SRL Archive - Computer Help and Tutorials

How to detect a virus


kingarabian

2008-03-06 18:19:49

Before you start please download http://www.avast.com/eng/avast_4_home.html if you dont have it and make sure you download this:http://www.sandboxie.com/

*NOTE* when you have installed sandboxie click right mouse button on Sandbox default than go to Sandbox settings –> delete –> invocation –> "Automaticly delete contents of sandbox" and now you can continue the guide.


Now, search for the program you want to download. For me ill get this torrent:

[LEFT]Credits to (TheOneX) for the pic.[/LEFT]

You see, the person that downloaded this torrent, says its a virus. Lets say he is lying.

Ok so we make a file destination for this torrent. After this torrent is downloaded, we scan it with our virus scanner.
[LEFT]Credits to (TheOneX) for the pic.[/LEFT]

Now if our scanner detects something, then its most likely there is a virus, if not, oh well. So our virus scanner says its a virus, lets say its lying again.


OK so we go to http://virusscan.jotti.org/ or upload the file(s) to virustotal.com (filesize limit 10mb) So we upload our program there and we scan it:
Ok so there is not one but a couple of viruses in it. Lets say its lying Again :D

[LEFT]Credits to (TheOneX) for the pic.[/LEFT]
Now it is time to use sandboxie, We press right click on the file and press on "Run sandboxed". Sandboxie is a special program designed to run files without hurting your computer. It creates a NEW enviroment where no virus or trojan is able to execute their malicious codes.


[LEFT]Credits to (TheOneX) for the pic.[/LEFT]

Now in this guide the file wrar371.exe is opened with sandboxie and as soon as it opens, avast home edition detects a virus but the good the thing is nothing is infected because it is opened in a enclosed enviroment by sandboxie.



[LEFT]Credits to (TheOneX) for the pic.[/LEFT]

Ah well that concludes it. Tell me if I need to add anything else. If this tut aint clear, post away!

—Remember, this works for all programs you aint sure of. Not only torrents.
********************************************************
Getting rid of a virus
If you have a virus try the following:
1.Get an anti-virus and delete it.
2.Backup your main and important files and re-install windows.
3.Re-format.
4.you can easily delete a virus from a live CD, if you know how to do it.(Ask bullzeye95)
5.Live with it, if you dont wana do the suggested.
********************************************************
[LEFT]Big FAT Credits to (TheOneX) for the pics, that I used off.[/LEFT]

Runescapian321

2008-03-06 19:32:04

That sandbox thing seems pretty useful. It doesn't have to be with avast though right? It can be any (good) antivirus? Or is Sandboxie designed for Avast or something?

I'm definitely getting Sandboxie :)

kingarabian

2008-03-06 19:35:21

From: Runescapian321
That sandbox thing seems pretty useful. It doesn't have to be with avast though right? It can be any (good) antivirus? Or is Sandboxie designed for Avast or something?

I'm definitely getting Sandboxie :)


Naw man, it works on everything :D. Remember do this:
*NOTE* when you have installed sandboxie click right mouse button on Sandbox default than go to Sandbox settings –> delete –> invocation –> "Automaticly delete contents of sandbox" and now you can continue the guide.

TViYH

2008-03-06 20:29:46

Very nice tut. Tyvm

kingarabian

2008-03-07 00:04:24

From: Elkins121
Very nice tut. Tyvm


Thanks for posting and reading :).

Vapor

2008-03-07 01:01:13

Thanks for the tuts I always get viruses and I never know when.:p

Bonfield

2008-03-07 01:08:50

good job sandbox looks pretty sweet thanks for writing this

BobboHobbo

2008-03-07 01:56:17

Awesome, never heard of sandbox before, thanks for sharing.

bullzeye95

2008-03-07 07:45:53

You might want to add that you can easily delete a virus from a live CD.

kingarabian

2008-03-07 13:51:44

From: bullzeye95
You might want to add that you can easily delete a virus from a live CD.


Ok cool, thanks for the tip.

@everyone else, thanks for your nice comments.

Also be sure to use sandboxie browser, it owns :).

rontherhino

2009-02-22 16:49:27

nice tut and plenty of pics!

skvatboy

2009-05-15 15:30:18

thx for the info on sandboxie
I give it a try! ;)

flaminhaz

2009-09-26 16:45:43

Most keygens are false positives though so the only real way to find out if it is, is try to use it and then run virus scan

rogeruk

2009-09-26 17:42:45

From: flaminhaz
Most keygens are false positives though so the only real way to find out if it is, is try to use it and then run virus scan


Thread is 4 months old..

bullzeye95

2009-09-26 20:09:35

From: rogeruk
Thread is 4 months old..


Bumping isn't against the rules in the tutorial section..

Also, wut @ "4.you can easily delete a virus from a live CD, if you know how to do it.(Ask bullzeye95)"

rogeruk

2009-09-27 02:50:31

From: bullzeye95
Bumping isn't against the rules in the tutorial section..

Also, wut @ "4.you can easily delete a virus from a live CD, if you know how to do it.(Ask bullzeye95)"


Didnt say it was against the rules.

Not much point replying to a thread that is 4 months old especially when your talking about virus's because hardly any of these methods will work to remove.

Reformatting wont help with certain virus's too.