As reference for remediation against malware or suspected malware please see the updated information below along with resources for potential removal.
We can offer members use of Malwarebytes cloud console at no cost allowing your school to save – https://www.empsn.org.uk/services/malwarebytes/
Further assistance is available to emPSN customers through the support@empsn.org.uk mailbox.
Suggested Remediation
Review the host to assess any immediate signs of issue or concern, legacy configuration or otherwise – this is the most likely issue with the host. Include system and application log files for errors or suspicious activity. If you suspect Malware a suggested approach could be:
- Do NOT Panic – keep a clear mind and work through what you need to do.
- Isolate the host from the network and scan it for malware.
- If Malware is found, either attempt to remediate the infection with anti-virus software, or format the hard drive and reinstall the operating system and all applications from known, good media.
- Ensure that the host has the latest patches and updates installed. This especially applies to Oracle Java, Macromedia Flash Player, Adobe Acrobat/Reader, any browsers (Internet Explorer, Google Chrome, Mozilla Firefox, etc.), and the operating system itself.
Further Advice
- If you require additional assistance during the containment, eradication or recovery phases of this process, please note that emPSN is available (support@empsn.org.uk) to advise further and has access to a highly trained Incident Response team that can be consulted as part of the emPSN service.
- If the host(s) have been used to access online banking resources, we would strongly recommend that the passwords are updated.
- Please advise users to only open attachments from known or trusted sources, particularly where the attachment contains Macros or executable code. Emailed macros and programs should ONLY be run if you are certain you know where it came from and what it does – enabling macros could infect your machine.
Resources and Tools
Example Malware detection/removal tools for your considered use – others are available, detection and removal is not guaranteed.
- AVG – http://www.avg.com/gb-en/virus-removal
- Dr Web – https://free.drweb.com/download+cureit+free/?lng=en
- ESET Online Scanner – https://www.eset.com/us/online-scanner/
- F-Secure – https://www.f-secure.com/en/web/home_global/online-scanner
- GData – https://www.gdata.de/pc/sp/blog/avalanche?utm_id=89
- Kaspersky – http://usa.kaspersky.com/downloads/TDSSKiller
- MalwareBytes (Malware) – https://www.malwarebytes.org/antimalware/
- Malware Bytes (Rootkit) – https://www.malwarebytes.org/antirootkit/
- McAfee Free Tools – http://www.mcafee.com/us/downloads/free-tools/index.aspx
- Microsoft Safety Scanner – https://www.microsoft.com/security/scanner/en-us/default.aspx
- Norton Power Eraser – https://security.symantec.com/nbrt/npe.aspx
- Sophos – https://www.sophos.com/en-us/products/free-tools/virus-removal-tool.aspx
- Trend Micro – http://housecall.trendmicro.com
Other sources of information and guidance please visit
