so chances are you're safe.
you can't be infected with malware if you run on OS X? Oh wow that is quite surprising news to me.
* - Praet0rian - Feb 24, 2017
(Feb 23, 2017 01:22 PM)Tryingtorecoveraccount Wrote: Yeah cause the thousands of computer programmers, security analysts, sysadmins, professors, and what not who use OS X know nothing about computing.
you can't be infected with malware if you run on OS X? Oh wow that is quite surprising news to me.
Mac OSX can be infected with malware as can any system, obviously malware that runs on windows as an exe can't run on Mac since mac's dont run on EXE, but a program such as Java can run on both windows mac osx