Malware/Spyware Removal Guide

Vindiesel

Thank you to everyone who has posted. Great help that was much needed.

cheers

V

pursestring

Here's an excellent site about spyware and malware removal and prevention:

http://www.spywarewarrior.com

There's loads of information right from the basics to advanced.

Hope you find this useful.

pursestring

Sorry, didn't see somebody has already recommended this site.

Well, all the better.

Jake'sGran

Afew years ago I did have a virus on my computer and the best advice I got was from one of the geniuses on the forum "Computer" on general usenet.

His name was Thor and although he was so clever and built computers for a living he was always very kind a patient with me. He gave me clear instructions on how to get rid of the virus or he told me which site to use to get the free download tool to do it.

These days a firewall comes with my server's system and I have a lot of free downloads. AVG is excellent and I have Spamihlator and Bigfix. so far, so good.

bbb_uk

I'm not sure if this is mentioned in this thread (I did search this specific thread though) but for those stubborn spyware/malware that are "in use" and refuse to be deleted even in "safe mode" then I use The Avenger (scroll down to 'The Tools' section and it is the first tool - or download directly here). Excerpt taken from the owners website:-

The Avenger – a full-scriptable, kernel-level driver designed to remove highly persistent files and registry keys/values protected by entrenched malware. It works ONLY for Windows 2000 and XP.

See here for Usage and release notes.

I've used this software several times to remove really stubborn spyware/malware files that can't be deleted by normal methods - handy for those spyware/malware that can even load itself in safe mode thereby preventing the offending file from being deleted as it is still in use.

I find it relatively easy to use.

bargainboy

well i am very new to this as the Browntoa will know, so I am taking a great interest in this thread I have just went through a whole weekend almost of removing infections and repairing faults with my laptop. and without the hepl of the experts on here i would have taken to PC world paid ££££'s and learned nothing. instead I spent £0000 learnt loads and i now have a new interest. lots of different opinions and ways of doing things but if you know what you are doing then all the easier. this is a top post.
also think Alfonso should get involved a very knowledgable person

icklejulez

This option doesnt appear

'In Services, click the "Extended tab" and scroll down the list to find ewido anti-spyware 4.0 guard.'

what now?

Antony28

If anyone could help me I would be really grateful because I do not have a much in depth knowledge of computers.

My PC has got infected with "Malware" and when I open my internet explorer my home page has changed and it takes me to some sort of site that is trying to sell my an anti-virus software.

My PC is currently protected by AVG(free version), Ad-aware and ccleaner and I ran all these programmes straight away but it did not get rid of the virus.
Before I found this thread I looked in the computers help centre and I noticed a some information that said you can put your computer back to a date in the past (think it was called a "system restore point") I did this and it appears to have got rid of the "Malware" virus. My internet explorer opens up to the normal home page and I did a search and could not find any files or folders on my computer with the "Malware" in them.

I have solved the my problem by putting my computer back to a date in the past? or will the Malware still be hiding somewhere in my hard drive?
If I haven't got rid of it properly then do I need to do the instructions on page one of this thread?

Thanks in advance for any response.

Antony

Micdoh

Having big problems with spyware this weekend. Kaspersky identifies it as this http://www.viruslist.com/en/search?VN=Trojan-Downloader.Win32.Zlob.akn but can't delete it. Got one last night with AVG scan but this one seems more malicious

Browntoa

follow the posts 1 to 4 in this thread insafe mode, if you still have problems then start a new thread about your problem