Malware/Spyware Removal

You might be better off just restoring your computer to it's original state. System Restore can't do that though. You'll need to use another method, like restoring from a drive image, using the original restore disks, or reinstalling Windows.

Restoring your computer may seem drastic, but it may be the lesser of all evils, and save time and money in the long run. If you do decide to proceed with removal, watch out for pitfalls. Read this tale of woe so you'll know what not to do first.

Michael Horowitz of Computerworld has some good advice about malware removal along similar lines. [other alternatives]

Even when you think you have removed all the malware on your computer, it may still be harboring rootkits. Fortunately some good software for finding and removing rootkits is being developed. [more]

Be very careful where you seek help. Some ads and search results will land you at predator sites that will take advantage of your misfortune. You need something like WOT to advise you where the cyber-bandits are hiding.

What to remove?

Once you start removing malware, you're likely to be faced with decisions about what to remove, and what's benign.

You can remove any or all cookies.
DSO Exploit? Safe to remove.
Others? It depends. That's what this page is all about. ;)
Example of a typical dilemma.

Online help with malware removal

Bleeping Computer is a good place to start. You may find a solution there, but you'll get a good idea of what's involved in the process anyway.
Read the short tutorial at Patrick M. Colla's Spybot-S&D site.
Hijack This is the quintessential software removal tool, but you'll need patience and expert help to use it.
Jim Eschelman's AumHa Security Fourms are based on using HiJack This to help people remove tenacious malware. Also, his Windows Support Center has expert information on "parasites, viruses and other security issues.
WhatTheTech provides free help and support for computer security questions, and they specialize in using Hijack This to remove malicious software. The log file analysis is only for the intrepid. ;-)
CastleCops has ceased operation, but there is good news. BadwareBusters.org, is a new online community (forum) for people who are looking for help removing viruses, spyware and other badware from their computers and websites.
There are suggestions at Spyware Warrior on what to do if your computer is overrun with spyware.
Don't expect perfection. From Don't Sweat The Fragments:
"One of the contentious issues with spyware removal software is whether a product must remove every last fragment of a program. Certainly removing everything is better, but some fragments are more important than others, and some are just plain unimportant."
See CNET Download.com "Spyware Removers" to find spyware removal programs.
Adrian Kingsley-Hughes has good ideas on programs that can detect and remove malware from your PC.

Personally, if I ever found a Trojan Horse or Hacker Tool on my PC, I would not use it any further for financial transactions until I reinstalled Windows. Cleaning it may not be good enough. You'd never know what else might have been left behind. For example, a nasty rootkit.

What to do if you're stuck

Suppose that you've identified the culprit by name using an anti-spyware program, but you haven't been able to get rid of it. There are special removal utilities or instructions for many of the most tenacious parasites.

One good way to start is to "Google" for the name of the parasite. An example is http://www.google.com/search?q=whenusearch+remove. You'll find instructions and even special tools to remove the culprit. Be careful though.

The instructions may tell you to start in safe mode. First, disable XP System Restore [Start > Control Panel > System > System Restore] and then reboot into Safe Mode and proceed with the removal.

• map of security section

• spyware
• malware
• step 4: install anti-spyware: /anti-malware programs

• email security
• web smarts
• catalog of threats
• elements of defense
• security software
• strong passwords
• 7 steps to security
• my own security plans
• WiFi and hotspot security
• how to wipe your hard drive
• how to remove malware

• attack vectors: deception the #1 threat; phishing #1 deception; poisoned websites; poisoned email; email attachments; downloads; spam (scams and phishing); hackers and worms; popup warnings
• malicious content: spyware; viruses and worms; trojans

Only Irish coffee provides in a single glass all four essential food groups: alcohol, caffeine, sugar, and fat. --Alex Levine