lurch (he/him)

he/him

  • 0 Posts
  • 249 Comments
Joined 1 year ago
cake
Cake day: October 4th, 2023

help-circle


















  • A virus scan will detect it and an OS wipe will clean it.

    This only works before the malware has been executed and only if the malware scanner knows it. Often Antivirus can block access to the malware, so it can’t be executed.

    If it has been executed, the PC needs to be shut down and all writable mediums connected wiped (including boot sectors and EFI), maybe even the BIOS reset, if it can be updated, to be 100% clean. If you can’t do this, you have to toss the PC in the trash.

    If the PC is not shut down, the malware could still survive in RAM and re-install its files or download something else, eg. a remote shell or rootkit.

    These processor security flaws just extend this to the CPU firmware, meaning you need to reset this too, after malware has been executed on the PC. If you just downloaded it and the antivirus blocked and deleted it, you’re still safe.

    If it got executed and you or a technician can’t remove it from the CPU, you have to toss the PC in the trash, just like you already had to if you can’t reset a malware that flashed itself into an updatable BIOS, for example.