HOWTO: Remove Spyware/Malware/Adware etc

Over the past couple years I have gained a skill and a passion for killing CRAP on people's computer; one because it's been part of my job and two because I hate something being installed on my PC without my consent and wasting resources.

So here's a guide for you Windows folk who want to clean their PC up and not have a need for formatting.

1.) First thing is first: Internet Explorer -> Tools -> Advanced -> "UNCHECK" Enable Third Party Extensions

This will dis-allow those crap'tacular built in search bars such as MySearch, Lycos, etc. All these bars do is create popups and are being run for data mining purposes to record and send out to webservers what kind of browsing you do. ALTHOUGH I highly recommend using the Google Toolbar as it is legit and has one of the better built in pop up blockers out there. You can download the free toolbar here - http://toolbar.google.com/

*Be sure to do all of the critical Windows updates before this!*

2.) Download an Adware removal utility to remove what is currently on your PC.

I recommend both AdAware and Spybot to do this. You can download AdAware at www.lavasoftusa.com and Spy Bot at www.safer-networking.org. Before running these utilities PLEASE remember to update the programs as you would update your virus scanning definiitions.

3.) Remove startup programs

I choke when I see someone's system tray (The bottom right of your screen where the icons reside) and it's chuck full of crap. I especially love it when there are 15+ and people look at me saying that their computer has been running slow lately. ::backhand slap:: For Windows 98 SE, ME, and XP there is a handy utility called MSCONFIG which allows you to edit your startup programs so you can disable them.

Start -> Run -> Type in "msconfig" and hit Enter.

Click on the STARTUP tab on the upper right hand side of the window and UNCHECK all of the unnecesscary programs that you don't use. Make sure to leave your Virus scanning program checked though, you can tell where the file resides by looking at it's destination folder. If the file resides in a Mcafee, Symantec, Norton, etc folder then do not uncheck it or your virus scanning will not work. Get rid of files like Realplayer, Quicktime, and any other garbage that you don't 110% need. Remember, less programs starting up equals a faster computer and most likely less or no popups!

For Windows 2000 folk, you can google MSCONFIG for Windows 2000 and there is the file you can download which will give you this capability.

If you wish to remove those startup entires all together you can do so via the registry; here is how to do it. *NOTICE - The registry is critical to your computers operation, if you edit, create, or delete entries that you do not know their function; it may cause your PC to stop working! -NOTICE*

Start -> Run -> Type in "regedit" and hit enter

My Computer -> HKEY_LOCAL_MACHINE -> SOFTWARE -> MICROSOFT -> WINDOWS -> CURRENTVERSION - Run / RunOnce / RunOnceEx

In Run, delete all entries using the rules above (Do not remove virus scanning entries etc). This will stop programs from loading when your computer boots up and this is also the area where most malware allows itself to startup (Java scripts setting your home page etc) and cause headaches.

Another thing you guys could try... I have done this and it helps a lot. Editing your HOSTS file. Follow these steps:

- Download this file:
http://www.accs-net.com/hosts/Downloads/hosts0000.zip
- Perform a file search for "HOSTS" on your computer
- When it finds a file that's named "HOSTS" with no extension, you may stop the search.
- Open the file with WordPad and add all of the entries from the downloaded HOSTS file. Save and close.

You will begin to see, while browsing the web, that banner ads and similiar popups don't happe anymore because the "typical" ad websites are redirected to a local ip... hence they will not load.

Hope this helps some of you out there.

 

Very good info...thanks for sharing. I also recommend to people......enable your firewall in your IE, if its new enough. That makes a hole buncha difference. Closes out those ports so many bad things use to corrupt your stuff. Also only allows things to come in that fit the request of info you sent out.
I run Norton, Adaware, and my firewall. A good place I think to start out is Nortons, and check your system........... Heres a bunch of helpful places.
http://security.symantec.com/default...d=ie&venid=sym
http://rds.yahoo.com/S=2766679/K=ada...w.lavasoft.de/
http://www.bluekestrel.com/int_explor_setup.htm
http://www2.parismo.net/internet/internet_freeware.htm

 

with the kids surfing to barbie.com and neopets and who-knows-what, I had all kinds of parasites. Cleaned up with noadware. Using the freeware component takes awhile because you have to scroll through the registry deleting stuff, but I think I got it all.

I've been using the freeware firewall at zonelabs.com for a couple months now - it's got a good bit of functionality, and none of those pesky parasites are back.

 

Jtexas..just an FYI. Keep a close eye on the use of the Neopets website. My girls (10 and 13) were on one of the chat rooms there, and they got very disturbing responses from other users. Seems like some sick adults frequent the site. This site is now blocked from my home PC.

Robin

 

Good info! Will a router stop stuff from getting to your computer?

 

I do not think using a 502kb host file is a good way to go about security ...

 

Id advise against IE and use www.mozilla.org instead ..
It's faster, safer, better, and FREE !!!!!! :-)

 

hey i do that as a job too...fix the **** on peoples computers. Yo Slammer have you ever heard of Norton Systemworks??? That is some good software as well..WinDoctor found hundreds of problems on all computers ive worked on. All registry probs of course but one guy had 1642 ActiveX/Com registry problems!!!!

Good info for the n00bs, but im past that stuff.

 

I am an administrator for a living and the best thing I've found is a program called "SpyBot Search & Destroy". It is free right now and is on a Website that takes donations. You can find it here http://www.safer-networking.org/inde...&page=download

Norton system works doesn't take care of spyware, by the way. If you don't think you have any spyware on your computer download the program and you will be amazed. You will find out what really is and isn't spyware also. Anyone ever used comet cursor. Spyware. Just remember that most free things are usually never free.

 

Dude , i never said Systemworks take care of spyware. I knew that all along. If anything, its the other way around. Just taking care of spyware isnt taking care of your whole system. Thats like saying you will change the air filter in a car without changing the oil. What the hell good is it?

I have ad-aware 6 professional, paid $49.00 for it and its the bomb. i used spybot in the past and its found things that ad-aware doesnt but i like Ad-aware. BTW, the free version is still good and i use that when cleaning up clients' computers but i recommend them they purchase Professional. Some do and some dont. Most all of them have me back within a month for some other problem.

 

I just didn't want people getting the wrong idea since topic of this conversation is:

HOWTO: Remove Spyware/Malware/Adware etc


One awesome feature of spybot search & destroy is the immunize feature. It can silently block bad downloads and (pretty much) keep you free of further malware problems. Just make sure you update it to get the latest protection.

 

i just wanted to say thanks to all you guys for the information and help that you provide here on FTE on computers.

i'd like to put in a request for forum for comuter info and discussion's if anyone else is interested in doing this

 

Norton system works ? Emmmm , i don't use it anymore...
It don't really do that much you can't do yourself .
Also , i did a scan of my computer with it, found the usuall range of errors,including the obglitory registry errors, about 150 of them . So i "fixed" it ,ran it again , guess what still found "registry" errors !!!!!

If you have XP , all the tools you need are there .


Also Spybot is great , but it's not been updated at the moment, so run Ad-aware too ...