Sinisterly
Posting Infections - Useful information - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Computers (https://sinister.li/Forum-Computers)
+--- Forum: Antivirus & Protection (https://sinister.li/Forum-Antivirus-Protection)
+--- Thread: Posting Infections - Useful information (/Thread-Posting-Infections-Useful-information)

Pages: 1 2

Posting Infections - Useful information - Lexi - 06-12-2013

Lexi's Infection Guide

Hello and welcome to my guide about posting infections and useful information that you need to know about posting them so that you can receive the best response from somebody. I myself am not an expert in security log analysis, but I know a lot about prevention and how to stop them once they are on your system.

Hopefully this guide will help you, help me, help you, help yourself.

Things to know
There are things that you must read before trying to post an infection.
  • Do not alter logs in any way shape or form
  • Logs that are old much like grandparents at driving, are useless.
  • Any and all traces of infections/malware are removed. This may include your most favored files/programs

Posting a thread
The following format should be used when posting an infection, and should include the logs that I will cover in the next part of the tutorial.

Note: All logs must be uploaded to a Pastebin account for easy access for the user assisting you.

Code:
Name: Date you believe you were infected: SecurityCheck Log: MalwareBytes Log: OTL Log: Anything else;

The Logs
You must use these logs in order to recieve any form of useful help.

Security Check:
  • Download SecurityCheck from one of the following links;
  • Here
  • Here
  • Save it to your desktop and Windows Vista/7 users should run as Administrator
  • Click the scan button and wait for it to complete
  • When the scan completes, click save log to desktop and upload it to Pastebin as required.

mbam.exe (MalwareBytes)
  • Download the program from the following link
  • Here
  • Install the application. Do this by double clicking mbam-setup.exe and following the prompts
  • Once the program has loaded, select Perform Full Scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
    Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to restart. Restart if it tells you to.
    The log is automatically saved by Malwarebytes' Anti-Malware and can be viewed by clicking the Logs tab menu. Upload the logs to Pastebin once again.

OTL (Old Timers List)
  • Download the program from on of the following links.
  • Here
  • Here
  • Here
  • Close all other windows and open OTL.exe to make sure it runs uninterrupted.
  • Set these as the settings when a window appears:
    Code:
    Output = Standard Output Processes = Use SafeList Services = Use SafeList Standard Registry = Use SafeList Modules = No Company Name Drivers = Use SafeList Extra Registry = Use SafeList Check the LOP Check and Purity Check boxes.
  • Click run scan. Do not change any of the settings unless told to by your helper. The scan will not take long
  • When the scan completes, it will open two notepad documents. These are saved in the same directory as OTL.exe
    Copy the contents and upload to Pastebin once more.



Thanks for Reading!
If you enjoyed my thread, please remember to show your appreciation. If you have any questions regarding this please use the forum PM system

As always;

Lexi gives you a [Image: heart.png]

RE: Posting Infections - Useful information - Storm_DZ - 06-12-2013

Nice thread, very High Quality.

RE: Posting Infections - Useful information - Lexi - 06-12-2013

(06-12-2013, 08:32 AM)Xaine Wrote: Nice thread, very High Quality.

Thanks for the great feedback. I'll hopefully be posting more of these soon Smile

RE: Posting Infections - Useful information - Lithium - 06-12-2013

I like the layout of the thread, should help members seeking A/V help.

RE: Posting Infections - Useful information - Welfare - 06-12-2013

Very nice thread, useful and informative.
Will use if I get into trouble :p

RE: Posting Infections - Useful information - Cosmic - 06-14-2013

Really nice thread! Should help people out.

RE: Posting Infections - Useful information - Sunlight - 06-14-2013

Nice thread, I may post some logs, as I can't connect to virustotal.

RE: Posting Infections - Useful information - adityagupta1994 - 06-25-2013

a simle way can be finding a suspecious looking process in task manager.. then right click on it and open the file location.. now scan that file on virustotal.. in 99% cases it will get detected if its a malware ..

RE: Posting Infections - Useful information - Soup_DZ - 06-25-2013

(06-25-2013, 10:00 PM)adityagupta1994 Wrote: a simle way can be finding a suspecious looking process in task manager.. then right click on it and open the file location.. now scan that file on virustotal.. in 99% cases it will get detected if its a malware ..

Why bother scanning on VirusTotal? Just use Anubis ...

RE: Posting Infections - Useful information - Lexi - 06-26-2013

(06-25-2013, 10:07 PM)Soup Wrote: Why bother scanning on VirusTotal? Just use Anubis ...
This.
Most AV scans look at tasks and their suspicious behavior flags. Just ran a scan once a day and look at your startup tasks, this will mostly get rid of this without having to do what you explained.