Alan's Computer Tools

User Tools

Site Tools

Trace:
malware_and_spyware_tools

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
malware_and_spyware_tools [2025/06/17 01:52]
47.128.19.36 old revision restored (2025/03/14 19:06) 		malware_and_spyware_tools [2025/06/30 09:31] (current)
47.128.113.185 old revision restored (2025/04/27 08:57)
Line 6: Line 6:
  
 It is time to clean all of that stuff off. Now for a secret. This is what I do when I clean/tweek someone's computer at $50 an hour.\\ It is time to clean all of that stuff off. Now for a secret. This is what I do when I clean/tweek someone's computer at $50 an hour.\\
- 
-<fs 125%><color #CC0000>Click on any image to see a larger version.</color></fs> 
  
 ===== What does an Infected Computer Look Like? ===== ===== What does an Infected Computer Look Like? =====
-Unfortunately, most spyware does not have a "look I am bad for you" icon like this {{::d3vilz666.png?direct&30|}}.\\+Unfortunately, most spyware does not have a "look I am bad for you" icon like this {{::d3vilz666.png?direct&50|}}.\\
  
 It has very normal looking names and may in fact sound like a good thing to have, like "Speed up your computer." The only thing is, it doesn't. These are images from a computer I cleaned recently.\\ It has very normal looking names and may in fact sound like a good thing to have, like "Speed up your computer." The only thing is, it doesn't. These are images from a computer I cleaned recently.\\
Line 44: Line 42:
 It is going to be best if you copy all of these tools to the desktop on the infected computer. Then start WinPatrolToGo. It is an .exe and does not need to install. Your startup screen should look like this: It is going to be best if you copy all of these tools to the desktop on the infected computer. Then start WinPatrolToGo. It is an .exe and does not need to install. Your startup screen should look like this:
 {{::wp1.png?direct&200|}}\\ {{::wp1.png?direct&200|}}\\
-Look at your startup programs. This is a clean example. Look for things that start toolbars. If you see something that should not be on this list, make a note of it, but do not Remove it right now. Next look at the Active Tasks. Once again, right now we are looking for information. After you have written down the information on an active task and determined it should not be running, you can kill it. **NOTE:** Some viruses cannot be stopped with this tool.  +Look at your startup programs. This is a clean example. Look for things that start toolbars. If you see something that should not be on this list, make a note of it, but do not Remove it. Next look at the Active Tasks. Once again, right now we are looking for information. After you have written down the information on an active task and determined it should not be running, you can kill it. **NOTE:** Some viruses cannot be stopped with this tool.  
-\\ +{{::wp2.png?direct&200|}}\\
-This is the same screen from an infected computer. {{::highlighted_1.png?direct&100|}} Unfortunetly WinPatrolToGo does not highlight the bad stuff as I have in this image. +
-{{::wp2.png?direct&100|}}\\ +
-\\+
 You want the path information on the info page. "C:\program files\vmware\wmaretools\vmtoolsd.exe" in this case. VMWare tools is not a virus.\\ You want the path information on the info page. "C:\program files\vmware\wmaretools\vmtoolsd.exe" in this case. VMWare tools is not a virus.\\
-Now look at the IE Helpers. Kill off ones for tool bars. Especially AVG or other Anti-virus tool bars. +Now look at the IE Helpers. Kill off ones for tool bars. Especially AVG or other Anti-virus tool bars. 
-\\ +
-==== Cleaning with Revo Uninstaller ==== +
-The [[http://www.revouninstaller.com/revo_uninstaller_free_download.html|Revo Uninstaller]] is one of my favorite tools. It is the first thing I install on a new computer to remove the junk that comes "free" out of the box. It works better than the Microsoft provided Add/Remove programs tool that is part of Windows. Install and start Revo Uninstaller.\\ +
-{{::highlighted_2.png?direct&200|}} This is the main Revo screen for the same computer as the WinPatrol screen above. See the highlighted programs? Those are our targets. For each program, click on the program in the list and click on remove. You want the moderate level of removal. Just follow the next buttons. The first step is running the program's uninstaller. <color #FFA500>What a surprise!</color> the built in uninstaller doesn't do much to really uninstall the software.\\+
  
-The next step cleans the registry(([[http://windows.microsoft.com/en-us/windows-vista/what-is-the-registry]]. A thousand or so lines of settings for everything on a Windows computer. Both a blessing and a curse.)). The final step removes the no longer needed files. Unfortuneteley, you need to run each program individually.  
-\\ 
-Should I remove it? 
-\\ 
-If you don't know what a program on the Revo list is, right click on it. It will open a search for that program. Hewlett-Packard printers install a bunch of things you don't need, but they need to stay. Never heard of Bonjour Service? No problem it is a part of Apple. If you have iTunes, QuickTime, or an iPhone, you need Bonjour. Some things to look out for are Torrent clients,  
-After you have removed the offending programs, restart your computer and then restart Revo. 
-\\ 
-==== Next ==== 
-The next tool to run is  
  
  
malware_and_spyware_tools.1750150344.txt.gz · Last modified: 2025/06/17 01:52 by 47.128.19.36

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International
CC Attribution-Noncommercial-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki