| Spyware, Adware, Malware, Badware....whatever | | | | is and how to tell if a computer is infected, |
| you choose to call it, it's a problem. | | | | let's get down to the removal process. First |
| Chances are that you or someone you know has | | | | things first - backup your personal data! |
| or will experience some sort of 'ware' | | | | You should be doing this regularly anyway. |
| infection on a computer and it can be | | | | Using Windows XP - Click Start >> All |
| frustrating. | | | | Programs >> Accessories >> System Tools, and |
| | | | then click Backup to start the wizard. |
| | | | |
| | | | |
| What is spyware? | | | | |
| | | | To remove spyware/adware you need two |
| Spyware is malicious software that collects | | | | programs (maybe three). The two I recommend |
| information about a user and is installed on | | | | are SpyBot Search & Destroy and AdAware. The |
| a computer without the user's informed | | | | Third is an application called HiJackThis. |
| consent. Not to be confused with a | | | | Be warned, HiJackThis is for advanced user, |
| virus.There are many different types of | | | | the is a powerful tool! Consult the |
| spyware.Adware - is a type of spyware that | | | | program's documentation before deleting any |
| collects information about a user in order to | | | | files, you could cause serious system damage |
| display targeted advertisments to the | | | | if you do not know what you are doing. Links |
| user.Browser Helper Objects (BHOs) - is a | | | | to all three of these tools can be found here |
| plug-in for Internet Explorer which helps | | | | |
| developers customize and control the | | | | |
| browser.Browser HiJacker - is when a | | | | |
| malicious application adjusts your browser | | | | |
| settings without your concent. For example: | | | | Download, install and update the programs. |
| your homepage has changed to a search page, | | | | Then restart the computer and tap the |
| dangerous sites have been mysteriously added | | | | |
| to your Favorites, questionable websites are | | | | F8 key on your keyboard as the computer |
| added to Internet Explorer's list of Trusted | | | | begins to start - this will give you the |
| Sites etc...Keyboard Logger - logs all the | | | | |
| activity of your keyboard and reports this | | | | option of starting in 'Safe Mode'. You will |
| information back to a remote computer. This | | | | see a few other options here as well. |
| information can be used to steal passwords, | | | | |
| bank information etc...Phone Dialer - AKA - | | | | For this particular job select 'Safe Mode'. |
| Modem HiJacker - this type of application | | | | |
| changes the phone number dialed when using a | | | | What is Safe Mode? Safe Mode is an |
| dial-up Internet connection so charges are | | | | alternate way of starting a computer using |
| incurred on the users phone bill.Remote | | | | only the bare minimum of resources. It's a |
| Access Trojans (RATs) - malicious programs | | | | troubleshooting tool built into indows based |
| that run on a user's computer which permits | | | | operating systems. |
| an intruder remote access to that | | | | |
| computer.How do I know if my computer is | | | | |
| infected? What are the signs of | | | | |
| spyware?slower than normal computer? - Is | | | | If a computer is running in Safe Mode you |
| your computer having trouble performing | | | | should see that the screen resolution looks |
| routine tasks? Has there been a sudden | | | | 'off', which is perfectly normal, and you |
| increase in the amount of times your computer | | | | should see the words 'Safe Mode' in the |
| crashes? Does your computer not start at | | | | corners of the screen. |
| all?homepage has changed by itself? - Has | | | | |
| your homepage been hijacked? Does it open to | | | | Run full system scans with both programs. |
| a search page that you did not | | | | They should be able to find the problems and |
| specify?pop-ups driving you crazy? - Do they | | | | remove them. To learn how to remove a |
| appear as soon as you turn on your computer? | | | | particular item using SpyBot and/or AdAware |
| Are they for adult websites? Some spyware | | | | consult each program's 'Help' documentation. |
| will bombard you with popups that aren't even | | | | |
| related to the website you are | | | | |
| visiting.browser settings have changed and | | | | |
| you can't change them back? - When you open | | | | Next, restart the computer in "normal mode" |
| up Internet Explorer does it open to a search | | | | and see what happens. If you are still |
| page that you did not specify?new browser | | | | experiencing problems start the computer in |
| toolbars installed - but not by you? - Is | | | | Safe Mode again and run the spyware scans |
| there a mysterious toolbar installed on your | | | | once more. Make sure that the spyware |
| browser?phone bill sky-rocketed - Do you see | | | | definitions are up-to-date for each program |
| charges on your phone bill for adult websites | | | | before using Safe Mode. This will give you |
| or 1-900 numbers?unexpected new or new icons | | | | the maximum advantage when trying to detect |
| in your system tray? - Are there applications | | | | and remove malware. |
| running on your computer that you did not | | | | |
| install? | | | | |
| | | | |
| | | | There is another tool built into Windows |
| | | | called MSCONFIG which I use quite often when |
| | | | troubleshooting spyware. |
| | | | |
| Now that you know a bit about what spyware | | | | What is MSCONFIG? |