Friday, September 7, 2007

Step 2 - Spyware

Spyware "Hidden software that gathers information about a computer user without the user's knowledge or informed consent, and then transmits this information to an external entity. This also includes Malware products which perform the delivery of unrequested advertising (Pop-ups in particular), re-routing page requests to illegally claim commercial site referral fees, and installing stealth phone dialers."

SPYWARE CLEANING- The following free scanners will remove 99% of known Spyware. Ad-aware, Spybot - Search and Destroy and Microsoft AntiSpyware should be updated weekly. CCleaner (cleaner button - windows tab only) should always be run first to save on scanning time. Tough to remove Spyware requires a more thorough scan in Safe Mode.

CCleaner - Download - CCleaner (Crap Cleaner) removes unused and temporary files from your system, including cleaning the registry.
Instructions - Go to the "Windows" tab, uncheck "Old Prefetch Data" then select "Run Cleaner". Next select the "Applications" tab and select "Run Cleaner". Finally select the "Issues" button and select "Scan for Issues" when it finishes scanning select "Fix Selected Issues", then "Fix All Selected Issues".
Warning - Recently CCleaner has added a performance slowing cleaning option, cleaning "Old Prefetch Data". Cleaning the Prefetch folder is a Myth and actually hurts performance. Do not select this option for cleaning as it will increase application and Windows load times. I have contacted the makers of CCleaner unsuccessfully and have had subsequent topics brought up on their forums locked or deleted. For such a great program to turn a blind eye towards its users is unacceptable. I look forward to the makers of CCleaner to rectify this situation.

CWShredder 2.x - Download - Home PageCoolWebSearch is one of the worst Spyware infections. The latest variants use a Hidden DLL that is installed by taking over the file system's data stream and stealthing the DLL file. Some AntiVirus programs will detect and clean it from memory but as soon as your system is rebooted and another Internet connection made, it will reinstall itself. CWShredder 2.x removes this variant.
Instructions - Download, close all web browsers and run, select "Fix" and "OK". After it is finished select "Next" to see if you were infected. Run CWShredder again to confirm all known variants of CoolWebSearch have been removed.

SPYWARE PROTECTION -The following steps will provide protection from future Spyware infection. Spybot's immunize feature should be run anytime the definitions are updated. SpywareBlaster should be updated Monthly. MSJVM removal will only have to be performed once. Check for Sun Java Updates every few Months.

No comments: