This has been bugging me

[MrUnknown]

2) Malware IS difficult to remove within Windows, but I use a WinPE CD and manually remove registry entries and delete files. Not too difficult if you know what you're doing...and the malware isn't running when you boot up with a CD so it can't really get in your way.

This right here is the key to virus removal.

Viruses have a limited amount of places to actually hide, even rootkits, and under a boot CD, have no effect or interfere with your work.

And yes, many removals can be done within an hour or so. However, I usually follow up with a scan from Kaspersky rescue disk and Malwarebytes on the machine because I am paranoid, which is only click and walk away.

 

[Hercomputers]

In all fairness....he was "attacked" first.

Ok, ok, but at the same time, putting each other down, calling others 'haters' and so on, I just don't like to see that on this forum. Again, we're supossed to be helping each other right? Speaking to each other respectfully and professionally.

In the words of Rodney King: 'Why can't we all just along?"

lol - maybe I'm having a female moment-

 

[onetech4all]

Re:

A lot of tension on this thread about nuking and paving. Holy crap!
You all need a vacation!
Does it really matter what the person does to make the customer happy? What matters is the final result.
Firstly, there's no way you can clean an infected machine 100%,because of the tricks involved to infect the computer.
THE SAFEST way, is to start fresh with the OS and apps.
I always make an image of the drive, so I have no data loss; in case the customer cries about something missing, i can always go back to the old hard drive and get it for him or her.
If it gets to a point where the performance of the operating system is affected, after the infection removal and a repair of the OS does not fix the problem, I recommend a reformat and because of the backup I have the loss of data is minimal to zero.
I never had a customer complain about a pave and nuke, especially since all of their data is back on the system.
Hardware and software can be replaced, but personal photos, files, can't.
As long as you have a solid backup, you should not worry about the OS and apps. You can always get the software, even if you purchase it and in most cases the customer has the CDs for the apps that ran on Windows 98 and now they are running Media Center.
I have a 50-50 situation about removal or pave and nuke,so I don't stress about either cases, but I do get a confidence boost when the customer smiles and genuinely thanks me for the service and affordable price.
Ultimately it's about the customer service, since some don't even care about the intricacies of the steps taken to remove the infection.
Your call if you want to stress about this process or not. It's not about laziness, incompetence or anything else in that range, it's about doing what works for the customer and for you.

 

[basic]

Ok, ok, but at the same time, putting each other down, calling others 'haters' and so on, I just don't like to see that on this forum. Again, we're supossed to be helping each other right? Speaking to each other respectfully and professionally.

In the words of Rodney King: 'Why can't we all just along?"

lol - maybe I'm having a female moment-

Haha, I agree. This thread has become a gigantic pissing match about who is better or more successful.

 

[ATTech]

1) Did I say all Malware is MyWebSearch?
3) did I say everyone is running i7's?

You must have missed the EXAGGERATIONS ASIDE part of my post.

Don't be offended just because you can't remove infections with you method as quick as I can with mine. I may not have as much experience as some people here but I have removed plenty of infections over the last year in less than one hour and absolutely NOBODY has returned their computer to me for disinfection a second time.

Arrogance? Well two can play at that game...

NOBODY has returned their computer to me for disinfection a second time.

And the company down the street that does fix them, is thankful.

 

[Cambridge PC Support]

ah but, do you nuke before you pave or do you pave before you nuke?

 

[Corbin]

Wow so much love to the op I'm 97% on the getting the elbows dirty to clean it up by hand and about 3% on the nuke and pave. The n&p clients in my case say kill it all I want it fresh, as you can see every tech has her or his own ways of cleaning machines.

As for time it all depends on methods and machines, the place I used to work we always just did a n&p because we had a basic image for all the machines it take about 25-45 minutes depending on the image we where putting on the machine, but if it was a removal it wouldn't take to long depending on what it was, we did run a trend micro server so we did catch almost everything as it came up.

In the real world in my case very few clients know what a image is or how to backup what is needed, so it all depends if I can look at the machine and have it done in 2 hours max with cleaning removing and a tuneup then I won't do a n&p. If its one of those 8 yearold machines that has not had any av on it for 6 years I would suggest a n&p or a new machine. But with my methods I use I can clean it some what fast and keep it clean. It all depends on the machine, the client, and the tech.

Sorry for typos, or yodas.

 

[ComputerClinic]

Main Entry: ig·no·rant
Pronunciation: \ˈig-n(ə-)rənt\
Function: adjective
Date: 14th century

1 a : destitute of knowledge or education <an ignorant society>; also : lacking knowledge or comprehension of the thing specified <parents ignorant of modern mathematics> b : resulting from or showing lack of knowledge or intelligence <ignorant errors>

it's pretty ignorant to assume that all malware can be cleaned up in 1 hour or less.

Its not an assumption. I'm speaking from my experience.

NOBODY has returned their computer to me for disinfection a second time.

And the company down the street that does fix them, is thankful.

This is an assumption, and also very ignorant considering you know nothing of my methods, experiences. or clients. If you want to know how to remove an infection in less than 1 hour see this thread:

http://www.technibble.com/forums/showthread.php?t=18027

To be a little more specific, the REMOVAL process shouldn't take longer than an hour. The CLEANUP process (scanning, tune-up, etc.) will of course take longer.

 

[ATTech]

Oh man, where to begin...

Its not an assumption. I'm speaking from my experience.

Then don't use absolutes as your experience isn't absolute.

This is an assumption, and also very ignorant considering you know nothing of my methods, experiences. or clients.

You missed the "Arrogance? Two can play at that game..." part of my post. I'm sensing a pattern.

If you want to know how to remove an infection in less than 1 hour see this thread:
http://www.technibble.com/forums/showthread.php?t=18027

How long do you think it takes to N&P a computer?

To be a little more specific, the REMOVAL process shouldn't take longer than an hour. The CLEANUP process (scanning, tune-up, etc.) will of course take longer.

What is the point then, in stating that only part of the process takes less than an hour? The entire process can easily, and does often take longer than an hour. Who cares if the removal takes 30 seconds if the clean-up takes 3 hours? And yes, I know that you didn't say that clean-ups take three hours; you don't have to point that out. It was another exaggeration.

With the proper set-up, a back-up and reimage can, and typically does, take less than an hour. In addition, short of the initial set-up, there is minimal involvement needed from the technician as well as little impact on the clients computer in terms of programs and settings. Are you suggesting that removal clients are more content that N&P clients? If my reimaging system can get them back-up and running with all the same programs, data and settings on a while you wait timeline, what advantage does removal process have?

I'm not saying that don't bother with removal. I think that there are instances where manual removal is essential, especially when the user has saved very important information in awkward areas, has hard to find essential programs, or when the infection is minimal. However, there seems to be this general feeling that N&P is a cop out, and that's simply not true. I find myself looking more and more at the progressions: Malware programmers are pushing for more and more to make their programs difficult to remove, while the white-hat crowd is making it easier and easier to deploy/reinstall a machine. Perhaps a mathematical representation is on order:

Lim..............Virus Removal Time = Infinity
time -> inf

Lim..............N&P Time = 0
time -> inf

 

[basic]

Oh man, where to begin...
Then don't use absolutes as your experience isn't absolute.

You missed the "Arrogance? Two can play at that game..." part of my post. I'm sensing a pattern.

How long do you think it takes to N&P a computer?

What is the point then, in stating that only part of the process takes less than an hour? The entire process can easily, and does often take longer than an hour. Who cares if the removal takes 30 seconds if the clean-up takes 3 hours? And yes, I know that you didn't say that clean-ups take three hours; you don't have to point that out. It was another exaggeration.

With the proper set-up, a back-up and reimage can, and typically does, take less than an hour. In addition, short of the initial set-up, there is minimal involvement needed from the technician as well as little impact on the clients computer in terms of programs and settings. Are you suggesting that removal clients are more content that N&P clients? If my reimaging system can get them back-up and running with all the same programs, data and settings on a while you wait timeline, what advantage does removal process have?

I'm not saying that don't bother with removal. I think that there are instances where manual removal is essential, especially when the user has saved very important information in awkward areas, has hard to find essential programs, or when the infection is minimal. However, there seems to be this general feeling that N&P is a cop out, and that's simply not true. I find myself looking more and more at the progressions: Malware programmers are pushing for more and more to make their programs difficult to remove, while the white-hat crowd is making it easier and easier to deploy/reinstall a machine. Perhaps a mathematical representation is on order:

Lim..............Virus Removal Time = Infinity
time -> inf

Lim..............N&P Time = 0
time -> inf

LOL, I never thought I'd see limits on this forum.

 

[ATTech]

LOL, I never thought I'd see limits on this forum.

I do what I can.

Filler

 

[Elemdee]

I just got a laugh at the tags attached to this thread...one of them is 'pizza tech tactics'. nice. lol.

 

[Pc Fixed Right]

WHOA maybe a Technibble gathering is a bad idea with so many hot heads roaming around.

 

[ComputerClinic]

Ok so for you N&P is faster. Not for me. I'm done with the work after 15-30 minutes of manual removal. Then I just babysit as scanners and tune-up scripts run. Compare that to reinstalling Windows, drivers, programs, backing up and restoring data, setting up i-Tunes, Quickbooks, bookmarks, e-mail, wallpapers, and whatever else the client wants. Sure, a lot of this can be automated but not everything. Perhaps you have many small business clients that you have setup with imaging software and that's great for you. Most techs here don't have that luxury. And yes, I am thorough and I know what I'm doing, and that is the reason clients don't call me back until a different issue arises. Whatever, I'm over it.

 

[Hercomputers]

WHOA maybe a Technibble gathering is a bad idea with so many hot heads roaming around.

It all depends on WHO is there. Personally, I don't think it's a bad idea. I've already met up with Jose/Kagman and I'm looking forward to meeting up with Elmdee next- but hot-heads and crybabies are not needed....gee whiz!

 

[Elemdee]

It all depends on WHO is there. Personally, I don't think it's a bad idea. I've already met up with Jose/Kagman and I'm looking forward to meeting up with Elmdee next- but hot-heads and crybabies are not needed....gee whiz!

Watch out when these girls hit New York together!!!

 

[ATTech]

Perhaps you have many small business clients that you have setup with imaging software and that's great for you. Most techs here don't have that luxury.

Short of the operating system, all the software I use for this is free from Microsoft, so...

 

[Hercomputers]

Watch out when these girls hit New York together!!!

Everyone look out...lol

 

[ComputerClinic]

Short of the operating system, all the software I use for this is free from Microsoft, so...

I'm talking about first time clients. You don't expect a residential client (or small business client) who you've never met before to have a convenient, up to data backup image for you to recover from. I wasn't talking about software at all. There's plenty of free imaging software.

 

[ATTech]

I'm talking about first time clients. You don't expect a residential client (or small business client) who you've never met before to have a convenient, up to data backup image for you to recover from. I wasn't talking about software at all. There's plenty of free imaging software.

I don't think you quite understand. I'm not talking about imaging software; I'm talking about deployment software. This allows you to create a hardware independent image with all the basics, updates and drivers and gives you the option of installing additional software that they have on their system. The bigger the database of software you have (which expands with every customer), the lesser the need for intervention.