Talk:Malware Removal and Prevention: Introduction

From CastleCopsWiki

Copied from the Securing Your Computer: series. --Ikester 22:48, 6 November 2005 (EST)

Contents 1 Purpose of Introduction page 2 Question 3 Changes 4 HIPS Question 5 German Version 6 "Free software disclaimer 7 "Print this page"

[edit] Purpose of Introduction page

What is the pupose of the introduction? I am concerned that it could scare inexperienced users. It goes on about HJT without defining it in a clear way. --User:Wynne-R 16:58, 14 November 2005 (EST)

Thanks for adding your sig and the header. I was about to ask for your sig but you beat me to it.  :)

The Intro is of course intended to introduce the reader to the malware removal and prevention procedure. Many (most?) visitors come to CastleCops knowing something about HJT and wanting to post their logs -- often placing them in the wrong places.

In any event, perhaps the current intro could use some refinement. What would you suggest?

--Ikester 19:59, 14 November 2005 (EST)

Hi Ike, that was me. I made those modifications. /me runs --Paul 10:23, 15 November 2005 (EST)

Actually, I do think a mod to the intro is called for considering that many users are now using MRP not only as a HJT preliminary scanning system but as a means of cleaning their systems of malware or even just to do a preventative check. I ran into an MS-AS poster who was just doing a checkup. As trials have shown, we can no longer assume their ultimate goal in performing it, is to post a log. I think we need to address that group of users because it is now written from the perspective that anyone that arrives here has an infected computer and they are solely performing it as a prerequisite to posting on the HJT forum, which is not necessarily the case. So what would you suggest, Wynne?--Negster22 02:44, 15 November 2005 (EST)

I would eliminate the intro. What is the purpose of the preliminary HJT scan, anyway? It seems to me the malware procedure is relatively benign and HJT should be the last resort. --Wynne 16:17, 17 November 2005 (EST)

IMO the intro is needed for those who come to this procedure from who knows where. But I agree it should be modified to accomodate those whose prime focus is not to post a HJT log but to fix a malware infestation. Of course tougher cases will need to be examined by CCSP experts and that would require a HJT log ... actually two logs; the first a record of what state the computer was in before any automated scan changes were made and the second capturing what remains. Due to certain automated removal tool interactions, it is important to have a record of the initial condition and that can only be captured before any changes are made. --Ikester 23:24, 17 November 2005 (EST)

Any way to make the link to the Overview a little more prominent for those who may skim through looking for how to start the procedure? When I first glanced at this, I didn't know what to do. I thought about posting a link to Itro and Overview to the user, then I found the link to overview at the end. --nfntjy 23:44, 17 December 2006 (EST)

The dilemma is that convenience has to be balanced against effectiveness. The fear is that if the Overview link is given too soon, those who should read this page completely will skip right through and be confused with the process. How would you resolve that dilemma? --Ikester 00:31, 18 December 2006 (EST)

I tried to make the link to the Overview more prominent putting NOW, LET'S GET STARTED! in all caps and in red text.--Negster22 13:51, 12 June 2007 (EDT)

Added an arrow icon to further highlight the link to the Overview.--Negster22 14:23, 12 June 2007 (EDT)

[edit] Question

OK, I wrote something, what do I do with it? This software is new to me. At least I figured out the signature.--Wynne 01:42, 18 November 2005 (EST)

Where is the stuff you wrote? --Ikester 00:11, 19 November 2005 (EST)

Where do you want it? Do I put it in discussion?--Wynne 18:28, 22 November 2005 (EST)

You could just create a page under your user space, for instance: User:Wynne-R/MRP_Proposed_Intro. Just reference it here so interested parties can check it out. --Ikester 22:59, 22 November 2005 (EST)

Here you go User:Wynne-R/MRP_Proposed_Intro --Wynne 18:31, 25 November 2005 (EST)

[edit] Changes

Added printer icon to intro. --Negster22 21:16, 18 November 2005 (EST)

Is it really that important for the user to have a printed copy of this page? --Ikester 01:13, 25 November 2005 (EST)

I changed the intro to encompass the different reasons why people may have arrived at MRP. I also made it look somewhat less foreboding. I made a couple of other changes to explain HJT and what it can and cannot do, to provide users with an extra incentive for completing all the suggested scans--Negster22 23:32, 24 November 2005 (EST)

I waved my editor's wand again.  :) Changes were made to keep it personal between the process user (you) and the staff (we). I also expanded on the need for feedback (both good and bad) and not to hold back asking for help with the instructions. --Ikester 01:13, 25 November 2005 (EST)

This version sounds much better than the original one. There was always something I didn't like about the prior version. Now I am satified.--Negster22 01:42, 25 November 2005 (EST)

I made the Malware Prevention section ref a clickable link to give more exposure to that part of MRP--Negster22 02:02, 25 November 2005 (EST)

Excellent! I was thinking of doing so but wasn't sure how that would be received.  :) Also, see my question above re: printing out this page. --Ikester 09:34, 25 November 2005 (EST)

Less scary and more readable. Definite improvement--Wynne 18:31, 25 November 2005 (EST)

Thanks, Wynne. We took your comments into consideration and amended it into an improved version which we all like better. We did realized it needed to be updated as the user base has expanded, but your input definitely had an influence on it, for the better.--Negster22 00:18, 26 November 2005 (EST)
Used some coloring for definition.--Negster22 22:33, 24 January 2006 (EST)

[edit] HIPS Question

There is almost none the HIPS suggestions to be really prevented from being protected from the malware. I have my own DefenseWall HIPS malware protection, it is simple, easy-to-use and strong. Is there something I should do to be added into MPR suggestion list? Thanks in advize. --Ilya Rabinovich 02:56, 11 December 2005 (EST)

Hi Ilya, I have been following the DefenseWall discussion, I haven't installed it yet. Why don't you PM Ikester ? I don't think these discussions get checked very often.--Wynne 18:36, 14 December 2005 (EST)

[edit] German Version

Okay folks, I'm getting ready to translate this whole thing and add it to CCde's wiki page. Paul just needs to decide if I get a de.wiki.castlecops.com. God that's a mouthful! Anyway - any help will be greatly appreciated.--Mrrockford 07:51, 24 December 2005 (EST)

Oh, I almost forgot - Merry Christmas!

Merry Christmas to all! --Paul 10:26, 24 December 2005 (EST)

[edit] "Free software disclaimer

Added a "free software" disclaimer. --Ikester 12:23, 9 January 2006 (EST)

[edit] "Print this page"

Removed the suggestion to print this page since I doubt users need it as a reference. --Ikester 12:23, 9 January 2006 (EST)