Securing a Personal Machine
http://safecomputing.umn.edu/studentchecklist.html
OS Reinstallation vs. Virus Removal
http://safecomputing.umn.edu/guides/rebuild_repair.html
If you follow all the following steps it should get rid of your problem and prevent future problems. All programs listed are free.
------------------------------
Update your Full Time (Active) antivirus and run a full scan.
If you do not have active virus protection, install only one. All are excellent.
Try AVG first.
AVG Antivirus 7.5 Free Edition
http://free.grisoft.com/freeweb.php/doc/avg-anti-virus-free/lng/us/tpl/v5
http://www.download.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10669237.html?tag=lst-0-1
or
Free antivirus - avast! 4 Home Edition
http://www.avast.com/eng/avast_4_home.html
---------------------------------------------------------
Update your Full Time (Active) spyware protection and run a full scan. If you do not have active spyware protection, install:
Windows Defender
http://www.microsoft.com/athome/security/spyware/software/default.mspx
---------------------------------------------------------
Install the following four programs and run weekly or at least monthly. You need all four. They are not a substitute for full time spyware and virus protection. They will greatly increase your protection. Install and run now.
Ad-Aware SE Personal (update + full scan)
http://www.lavasoftusa.com/products/ad-aware_se_personal.php
Spybot Search & Destroy (update + immunize + scan)
Do not enable Tea Timer and SDHelper
After installation: update + scan + immunize
http://www.safer-networking.org/en/mirrors/index.html
SpywareBlaster: Update then open and click “enable all protection”.
http://www.javacoolsoftware.com/spywareblaster.html
SUPERAntiSpyware free version: (update + scan)
http://www.superantispyware.com/
------------------------------
Install:
CCleaner:
http://www.ccleaner.com/
Do not install optional toolbar.
Removes tracking cookies, unneeded files, history
In options.
Set to run when computer starts.
Place cookies you want to keep in save list
-------------------------------------------------
Install either one not both:
McAfee Site Advisor: Internet Explorer and Firefox
http://www.siteadvisor.com/
McAfee SiteAdvisor helps protect you from all kinds of Web-based security threats including spyware, adware, spam, viruses, browser exploits, and online scams.
TrendProtect™
http://www.trendsecure.com/portal/en-US/free_security_tools/trendprotect.php
TrendProtect is a FREE browser plug-in that helps you avoid Web pages with unwanted content and hidden threats.
--------------------------------
Note if a scan detects a problem but is unable to remove, start the computer in safe mode with the internet line disconnected and run a full scan.
In severe cases your system restore files will also be infected. In these cases you will need to turn off system restore to prevent malware hiding in the system restore files and reinfecting the computer during removal or during a future system restore. Turning off system restore deletes the system restore files.
Right click on "my computer"> Properties > System Restore Tab > Check box turn of system restore
After the malware is removed turn on system restore.
------------------------------
Run this time only:
CWShredder: run
http://www.trendmicro.com/cwshredder/
Roguefix.bat
http://www.internetinspiration.co.uk/roguefix.htm
Shoot The Messenger
http://www.grc.com/stm/shootthemessenger.htm
SmitFraudFix
http://www.geekstogo.com/forum/How_to_use_SmitFraudFix-t109268.html
Vundo Fix and
VirtumundoBegone (if VundoFix does not work)
http://www.bleepingcomputer.com/forums/topic18610.html
VX2 tool for Ad-Aware and run tool (Install and run)
http://www.lavasoftusa.com/support/securitycenter/vx2_cleaner.php
------------------------------
Run this time and monthly:
Microsoft Update:
Run in "Custom Mode". Install everything, reboot and repeat until nothing is left to install.
http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us
Microsoft OneCare Live, run “full service scan”
Updates windows, virus and spyware scan, disk cleanup, disk fragmentation (if needed), backs up registry and then cleans registry, and checks for open firewall ports
http://onecare.live.com/site/en-us/default.htm
Malicious Software Removal Tool (run “full scan”)
http://www.microsoft.com/security/malwareremove/default.mspx
------------------------------
Rootkits Removers
Pick any 2 install and run one each month.
AVG Anti-Rootkit
http://www.grisoft.com/doc/products-avg-anti-rootkit-update-app-art/?ver=1.1.0.29
F-Secure BlackLight
http://www.f-secure.com/blacklight/
Panda Anti-Rootkit
http://www.pandasoftware.com/products/antirootkit/
Sophos Anti-Rootkit
http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html
------------------------------
Online Free Scanners:
Run Trend Micro, Kaspersky, and Panda Scan now.
Run a different one each month.
Avast! Online Scanner
http://onlinescan.avast.com/
BitDefender Online Scanner
http://www.bitdefender.com/scan8/ie.html
CA eTrust® PestScan
http://pestpatrol.com/pestscan/index.htm
eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
F-Secure Online Virus Scanner
http://support.f-secure.com/enu/home/ols.shtml
Kaspersky - Free Online Virus Scan
http://www.kaspersky.com/virusscanner
McAfee - Free Scan
http://us.mcafee.com/root/mfs
Panda Software - ActiveScan
http://www.pandasoftware.com/activescan/activescan/ascan_2.asp
Symantec (norton) - Security Check
http://security.symantec.com/sscv6/default.asp
Trend Micro™ HouseCall
http://www.trendmicro.com/hc_intro/default.asp
------------------------------
Additional Information:
http://www.techsupportforum.com/security-center/hijackthis-log-help/15968-updated-important-read-before-posting-log.html
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview
http://wiki.castlecops.com/Malware_Prevention:_Prevent_Re-infection
http://aumha.org/a/quickfix.htm
http://aumha.org/secure.htm
http://aumha.org/a/parasite.php
http://www.castlecops.com/t102301-Hijackthis_Guidelines_Read_Before_Posting.html
http://forum.aumha.org/viewtopic.php?t=4075&sid=901703d08c2ace31389ffef2d84b6607