Best Virus Removal Tools: Cleaning a deeply infected system
2022 ж. 9 Жел.
788 251 Рет қаралды
Best Virus/Malware Removal Tools you can use to clean any system for free.
Get an exclusive 50% off on Internxt lifetime plans: internxt.com/lifetime?...
This video covers cleaning a badly infected system with malicious drivers, fake antivirus, xmrig cryptominers and more. How to remove such threats? Use the tools below:
Norton Power Eraser: support.norton.com/sp/en/us/h...
Kaspersky Virus Removal Tool: www.kaspersky.com/downloads/f...
Hitman Pro (by Sophos): www.hitmanpro.com/en-us
Malwarebytes: www.malwarebytes.com/
Buy the best antivirus: thepcsecuritychannel.com/best...
Join the discussion on Discord: discord.tpsc.tech/
Get your business endpoints tested by us: tpsc.tech/
Contact us for business: thepcsecuritychannel.com/contact
When I say I tried pretty much every tool, I mean it. For everyone curious about how some other tool would perform, I tried: ESET Online Scanner, F Secure, Comodo Cleaning Essentials, Emsisoft Emergency Kit, Bitdefender, Tron script etc and in the end even Protegent 😅 before coming up with this list. I went through all of these in a 1 hr stream on Discord but didn’t include here cause that would make for a boring video.
Tron isnt really good at all in my opinion it causes more harm then good
@@novaUT He mentioned that.
Hey Leo. Did you happen to try renaming the tools to see if that would allow them to run? I've had luck doing that before.
As long as when the Tron script is running it is playing the soundtrack from BOTH movies, I'm ok with it!! 😁😎
But can any of them remove McAfee?
Leo, I was just doing a survey for a well known AV site and your channel name came up. They wanted to know if I’d like to see you or your channel (whatever they meant) in their published reports. I said HELL YES!! You’ve come a long way over the years, you have a bright future ahead.
Thank you for going through with all the testing and present the findings with us
No problem mate
If your system is "deeply infected" the most effective tool BY FAR is your existing backups because you need to reload/reimage/reinstall. AND, when you tally up all the hours you'll spend tracing down remnants or just worrying - it's often faster to boot. Sometimes a LOT faster!
The malware might infect your backups which results in them not working.
@@david09baz backups should be encrypted and your system shouldn't have write access to existing backups
@@a.x.w Exactly - "air gapped" (as much as I dislike that term). At work people sometimes rib me for still using tape, but it's cheap, fast, and I can look at all those cartridges on the shelf and say to myself "encrypt that" during any potential ransomware attack.
True. But how do you know you haven't backed up an already infected system?
I would say yes, but also no. All in all, it still depends on the status quo. If the most recent clean backup was a day ago before the infection, by all means recovering from a backup (should) be fine. But if the most recent clean backup was 6 days ago (weekly backups), or 29 days ago (monthly backups), we're talking days and weeks of potential data / progress being wiped out completely. Of course this is briefly speaking and it obviously gets more intricate, but this video is nice for techs like us to keep up with their tool-belt and be prepared / made aware of more options to consider if such an incident were to occur.
Thank you so much, My pc got infected with a pretty deep virus that dug it's way into windows registry folders and I was searching on how to fix it because the virus was not letting me on any antivirus websites and I followed your instructions on this video and I finally recovered my 5 years of research I almost lost, so thank you I really appreciate it.
The question that comes to mind is the system infection was obviously downloading it's own tools and not what you thought perhaps due to HOSTS file, or had a Image File Execution Options Injection settings for all of these tools. Then when you used a couple of them that were probably missing from the list they were able to run. Without having the exact infection it's difficult to say for sure which method was used, but bottom line is probably ALL of the tools or Most of the tools would have worked had IEFO or similar method of running its own tools been dealt with. It was NOT due to the tool not being able to deal with it. It was the method used to try and run it.
Leo, if you have to ask if we want to see a demo on something you mentioned in a video. The likely answer is YES!!! 😎 This is awesome info you put out for the novice to amateur computer user. Thanks for this video!
this is my new favourite channel. i can barely wait to get home from work and from class and try it out
Thanks for the info! I now run the Kaspersky tool everyday to catch anything as early as possible.
You are the hero we need. EVERYONE needs to see your videos. Seriously.
Thank you so much for this video, I searched for deep cleaning virus tools and your video was probably the savior of my steam account. In my stupidity I downloaded a sketchy piece of software that ended up stealing my account information and sold all my in-game items :( fortunately, I recovered my account just in time, i'm stealing a bit paranoid if some piece of malware is running deep inside my system but from what I can tell, my computer is cleaned. Thank you so much for making this video, you save my PC
Great job and pretty clear communication also.
I would certainly appreciate a video on Tron. Thanks for this one, by the way.
Please do make a video on tronscript I would love to see it! It's always fun to see how things stack up against some virus or another. Plus, hearing what you have to say about of the different steps and processes tron does would be interesting. Then if on top of that, you even mentioned changes or upgrades?! Yeah, that sounds like a great video!!
I don’t believe it!?!? Norton is useful for something???
Yes bro, Norton will remove your malware and install his own
@@oskkim2163 common Norton W
@@oskkim2163 😂😂😂😁
@@oskkim2163 Norton is Notorious 😁
bruh literally. you can use it to remove your malware while it probably mines for crypto in the background
A customized Tron script video will be amazing to watch. I'm looking forward for that one.
You are really helping the general population greatly. Here's a subscribe!
I love this kind of testing AV's and AV's tools videos!
Many thanks for your computer security discussions!
The Norton Power Eraser solved my issue.. THANK YOU!!
Thank you for the suggested utilities.. should be very helpful.. Cheers
Kaspersky is the way to go, its to one and only Antivirus I use and I had never any problems so far.
Thank you so much for this I'm about to try this. I have a really infected system most my registry has been changed and permissions have been taken over. I thought about the tron script but I don't know anything about code or coding so I am very thankful your video popped up. Subscribed !
Hey I have this current problem dude, THE EXACT ONE., which service helped you bro? And was your malware capturing your screen like mine is ? It’s scary stuff I need help
ily man you so chill and helpful like i would honestly really want to get to know someone like you in my life
thank you for this video. Just what I needed!
I'd love to hear more about tron-script. Thank you so much for the video
Thanks for the help, man. I'm starting a small PC repair business and I was looking for some good tools to clear infected computers. I'm more of a hardware repair guy but I want to open the business to anyone in need of assistance.
Thank you for this video! and for your channel it really helps a lot
The biggest problem with malware and virus removal is that no single tool finds everything. So, your approach of utilizing MULTIPLE or SEVERAL tools is strongly recommended. I use the following approach; Whenever possible, use an off-line tool to scan the system such as one which runs from a USB. Better yet, if you have a second computer, pull the infected drive and scan it with the second (uninflected) computer using multiple tools. This ensures that NO suspect processes could possibly have been running. place the computer into “Safe Mode” which only allows the Windows system files necessary to run. THEN, perform your cleanup. Unless you know EXACTLY when your system was compromised, you have to consider that system restore points are also worthless. I’ve seen this time and time again. If you restore to a certain point, you wind up re-infecting your system all over again. Only after doing THIS level of cleanup will you be better assured that the cleanup is complete.
You're correct but I don't do cleanups. Nuke and rebuild is my solution
@@shaggydawg5419 Yes, there’s always the “Nuclear Option.” As simple as this option actually is, I’ve learned that most people simply won’t go down this road. I would say that the nuclear option is the #1 approach to virus & malware removal. That’s why I primarily use Linux as my operating system.
@@rb2287 People don't want to lose documents and/or start over from scratch. I'd rather lose a little bit of data (that hasn't been backed up yet) than risk an unstable system with a potential of reinfection or hidden malware. There's no way I'm going to use an infected system even after it's been cleaned and multiple malware products find nothing in it.
@shaggydawg5419 how do you "nuke" your computer? I got a maleware and I got a ransom message. I'm planning on nuking but idk how
@@taxcollector8858 I was referring to reinstalling the operating systems. Use other computer to download and create a Windows setup media on a USB flash. Turn off the infected PC and turn it back on. Boot off the USB device with Windows setup and delete the entire partitions on the infected hard disk. Start with a fresh Windows 10 or 11 installation.
Just by using the Norton power eraser my issue was fixed. Thanks bud.
I am aware this is a channel regarding PCs but a video like this for Android would be greatly appreciated as well. Helpful video, by the way!
Thanks good video . I used Kaspersky and it removed a trojan from my PC.
Awesome video, your channel is amazing!! Can you pleaseee make a "2022 best free antiviruses" video?
Thank you for making this video!
Informative video Mate!
Honestly, when I saw the malware take over the AV downloads, my first instinct was to not do the malware removal in Windows at all. Kaspersky Rescue Disk is a Linux boot disk that lets you run KAV on an offline system. I would be curious to see how it fares in this scenario. I've used it and Bitdefender Rescue CD (RIP) in the past with some good success.
Yes but this was much quicker.
@@pcsecuritychannel May be Quicker, but useless. @TheRossMadness is right, trying to clean a corrupted system from this live system is absolutely unreliable. The only way to do it right is using an external system. Otherwise, you can never be sure to have really cleaned up the system. It is a basic concept in IT security.
In my experience, for Windows anyway, doing things from safe mode is also a half-way decent option and normally solves most problems. Though it doesn't help against rootkits or bios attacks, but at least it'd help with things that want to be running on top of everything else (and most need internet to run, which safe mode doesn't allow).
@@dyanosis 1) In my line of work, that is Computer Security, there are no half-measures : You cannot be mildly confident that you have solved the issue. My customers want to be sure the problem is gone, not half-sure, with a half-baked solution, and what you recommend does not do the job. 2) Thank you for proving my point, you said it yourself : Your solution does not help against rootkits/trojans. And I want to be sure to deal with them. 3) You don't know well windows : You can run safe mode WITH Network enabled, it is an option. Enjoy, and Peace !
@@philpeko1796 While you may be correct, there's no need to be aggressive about it. He does have 'something' of a point after all- in all honesty windows safe mode, while NOT a panacea by any means, is a useful but often-overlooked tool these days. And while security is always something to be done in absolutes, the way things are done at home is often different from the business world- at home there's no concern for liability or partnerships or tax breaks or write-offs etc etc, which can dictate decisions that in other cases wouldn't happen. For example MWB is the name in the game for AVs, but when the business pays for norton, that's what you're stuck with. There's also the simple matter that a full reinstall... Honestly isn't that bad these days. Personal treasures like photos and writing aside, I could probably do a full, fresh reinstall and re-setup of my home pc in under an hour. That was NOT the case when I had dial-up. And if a system is infected to THAT degree a full reinstall might not be that bad of an option. Not always an option, obviously, but it's something more worth considering than it perhaps once was.
Great video and information , downloaded both thanks
Hey man, just discovered ur channel and I rlly like ur content, i have a question, is there any kind of malware that can't be fixed with a full PC format?
Awesome, thank you for this video :)
Your videos are excellent and very informative.
Norton Power Eraser due to the very small installer size, seems to be an online installer, which in case of an infected computer where the internet connection may not work, it will not execute as the computer cannot access the cloud to get the latest and complete virus signatures. In this situation it will be better to use another Norton tool - Norton Bootable Recovery Tool. On the other hand, it is always advised to try to clean a computer via a bootable tool and do not execute the cleaning software with the infected operating system active and running.
Thanks! Very helpful!
Thank you so much for the information!
Yes, a video about Tron Script would be awesome
Thanks for sharing this!
Thanks for the video. Can you do a comparison of Eset (I've heard they changed some things) and Kaspersky? Or maybe a standalone Eset review.
Hi Leo, I enjoy your videos! Can you maybe consider creating video about Bitdefender's tool used to cleanup the pc from malware. They have something similar to KVRT form Kaspersky. I am thinking to switch from Kaspersky to Bitdefender so I would love to see more comparisions against those products in the future.
Hey how's it going ? I'm a bitdefender user and I like it a lot, I'm a bit of a layman in this subject but when I used both, I didn't see much difference between the two, one thing I noticed was that the bitdefender panel has more settings than kaspersky.
Hey someone here who hasn't the least idea about any off this stuff. Your video where helpful and i feel at least a bit safer using my laptop. Thanks for your free help. Ps: im thinking its time to learn about that stuff since my dad used to fix my shit when my pc was slower than city traffic during rush hour.
I had no problems with Avast, but Malwarebytes detected malware which Avast ignored. I used Norton Power Eraser, but one of my very common utilities (photocopier) was detected as malware, which it is not. Wow. I'm thinking of getting the yearly subscription of Malwarebytes. I really like it!
well if you want to save some money u can create new accounts for malwarebytes and get 14days premium each time
Thanks for the video and information
i was going to say kaspersky as always but you already did 😁
I feel like the idea here is to clean up the system enough that what might remain of the user’s valued data can be offloaded to a backup, then the OS completely reinstalled.
Bingo! Now this idea I like.
Thanks for the tips.
I was thinking about searching some video like that on your channel then pow heres new one, but hopefully my pc is totally fine even with only windows defender
Thank you Leo.
Thank you for this video
There was a software named Returnil many years ago was quite novel way of defeating all kinds of threats. It just system restore the computer to a clean state everytime you restart your computer and have methods to permanently have programs installed to the system if needed to.
LEGEND YOU SAVED ME
I love BitDefender boot disc. It has found viruses that no other AV scanner could remove.
Yes, very good, thank you! It would definitely be interesting to put Tron through the paces.
Hey! I recommend you cover the command promt script that hubs you too all the antivirus software and the ShutUp tools for windows
the best way to deep clean an infected pc is to wipe the drive and start fresh, and not install some sketchy software again. keep your stuff backed up, and stay safe and comfy!
Top Notch .. Thank you for great content ..Would seriously love to see you do a TRON SCRIPT video
Saved my life dude holy
Thanks for this great Video and I totally agree with Hitman Pro as one of the tools that you need on the system. The Norton Power Eraser is the one I need to occasionally scan those hidden danger of the files I download. For me, They cannot be a greater malware than MS, Google, Facebook and KZhead which is always collecting our data and always pop-Up telling you like Edge and always try to set as default. Other paid Anti-Malware companies also the same like Avast, Malwarebyte, etc If you are an AV companie BE a AV company not a Tuneup PC or optimize Internet company, etc. OK thanks
Very helpful thank you
Hey when will you test any antivirus? Waiting for Kaspersky vs Bitdefender
A shop that I used when I used widows, never cleaned a system with widows loaded. They used a program called BartPE. They loaded the most current AV updates, burned a live disc, doing that on a separate PC. Turned the infected device off and then live booted the disc. The purpose to this is that some viruses use known inadequacies and flat out gross Vulnerabilities in the windows OS to hide themselves from AV software. Booting outside of the OS allows BPE to scan the full drive. Including areas that have been marked by windows as bad sectors for viruses. Windows marks sections of the formatted drive as bad if it finds issues. Windows will ignore these areas, but the virus can find them and use still good space in them. I personally stopped using windows decades ago because it was so riddled with vulnerabilities. No OS is fool proof, but windows is all but impossible to keep clean because of how haphazardly Microsoft writes it. The one thing it does well is keep a army of people employed trying to keep the OS running.
Thats not possible anymore since secure boot uefi
Thx a lot for your videos, btw wanted to clarify for what do we need malwarebytes? Cause u haven't opened it in video.
Thank you ♥
so let me get this clear, the best virus removal tools, Norton Power Eraser and Hitman Pro is the only two that still can be installed into our PC even AFTER we have deeply infected? or is Norton Power Eraser and Hitman Pro has been installed BEFORE it gets infected? but what if we've already installed the AV before get infected? like Kaspersky, Malwarebytes, etc, could we still can get auto infected?
thank you a lot dude...
Is it possible for you to test cortex xdr from palo alto? It should be worth a test because rumors say its better then Kaspersky
great vid . sysinternals autorun is a great visual tool. after you clean. And it does a look up against virus total.
My computer runs with the OS/programs/files each stored on one NVMe SSD. But the computer also has a HDD. So I cloned the contents of the NVMe SDD onto the HDD. I then disconnected the HDD from power and SATA connection to protect it from malware. So if I run into problems, be that malware or updates causing problems etc., I just reconnect the HDD and boot up from there. This takes less than 5 minutes, and so I then can proceed to do things such as pay bills and so forth, without there being any inhibitors or any other problems at hand. Thanks to this method, I am up and running bug free in mere minutes, rather than having to cross my fingers and reload or perform other recovery methods. Once I have some free time, I then just clone the contents of the HDD on over to the NVMe SSD, and once again have a bug free system. Thus with this technique, I in no way have to accept a corrupted computer to be able to somewhat repair itself via the help of another software app.
Thank you for share this tools, really appreciate. 😃 Can I suggest to do a video talking about spyware inside of TLauncher, a Minecraft cracked software?
I would love to see a more detailed video on fileless malware. I had a seriously compromised network back in 2018 and every system on my network (including my smartphone) was completely infected. In Windows I noticed the malware was highly cloaked and used a ton of strange Powershell scripts to gather data and deploy whatever was needed. I had a hell of time with it and had to replace my router and remove all IoT devices, thoroughly clean my system and reinstall Windows, and flash the stock FW to my phone using Odin. Simply reinstalling Windows always led to a reinfected system, which was crazy to me.
That sounds scary
@@Dead_Weight21 It really was. I also found all sorts of strange files inside my Google Drive, like a few Linux distros and such. I of course never put them in there. When I was trying to clean the system, I found a folder inside the Windows directory with around 100 .ps1 files (Powershell scripts) and I copied them over to a removable drive for later analysis. Sadly, they were gone when I went to find them again. Not sure if my AV killed them silently or if the threat actor deleted them. I really wish I would have kept more of what I found because the malware was amazingly robust.
This happened to me in 2021. My S8 picked it up immediately after Samsung stopped updates w/o notice. - To make a very long story short, I ditched Samsung & I use quite a bit of google/chromium stuff now and EVERYTHING is either still infected, (or re-infected). Your post is the closest description to what I've been struggling to with. I could go on forever - I would love for an expert to analyze it all. It's really quite crazy how these system apps or APKs manipulate my network and devices, then hide & respawn like weeds.
@@slamscaper128what the actual hell? How can reinstalling windows can end up reinfecting your system? That's terrific
@@riperroxd7664 The malware was very advanced and has multiple ways of remaining persistent after a reinstallation of Windows.
Thanks sir for great information, sir even though bitdefender failed in your testing system ? Please test . Otherwise NPE is considered to be the best for these situation
I usually use task manager to kill the fake AV then run standard tools like SuperAntiSpyware and Malwarebytes. If that doesn't work I use system restore to reset the system to the way it was before it became infected then run the same AV tools to see if the system is clean.
is the kaspersky free antivirus good? like better then the baked in security software for windows 11?
Thank You! :))))))
Is it possible for you to do some of those tests on mobile apps? I always follow your suggestions for PC, but on mobile im know nothing. Hhaha Thank you!
would you recommend to do a clean every month or year? Also in that order which you showed in video every time??
Most of the time you can just boot up a Linux distro via USB and manually delete the malware. That's how I cleaned some malware like that friendly antivirus program. You just run Kaspersky removal tool afterwards and boom - malware is gone.
Video idea : unused Bandwidth reselling programs / apps. The most popular ones are Honeygain, Peer2Profit, Trafficmonetizer and many others. Is it safe to use them, is there any possible danger like data leaks or even some legal problems with Internet provider/ Police? I know most of them pay, but very little. I guess it's not worth the risk for a few dollars per month but it could be very informative and interesting video.
thanks man
When my Win-7 computer gets a nasty virus, I just reload a system image that I created a few months earlier, at a time where the computer was known to be clean. That's why I keep all of my data and portable browsers on an external hard drive, not on the computer's hard drive itself. After reloading the system image I then use virus removal tools on the external hard drives to clean them up.
very helpfull Norten found 4 medium treats. The system runs better now
Uh oh? Not the treats! It might attract a dog! 😟
Now, don't know if it still exists, but Malwarebytes did have a CMD version to get things stopped so you can run the GUI version. And you can boot into safe mode or selective startup programs which helps
love that norton wants my credentials before even letting me download it
Can you do a review on Windows 10/11 Ghost Spectre? A group stripped down Windows to make it use less resources and remove MS tracking elements. But I want to know if it's actually safe to use
Emsisoft Emergency Kit helps. Comes with a CMD version as well Incase you have crap like this. Also knows as EEK. Downfall is the update process can take a while. But the CMD prompt version actually works well when GUI software doesn't work and will get you to use GUI software
great video.. but can you run all of these in "Safe mode"? my experience in safe mode with networking has helped
Today I discovered your excellent channel, obviously I have already subscribed. I have a question, how likely or difficult is it for a malware, rootkit etc. to leave the VM and infect the Host OS? Have you seen something like that? regards
It is very unlikely
@@pcsecuritychannel Thanks for the answer
@@pcsecuritychannel Is it likey for malware or a virus to infect other devices on your network if the vm is online and possibly escape that way?
Have you tried RKill for disabling malware before running any of the other av one-time scanners? Curious on your opinion of it.
It can work in certain situations.
thank you so much
Would you recommend having them on a bootable usb to completely remove everything, some infected the bios?
Very nice video thank U
i had this same virus long ago, i dont remember how i got infected but i realized i was infected because of how loud my fans were meanwhile my PC was on idle and it made me worry, so i installed AVAST and i got the fake Antivirus, but THEN i downloaded another one that i neither remember which one was but managed to get it installed, since it looked like the Virus didn't know about that one. So like that i realized i had a Bitcoin Miner on my PC somehow, and my Windows Security was completely broken so i anyways had to reinstall my Windows
Danke!