We have been down for nearly a week as a result of a DDoS. We needed to switch providers. We apologize for any inconvenience this may have caused.
There may be some bugs which occur as a result of the move. Please let us know if you find any.
Thank you --Robin 21:14, 15 July 2008 (UTC)
Malware Removal and Prevention: Overview
From CastleCopsWiki
With the basic understanding of why you have decided to undertake this procedure (as explained in the Introduction), we have designed the following Malware Removal and Prevention procedure. This procedure consists of several malware steps that should be performed in sequence, followed by instructions how to post a HJT log should it be required. It concludes with prevention measures you can implement to properly maintain a secure system.
Please follow the instructions listed below. If you find you are still experiencing computer problems after these steps are completed, you may then post a HJT log and receive expert assistance in cleaning any infections which remain.
Please print out a copy of this overview and use it to check off each step as it is completed.
Save this 'checklist' of removal programs you have run, because we will be asking you to provide us with that information when it comes time to post a HijackThis log. Good Luck!
Perform a reference (preliminary) HijackThis scan
- Winfixer / WinAntiSpyware / WinAntiVirus Popups / Virtumundo victims only (Unsure? - then proceed to Step 4):
Please follow the Virtumundo Removal Instructions for all versions of Windows including Vista.
- Windows 2K/XP/Vista - Intrusive and fake "antispyware" programs such as Privacy Protector / AntiVirGear / SpyLocked / VirusBurst(er(s)) / SpyFalcon / SpyAxe victims only (Unsure? - then proceed to Step 4):
Please follow the Smitfraud Removal Instructions instead of steps 4-8 below.
- Next stop -
The Control Panel - Add/Remove Programs
Temporarily Disable Real Time Monitoring Programs
Now please complete the following automatic malware detection and removal steps
After you have installed the scanning programs listed below, please be sure to update them. A security program is only effective if it updated with the latest definitions. Updating will help provide protection against the most recently introduced security threats.
- Clean the Clutter:
CCleaner (All versions of Windows including Vista)
ATF Cleaner (Win 98/ME/2K/XP and Vista)
- Antispyware Scanners - Run at least one, preferably two - if your system is functioning well enough:
Ad-Aware (Win 98/Me/NT/2000/XP/Vista)
SpyBot S&D (Win 95, 98, ME, 2K, XP, 2003, PE, Vista)
Windows Defender (Win XP SP2, Win 2003 SP1+, Vista)
SUPERAntiSpyware (Win 98, ME, 2K, XP, 2003, Vista)
Antiviral Scans - Run at least one
- AntiTrojan Scans - Run one:
Malwarebytes' Anti-Malware (Win2K, XP, 2003 and Vista)
AVG Anti-Spyware (formerly ewido) (Win2K, XP and Vista)
TrojanHunter (Win 98, ME, 2K, XP, 2003, and Vista)
You will have completed the automated malware removal process once you have followed the above steps. We sincerely hope that your computer problems have been resolved to your satisfaction once you've reached this point. Even if you think your computer is now 'clean', some additional steps are advisable to further ensure the security of your computer.
Please consult:
How to Prevent Reinfection for further details.
- Only if your computer problems persist,
Consider Getting Expert Help With Your HijackThis Log - How to submit a post to HijackThis Forum for review by the CastleCops HJT staff.
The series was developed as the key deliverable of the Cleaning Malware Project. |
| Malware Removal and Prevention Overview |
| Malware Prevention |
| edit this template |
