how to remove this worm

Jet-Fighter7700

Jet-Fighter7700

Honorary Master
Joined
Mar 12, 2008
Messages
47,462
Reaction score
23,421
Location
Somewhere Different
Hi all,

trying to figure out why microsoft security essentials cant remove this worm,

worm:win32/gamarue

keeps wanting to clean it, ask for a reboot, but comes back as infected again,
malwarebytes dosent pick it up,

what else should I try to clean this?

thanks
 
adwcleaner
combofix (check OS compatibility)
hitmanpro
superantispyware
malwarebytes
Junkware Removal Tool
rkill
tdskiller

disable system restore and disconnect from the internet before running the scans.

and Security Essentials is poop btw, avg will even do a better job...
 
access said:
adwcleaner
combofix (check OS compatibility)
hitmanpro
superantispyware
malwarebytes
Junkware Removal Tool
rkill
tdskiller

disable system restore and disconnect from the internet before running the scans.

and Security Essentials is poop btw, avg will even do a better job...
Click to expand...

Kaspersky Bootable ISO - scan your drive while not in use. May need win repair afterwards.
 
eg2505 said:
Hi all,

trying to figure out why microsoft security essentials cant remove this worm,

worm:win32/gamarue

keeps wanting to clean it, ask for a reboot, but comes back as infected again,
malwarebytes dosent pick it up,

what else should I try to clean this?

thanks
Click to expand...

Best way is to remove HDD from device and scan it as an external drive. Then nothing can hide within active processes. This works even better than scanning in Safe Mode (which should be the first thing to do when scanning for ANY viruses/worms etc.)
 
MightyQuin said:
Best way is to remove HDD from device and scan it as an external drive. Then nothing can hide within active processes. This works even better than scanning in Safe Mode (which should be the first thing to do when scanning for ANY viruses/worms etc.)
Click to expand...

so connect to another PC and run malwarebytes? or eset utility to run a scan.
 
eg2505 said:
so connect to another PC and run malwarebytes? or eset utility to run a scan.
Click to expand...


turn off restore points, delete existing restore points.
run
adwcleaner
malwarebytes
tdsskiller as admin
install eset smart security, (trial if you don't have it, is avail from their site.) trial normally valid for about 30 days.

And after all that only after a fresh restart do you turn restore points on again.
 
Avast Free ;)

And an updated version of Windows defender, do a full scan.
 
Booting from Hiren's Boot CD and doing a scan from there is probably the best and easiest way.
 
How do people even get these things now days.
AV is a prevention not a cure, ESET or Kaspersky.
 
DA-LION-619 said:
How do people even get these things now days.
AV is a prevention not a cure, ESET or Kaspersky.
Click to expand...

An Antivirus is only as secure as a PC user lets it be...
pop-up... give permission yes/no.
user clicks yes, without reading. In the meantime they are saying to AV to let the thing(s) through....
 
ODTech said:
This except for AVG.

http://www.wired.co.uk/news/archive/2015-09/17/avg-privacy-policy-browser-search-data

Use Eset and Malwarebytes as active protection, above arsenal to kill infections.
Click to expand...



yeah ive seen some people with a weird avg search provider and an avg home page. dodgy. you can remove/disable it.


anyway, all i meant was security essetials is not that good, they cant even make a secure browser, now they trying to make a security app.. its a laugh. i can see the stuff crawling around on some computers with security essetials, SE says everything is kwaai.


and yes, the best anti-virus is situated between the keyboard and chair
 
eg2505 said:
whitch is the best to use? AVG or avast,

also Im using hiren 15, dont know if theirs an updated version someplace.......
Click to expand...

15.2 should be the newest, I would try Avast first, then Malwarebytes.
 
As mentioned. Best to take your machine offline and run a scan against your mounted OS drive. The Trojan works by manipulating the autorun function of Windows computers and dumps the .exe and .inf file it uses to any remote computers it can access.

Try something simple like Microsoft Security Essentials.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X