Why Remove spyware/malware tools?

#1 zeekstern

New Member

Group: Members
Posts: 2
Joined: 07-November 09

Posted 07 November 2009 - 11:27 AM

I have been reading through the spyware/malware removal forum and noticed that once the threat(s) are removed and the system appears to be clean, you are told to uninstall HJthis, ComboFix etc.. What is the reason for this?

Also, when told to download the various tools, everything goes to the Desktop. Is there a technical reason for this or is it just to make it easier to find the stuff you download?

I gotta say, this is the most helpful technical forum I have come across in years. The amount of work and time the moderators put in here is unbelievable!!

Thanks,
Zeek

#2 Orange Blossom

OBleepin Investigator

Group: Moderator
Posts: 29,405
Joined: 14-July 06
Gender:Not Telling
Location:Bloomington, IN

Posted 07 November 2009 - 03:14 PM

The tools you are referring to are very specialized tools, they are not ordinary security programs. Just as a doctor wouldn't keep sponges and clamps in a body once surgery is over, just so the team has these specialized tools removed. They have their place, but once they have served their function, they need to be removed.

Orange Blossom :thumbsup:

Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom
An ounce of prevention is worth a pound of cure
SuperAntiSpyware, SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 tos226

BleepIN--BleepOUT

Group: Members
Posts: 1,412
Joined: 21-October 04
Gender:Female
Location:LocalHost

Posted 08 November 2009 - 08:27 PM

zeekstern, on Nov 7 2009, 11:27 AM, said:

Also, when told to download the various tools, everything goes to the Desktop. Is there a technical reason for this or is it just to make it easier to find the stuff you download?

A technical reason? To slow down the screen display/refresh :thumbsup:

Seriously, IMO best place is a folder called HJT or AntiSpyware or whatever. But I think most users can't make one, nor direct a file to it, nor scan it before use. The way Windows is presented, with no Windows Explorer in sight, and no hints of directories, it's just not feasible. So the desktop, messy and ugly as it is, is the best fallback position.

Think of a user who downloaded a trojan and needs to learn how to cleanup. LAST thing on their mind is to learn how to use Windows properly. They have enough on their mind to read the superb BC instructions and wade through the mess. So, that's my take on the subject.

#4 zeekstern

New Member

Group: Members
Posts: 2
Joined: 07-November 09

Posted 08 November 2009 - 09:01 PM

OK. Thanks for the replies. Just curious.

#5 thcbytes

Bleepin' Teacher

Group: Malware Response Instructor
Posts: 11,595
Joined: 09-December 08
Gender:Male

Posted 09 November 2009 - 10:04 AM

Nice analogy ~ OB. :thumbsup:

Also.....

Without getting into the details....
The steps for "uninstalling" specific security apps does more than simply uninstall the app!! It is a critical step in preventing reinfection. :flowers:

Again....

Most of these tools should be used only under the direction of trained personnel. Unsupervised use can result in the inability to boot your OS...ever!

Kind regards,
~t

Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://organdonor.gov/index.html