Four Step Defense Against Spyware and Parasites

Let me spoil the secrët before you even read the article!

The steps are:

1. Install a good anti-virus program.
2. Install Spybot Search and Destroy.
3. Install Microsoft Anti-Spyware.
4. Keep everything up to date!

Can it really be that simple? YES!!!

How do I know? This is exactly what I have done to clean and disinfect over 300 computers at two different companies -- keeping them operating parasite-free for the past two years! Below are the details...

1. Install a Good Anti-Virus Program.

If you are running any computer without a good anti-virus program these days -- you're committing cyber-suicide!

It doesn't really matter which one you use. There is such stiff competition between companies to keep up -- every one is pretty much about the same -- or at least -- it will be very quickly. So don't sweat it. Use any one you want -- but just be sure to use one!

(I personally use McAfee, and receive virus-laden emails every couple of days that are automatically deleted.)

2. Install Spybot Search and Destroy.

I don't generally recommend products, but make the exception in this case because this program Really Works -- and is Frëe! (I DO encourage you to make a donation!)

Get it at: http://www.safer-networking.org/en/download/

Another tip: Do Use the "Tea Timer" continuous protection. It is turned off by default -- so when you see the prompt to enable it -- please do! It is much easier to Prevent a problem, than to try and cure it later.

3. Install Microsoft Anti-Spyware.

Many people believe that just because they have one particular anti-spyware program, that they are covered.

Definitely Not! Spyware is one case where you absolutely Must use both a belt and suspenders.

You will find that there are many bits of malware that Spybot S&D catches, but Microsoft doesn't -- and vice versa.

Also, one product may catch the parasite, but only the other one can successfully remöve it.

Microsoft Anti-Spyware is available at:

http://www.microsoft.com/athome/security/spyware/software/

If you have a Legal copy of Windows, the download is Frëe! (But be warned that they Will Chëck your windows, and you must download and install the checking too. No big worries.)

4. Keep Everything Up To Date!

Last, but certainly not least, you absolutely must keep your operating system, anti-virus and anti-spyware products updated.

Microsoft releases patches and updates to all currently supported versions of Windows almost weekly. Use the "Automatic Update" feature to make sure you get them, or chëck manually at least once a week through Internet Explorer's >Tools >Windows Update menu option.

Don't forget about keeping the other products updated also. In previous versions of Spybot Search and Destroy, you needed to do this manually.

Removal and Cleaning

Ideally, these four steps should be done just after the system is first set up and before it ever hits the Internet -- but if this isn't the case, don't be surprised at all the viruses, parasites and malware you may find.

If this is the case, my recommended removal and cleansing method is a 'top-down' approach -- from the simplest and safest method -- down to the more difficult and dangerous.

(Legal: Everything in this article is "At Your Own Risk".)

1. See if the application has a menu entry or an "Uninstall" or "Remöve" option anywhere. Most legitïmate software (but ones that may carry parasites as extra baggage) may be able to be removed (at least partially) this way.

2. Under the Windows Control Panel, select the "Add/Remove Programs" applet -- look for, and "Uninstall" anything that may be related to the malware. Be aware that many "innocent looking" applications carry spyware, malware and parasites. Remöve anything in any way resembling problems exposed through either of the anti-spyware programs.

3. Use the removal features of the anti-virus and anti-spyware applications. I recommend doing this After the previous two steps, because sometimes the applications will be removed more 'cleanly' by reversing their original installatïon process.

Note: After performing any step, be sure to repeat the scan with the anti-virus and/or anti-spyware program to see if the problem was really fixed. You should continue trying to remöve the problem until the scan comes up clean. This may also mean rebooting your computer between removal attempts.

Spybot Search and Destroy will prompt you to reboot and attempt removal during the reboot if it encounters a particularly stubborn bug.

4. In some cases, no amount of scanning/cleaning/rebooting can remöve the malware. In this case, you have two options:

• Boot the computer into "Safe Mode" and re-attempt the Spybot and Microsoft scan/removal process. (To get your computer to boot into Safe Mode -- press just after restart -- and select "Safe Mode" from the boot menu.)
  This may allow you to remöve applications that are run automatically at start-up, but that protect themselves by preventing the file from being deleted while the bug is running.
• Boot the computer into Safe Mode, Run "Regedit" or "Regedt32" and try to clean the parasite by searching the registry for strings that the anti-virus programs have found.

Note: I won't provide detailed instructions on registry editing -- because if you don't know how to do it already -- you'd probably better not try! It can mess you up.