Virus

[naednek]

So I believe my son's PC has a virus or malware. I have malwarebytes and it's not picking up anything.

He is connected to the wifi, but when he tries to go to google.com, roblox, youtube, etc page doesn't come up. Tried it in 2 different browsers and in private mode and still the same results. Rebooted, Shutdown nothing. I can ping www.google.com and receive a response but can't browse to it. I can also update malware so I know it can reach out, but not in the browser.

Another thing I noticed is qustido which is a websense like app for kids isn't running. That's a red flag.

You have t0 have the password to shut that off, he doesn't know it.

What's some best antivirus software that is free and effective? My go to has been malwarebytes but it's not seeing anything.

[LordMortis]

So I believe my son's PC has a virus or malware. I have malwarebytes and it's not picking up anything.

He is connected to the wifi, but when he tries to go to google.com, roblox, youtube, etc page doesn't come up. Tried it in 2 different browsers and in private mode and still the same results. Rebooted, Shutdown nothing. I can ping www.google.com and receive a response but can't browse to it. I can also update malware so I know it can reach out, but not in the browser.

Another thing I noticed is qustido which is a websense like app for kids isn't running. That's a red flag.

You have t0 have the password to shut that off, he doesn't know it.

What's some best antivirus software that is free and effective? My go to has been malwarebytes but it's not seeing anything.

I have the problem with Firefox and a Fortinet solution. None of the google properties and cloudflare's ever changing IP assigments sometimes get wonky work in FF when the Foritnet is up. Do you have a VPN set up? What sort of installations do you have that might monitor/intrude on your network traffic?

I'd ask what is running in system tray but nowadays installs like crowdstrike don't show up in your system tray and you can't shut them down. You can look at startup programs/add remove programs/taskmgr to get a feel for what is running.

Also MS built in AV is getting surprisingly good marks for a free solution in comparative reviews after all of these years. Like anything else, it takes them many years and tries but then they get solid.

[naednek]

Nothing out of the ordinary for the system tray. No VPN. I h ave Windows defender on as well.

[Zaxxon]

Just dropping in to state how happy I am to see a 'virus' thread that has absolutely nothing to do with COVID-19.

[Anonymous Bosch]

What's some best antivirus software that is free and effective? My go to has been malwarebytes but it's not seeing anything.

In terms of getting a poorly-running and/or compromised Windows PC back to functionality, TronScript will likely prove to be more effective.

Here's a tutorial video that walks you through how to use it:

[Jaymon]

Its possible that Qustudio is broken, and has defaulted to blocking all sites.

Maybe a recent windows update or some such has broken qustudio. Try a reinstall of that first.

Lots of those websense programs, if they get shutdown, the default behavior then is all sites blocked

[Carpet_pissr]

Yet another brilliant piece of hardware/software advice/article/link to an app or piece of amazingly helpful code

I hereby declare thee the winner of the OO "Most absolutely useful and informative IT related posts" award! Subcategory: Helpful apps and programs to do...ANYthing.

Our resident archivist should compile all the apps and programs you have posted here over the years.

[naednek]

What's some best antivirus software that is free and effective? My go to has been malwarebytes but it's not seeing anything.

In terms of getting a poorly-running and/or compromised Windows PC back to functionality, TronScript will likely prove to be more effective.

Here's a tutorial video that walks you through how to use it:

I hereby declare thee the winner of the OO "Most absolutely useful and informative IT related posts" award! Subcategory: Helpful apps and programs to do...ANYthing.

Our resident archivist should compile all the apps and programs you have posted here over the years.

Ditto, I'm using it now on his PC. It's slowly moving along. Not sure if it has found anything. Will have to check logs when it's done. I'm just happy I can just run the bat file and go back to my work. Hope this resolves it.

[naednek]

well certainly didn't like Tron deleting my One Drive... I didn't notice that when I was looking at the instructions. I'll be visiting the one drive recycle bin afterwards. (while only copying things I know)

[Anonymous Bosch]

well certainly didn't like Tron deleting my One Drive... I didn't notice that when I was looking at the instructions. I'll be visiting the one drive recycle bin afterwards. (while only copying things I know)

Strange. If memory serves, TronScript typically runs a detection routine that checks to see whether OneDrive is in use, and skips removal if it is. It does not remove user files though, so if you re-enable OneDrive, it should continue working as it did previously.

EDIT: I notice a SKIP_ONEDRIVE_REMOVAL (-sor) switch was added back in 2019, suggesting its detection of OneDrive usage may not necessarily be flawless.

[naednek]

Ya I was mistaken. It was files they added and then deleted when finished.

This resolved his problems so far

Thanks so much.

Too bad my son is being ungrateful that I wasted 30 minutes of his time because I wanted to review the logs.

Sent from my Pixel 6 Pro using Tapatalk

[Isgrimnur]

He could always be ungrateful for longer...

[naednek]

well, the problem happened again this morning around the same time. I had confirmed it was working this morning, and an hour later it reappeared.

When I ran Tron, I ran it under administrator but logged in as Ethan. When it got to the virus scanning part I saw a lot of access denied. But last night it was working so we just went with it.

I have it running again under my profile which I'm admin to.

It's possible like Jaymon mentioned this could be all Qustido. Will check into that later.

[naednek]

ended up doing a reinstall. That was quicker than the troubleshooting

[LewisHamilton65]

Bye bye spammer