Loading…
16
Had a customer's PC come in last Tuesday with 47 toolbars and a crypto miner running in the background
Guy dropped off a Dell Inspiron at my bench in Akron last Tuesday. Said it was "running a little slow." Booted it up and counted 47 toolbars in Internet Explorer, plus a crypto miner eating 80% of his CPU. Took me back to 2009 when this stuff was everywhere and we cleaned machines with HijackThis and a prayer. Spent 3 hours pulling junk with Malwarebytes and Autoruns, then had him watch while I showed him where the fake Flash update came from. His kid had clicked one of those popups on a Minecraft mod site. What's your go-to cleanup order these days, do you still run Autoruns first or something newer?
1 comments
Log in to join the discussion
Log In1 Comment
rosek4413d ago
Wait, was his kid downloading mods from sketchy sites without telling him? Because that's how it always starts. Had almost the exact same thing happen last month, some guy's teenager grabbed a "free" mod loader and boom, browser hijacked to some fake search page plus a nice little miner tucked in startup. I still run Autoruns first honestly, it's the fastest way to spot what's set to launch and kill the weird stuff, then hit it with Malwarebytes after. The trick is checking scheduled tasks too, half these miners hide there now instead of startup folders. Good call making him watch the cleanup, that part matters more than the fix itself.
1