So you have Spy/Ad/Malware - what to do now?

[Corny]

Spy/Ad/Malware is a very re-occuring topic here. Instead of spreading all the links, advice and knowledge across multiple threads, let's create a compendium of helpful resources here.
Please do not create posts like "i agree" "i second this" etc here, they will be deleted. this thread should become a list of ressources and step by step instructions at which we can point people when they have problems.
what we could use here:
- urls to anti spy/malware software
- how to recognize whether you have been "infected"
- precautions to avoid infection
- what to do when you are infected (step by step)
- common malware remove instructions

[edit]
and NO "get a mac posts" (also no "get linux posts" if somebody wants to describe how to troubleshoot problems using a LIVE CD that would be OK though)

[ozguy]

I've tried all the free anti-spyware tools out there (ad-aware, spybot etc) and none even come close to Spyware Doctor. It's not free (not too expensive for a twelve month subscription, though) but it's the best and easiest anti-spyware tool I've ever used.

Spyware Doctor

[noelie]

- urls to anti spy/malware software

Spyware Doctor

AVG Anti-Spyware Free

Lavasoft Ad-Aware

Spyware Blaster

Spybot Search and Destroy

Windows Defender

HijackThis


- how to recognize whether you have been "infected"

Your browser crashes a lot (more than usual with IE)
Your home page is changed 'magically'
When you type in an address it takes forever to get there or it never comes up or it takes you to an 'alternative' website
You notice extra icons/toolbars on your browser
You notice your broadband router is active when you're not (sometimes this is normal)
Your whole system slows down and/or becomes unstable

- precautions to avoid infection

Never install anything that is offered from a popup window
Have at least a quick look at End User License Agreements (EULA) when installing software - especially freeware
Use the IE and Firefox popup blockers
Use the security settings of your browser or plugins/extensions to stop scripts running
Run your PC as a restricted user

How's that Corny?

someone else can take up the rest (and add more to mine if they want):
- what to do when you are infected (step by step)
- common malware remove instructions



I don't want to take over this thread but what if one of us takes everything and puts it together (acknowledges input) and we just make a sticky of a final agreed upon text?

[Corny]

I don't want to take over this thread but what if one of us takes everything and puts it together (acknowledges input) and we just make a sticky of a final agreed upon text?

that's what i had in mind

[noelie]

Your avatar frightens me

I'm not coming back

[noelie]

C'mon Provenlogic, Trawler69, T-Rexx and all other known and self-confessed gay geeks - give your 2c worth.

[neruda]

Isnt a Firefox browser still the best way to avoid being infected thogh?

[eastietop]

the combination of spybot and adaware worked well for me and they are both free.
microsoft windows defender beta is good too

[noelie]

I don't think Defender is beta any longer:

Windows Defender Version: 1.1.1593.0
Engine Version: 1.1.1904.0
Definition Version: 1.14.1941.7
Product ID:

For more information on Windows Defender and available support options, visit http://go.microsoft.com/fwlink/?LinkId=70604

[alister9669]

This link might be helpful. It gives a lot of information on How well the program works, how easy it is to use... etc...
http://anti-spyware-review.toptenreviews.com/

[provenlogic]

Well nolie u pretty much covered all the good antispyware tools out there. all i would add is that my faveorite is spybot search and destroy. i'll cut and paste my little how to post from the other thread later. right now i'm out roaming and using my new samsung blackjack pda phone to make this post. this thing is so cool!!! it runs windows mobile 5.0, and has 1mbps mobile broadband! anyway, sorry i hijacked for a sec.

[noelie]

Is that the i607?



Drool...I feel a hardon coming on...ahem...I mean YEAH KOOL FONE DUDE

[noelie]

Support JUB

Thread started by:
Corny

JUB Admin
Support JUB

December 26th, 2006, 12:19 PM

So you have Spy/Ad/Malware - what to do now?

Spy/Ad/Malware is a very re-occurring topic here. Instead of spreading all the links, advice and knowledge across multiple threads, let's create a compendium of helpful resources here.
Please do not create posts like "i agree" "i second this" etc here, they will be deleted. this thread should become a list of resources and step by step instructions at which we can point people when they have problems.
what we could use here:
- urls to anti spy/malware software
- how to recognize whether you have been "infected"
- precautions to avoid infection
- what to do when you are infected (step by step)
- common malware remove instructions

[edit]
and NO "get a Mac posts" (also no "get linux posts" if somebody wants to describe how to troubleshoot problems using a LIVE CD that would be OK though)


Contributors: ozguy, noelie, neruda, eastietop, alister9669, provenlogic

Urls to anti spy/malware software

Spyware Doctor

AVG Anti-Spyware Free

Lavasoft Ad-Aware

Spyware Blaster

Spybot Search and Destroy

Windows Defender

HijackThis

How to recognize whether you have been "infected"

• Your browser crashes a lot
• Your home page is changed 'magically'
• When you type in an address it takes forever to get there or it never comes up or it takes you to an 'alternative' website
• You notice extra icons/toolbars on your browser
• You notice your broadband router is active when you're not (sometimes this is normal)
• Your whole system slows down and/or becomes unstable

Precautions to avoid infection

• Never install anything that is offered from a popup window.
• Don't just click on YES or OK on pop ups on the web.
• Have at least a quick look at End User License Agreements (EULA) when installing software - especially freeware.
• Use the IE and Firefox popup blockers.
• Use the security settings of your browser or plugins/extensions to stop scripts running.
• Run your PC as a restricted user.
• Use Firefox – it’s a lot less vulnerable than IE6 or 7.

What to do when you are infected (step by step)

• Google it!
• Google your symptoms, pay very careful attention to the behaviour of your browser and PC.
• Take note of the websites you’re being taken to that you didn’t request.
• Take careful note of any persistent pop up windows.
• Take note of any new toolbars or buttons on your browser.

Common malware removal instructions

There are none.

Usually a combination of anti-spyware programs will ‘cure what ails you’.

Sometimes the particular infestation you have will need particular attention as unscrupulous programmers and coders keep up with their nemesis.
Use the step above if you don't seem to be able to get rid of it or solve your problems.



Ad-Aware (both free and paid-for versions)

When you install Ad-Aware and run it the first time it will probably tell you that your definitions are out of date – update them immediately.

Definitions: Used by both Antivirus and Antispyware makers – they’re instructions given to the application that tell it what to look for and how to find it and remove it.





Click on Connect



Click on OK



Go ahead and scan your system



When you first start using these programs you should do a Full System Scan


Ad-Aware running



At the end of the scan it will show you what it has found – Click Next


Click OK
Do another pass – check for updates – full scan.

Microsoft Windows Defender (free - genuine Windows check required)



A pretty simple tool.

Download it – Install it – Run it - Update it – Use it.

It offers to do most of the work for you.




SpyBot Search and Destroy (free)



Download it - Install it - Run it - Search for updates.







Immunize



IMPORTANT: Only in this case are the red entries to the left not an issue - specifically tracking cookies - if there are any other warnings there they must be taken seriously.
It will usually do no harm to go ahead and fix everything but if you want to be sure come back here and post a screenshot for us to see (unless it's too embarrassing).

Spyware Blaster (free) - this program is recognised by SpyBot and the two work together quite well.



Download it - Install it - Run it - Update it





Enable All Protection

Webroot Spy Sweeper



Download it - Install it - Update it - Sweep with it.

Noelie.

Support JUB

[provenlogic]

Is that the i607?

Drool...I feel a hardon coming on...ahem...I mean YEAH KOOL FONE DUDE

HEHE that's the one . It was my christmas gift from my mom . I've already surfed for porn with it! it's awesome, love it. And we have 3G (mobile broadband) coverage in my area, so downloads are super fast, they even beat out landline DSL!

And the pics on the webpage don't do it justice! It's shorter than a (opened) RAZR, as thin as a (Closed) RAZR, and weighs exactly the same as a RAZR. The screen is amazing, super bright, awesome contrast, i'm even gonna install my mobile slingbox software on it so i can watch digital cable on it anywhere in the world!

[provenlogic]

Noelie has pretty much covered everything you could possibly need to know about spyware removal tools, including Spybot. I would just stress that whatever you choose to use, remember to keep it updated!!! And use any blocking feature the software has! Why scan and remove tons of spyware when you could have blocked it from downloading in the first place?

[Corny]

*any* blocking feature? hmm this could become a problem when you are using more than one. that is prone to cause trouble when two softwares block the same things and get in each others way ..

[noelie]

That's right Corny.

You should never use two Anti Virus programs at the same time as they will make you system unstable and extremely slow.

Likewise you shouldn't really have too many 'real-time' (running live) systems of defence. Anti-spyware software, depending on which one you use and the settings you have chosen, will interupt your browsing quite a lot and if you use more than one to give you real-time protection it's likely to make your browser crash or cause various problems with the appearance of web pages.

If you're not sure stick with only running one piece of real-time software at a time and have the others installed and kept up to date but not running real-time and use them as a backup.

But as Provenlogic says if you're a high-risk PC user you definitely should have real-time protection on all the time (just not more than one).