Wednesday, April 13, 2005

Spyware Removal Checklist

Spyware Removal Checklist

1. Boot into Safe Mode with Networking (some spyware can only be removed in Safe Mode).
2. Turn off System Restore in Windows XP/ME.
3. Open Add/Remove programs and remove any application that both you and the principal user do not recognize or deem to be spyware.
4. Install a licensed antivirus product; update and run it on the infected system. (i.e. AVG, NOD, etc.)
5. Install Spybot Search & Destroy. Update and run it on the infected system.
6. Install at least two licensed anti-spyware products such as Spy Sweeper, Microsoft Anti-Spyware, Pest Patrol and/or Ad-Aware. Update and run them on the infected system.
7. Launch HijackThis and click the 'Do a system scan and save a logfile' button. Copy and paste your HijackThis log into the textbox at this URL for analysis: http://www.hijackthis.de/index.php?%20langselect=english
8. Use HijackThis to remove anything in the Nasty category.
9. Reboot and run Spybot and commercial anti-spyware products until the system is clean. You may have to run more than one, but Spy Sweeper is my personal favorite.
10. Launch Internet Explorer and browse the Web to verify Winsock was not broken while removing spyware. If you cannot browse the Web, run the LSPfix utility and perform another Web test.
11. Turn on System Restore."

From Tech Republic forum posting at: http://techrepublic.com.com/5208-6230-0.html?forumID=4&threadID=171181&messageID=1743368

No comments: