If geeks love it, we’re on it

Icrontic’s final word on spyware removal

Icrontic’s final word on spyware removal

Malware: Malicious software

Icrontic has long been a safe haven on the web for the fight against malware. For years, dedicated members have given personalized help to users who needed to remove malware infections. However, times have changed, and in order to help our staff focus on the ever-evolving nature of our community, we are closing our malware help forum. We’re not about to leave anyone high and dry in the battle against malware, though. We believe that teaching someone to fish is more valuable than just handing over a single fish. This article will lay out some basic guidelines you can apply to combat your own malware infections.

First steps

It’s important to remember that malware doesn’t just install itself on your PC when you’re not looking. It takes user interaction with the computer to get infected. Your behavior on the web is the key to minimizing the threat of malware.

Malware can rob your computer of performance, and introduces many privacy concerns. If poor system performance is the only symptom, your problem may not be malware. Make sure your operating system is updated, uninstall any unused software, and if you have a traditional mechanical hard drive, run a disk defragmenter. If you have fifty programs running in your system notification tray and they all launch at startup, that’s a good indication as to why your PC is slow.

Modern malware is employing more and more tricks and techniques that were formerly the exclusive domain of viruses. Malware has been known to modify your PC’s hosts file to cause web page redirection you’ll never be aware of, it can rename itself when it’s been deleted and come back as soon as you restart your PC, and sometimes it hides behind the name of legitimate software to make you think it’s not malware. Some malware programs even advertise themselves on the web by claiming your PC is infected, tricking you into installing them under the guise of helping to clean an infection.

Cleaning it up

With a set of features this insidious, we need an arsenal of software to clean up the worst infections. The best recommended programs for cleanup change as frequently as the malware scene, but these are Icrontic’s current recommendations.

The currently recommended ‘best’ removal software is Malwarebytes’ Anti-Malware. The software is regularly updated and maintained, and offers a free edition that will scan and clean your computer. For a fee, you can upgrade to a version with realtime protection and scheduled scanning, but this is not necessary for cleaning a single infection.  For up-to-date instructions on the use of the program, visit the linked website and follow the instructions. Be aware that some malware actually comes from supposed ‘free’ removal software, so make sure you stick to the recommendations when you use such programs.

You may have observed the use of specialized tools like HijackThis and ComboFix both in forums and elsewhere. However if you’re not intricately familiar with how your machine and the tool in question works, it is recommended that you use them only under the guidance of a malware removal professional. Not only can you potentially harm your PC by accidentally removing necessary system files, clever malware can also masquerade as legitimate system software and escape detection by the uninitiated. ComboFix may even render your system unbootable in some cases and would require the help of a professional trained in its use to restore your PC to its original state. Several sites do this full time and will guide you through ComboFix; again, we do not recommend you use it yourself as you can completely destroy your Windows installation with it. If you want to use ComboFix or need the guidance of an expert, we can recommend two Icrontic alumni-owned sites: Battlevirus and BleepingComputer.

Another option (and the one we recommend in most cases) is a complete reformat of your machine and reinstallation of your operating system. This is actually the only way to be sure you’ve completely removed any malware infection on your PC. If you decide to reformat your machine, it is absolutely critical that you back up all of your data first, as you will lose everything on your hard drive during the process. Icrontic has a published guide for XP reinstallation, and you can visit our forums for advice and guidance on installing other operating systems. Most of our experts agree that it is often easier and faster to backup, reformat, and reinstall than it is to remove a stubborn malware infection from your current installation.

The aftermath

After you’ve cleaned up your infected machine, it’s time to think about what got you there in the first place. As I mentioned previously, your usage pattern is the key to remaining malware-free.

While it is certainly necessary to maintain active protection against malware and viruses (I personally use and recommend Microsoft Security Essentials), simply having a scanner is not a guarantee. Theft of personal data by phishing, malware, and other means is one of the fastest growing crimes only because we allow it to happen. While you’re using your PC, exercise the same common sense you would use when a telemarketer calls you during dinner.

One simple behavior change you can make that could save you from some headache is to actually read the popup warnings that appear on your screen. Don’t just click the “OK” button so you can go about your day; you just might be approving your next malware installation. Think through the following decisions before you approve: Does the warning appear legitimate? Did you initiate the operation? Do you trust the software making the request? If the answer to any of these is ‘no’ the only logical answer is to not approve the installation.

UAC Prompt

This is a legitimate Windows security notification.

Not a legitimate notification.

This is not.

Not all malware infections come from direct approval by the user. All browsers contain some security vulnerabilities. As these vulnerabilities are discovered, the browser developers release updates that contain fixes. It’s very important to keep your browser of choice up to date.

Whenever you get a warning from Microsoft Windows, Firefox, Google Chrome, Java, Acrobat, or any other software you legitimately use that tells you about an update, do it. All too often people simply click “no” or “later” because they don’t want to be bothered with the wait involved with updating. Updating your software is critical in the fight against malware.

You don’t have to be paranoid about everything you do on your computer, but don’t be stupid either. Use your brain when you surf the web, don’t use the web as your brain. Remember the old adage: if it looks too good to be true, it is. There is no free laptop, iPod, etc. The Nigerian Princess-in-exile who so desperately needs your help is not a princess at all, and you’ll never see that ten million dollars.

For more PC help from some of the coolest people in the world, why not visit Icrontic’s forum?

You may have observed the use of specialized tools like HijackThis and ComboFix both in forums and elsewhere. However if you’re not intricately familiar with how your machine and the tool in question works, it is recommended that you use them only under the guidance of a malware removal professional. Not only can you potentially harm your PC by accidentally removing necessary system files, clever malware can also masquerade as legitimate system software and escape detection by the uninitiated. ComboFix may even render your system unbootable in some cases and would require the help of a professional trained in its use to restore your PC to its original state.”

Comments

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!