Explore topic-wise InterviewSolutions in .

Backdated's famous anti-virus post has gone missing! This thread is a replacement for that immortal post. Feel free to reply to this; add onto it, please. I only remember part of it.

Tools to download

CCleaner for removing caches, temporary internet files, and other junk nobody uses.

SpywareBlaster to protect your system from spyware.

AboutBuster to get RID of the HomeSearchAssistant parasite

HijackThis to eliminate hijackers and leftover TRACES of viruses - download and install to it's own folder!

Killbox to delete those viruses that just won't go!

Panda - a DECENT AntiVirus software.

That's all I can remember for now. Add on to it!I could be wrong, but didn't he also have Spybot Search & Destroy and Ad-aware in the list?Yes, he did. Any other additions are welcome.

This is a KNOWN glitch in the latest HOTFIX from the Mothership...


Click Here for the Fixi get an error when i click the linkThanx for the heads up...new link posted. APPARENTLY the server was getting mobbed...allot better thnx patio for the linkYou're more than Welcome...I wouldn't want to be caught dead using Realtek HD audio. why whats wrong with it?I'm not too fond of sound that cracks every NANOSECOND. Soundblaster has always been a well-accepted standard (Hence the soundblaster clone or 100% soundblaster COMPATIBLE cards) and I very much doubt Realtek adheres to these standards.. Hence the crappy sound. oh ok

JavaRa

Old versions of Java have vulnerabilities that malicious sites can use to infect your system.

JavaRa Homepage

Quote

Use

What JavaRa does is to check if your computer has the latest version of Java Runtime Environment (JRE). If the version you have installed has been superseded by a newer version the program will download and install this newer version for you, by running Java’s update program. JavaRa then allows you to remove all possible older versions of this program.

This will ensure that the security of your computer is enhanced and extra space on your hard disk is created.

Cleaning feature

In some INSTANCES Java Runtime Environment (JRE) will create logs or temporary files which are not needed in normal circumstances. These files take up space and can be safely removed. JavaRa does this tedious job for you with one click of a button.

Simply select the "Remove Useless Files" button once in a while to remove these old useless files.

Windows Versions Supported

The newest release of JavaRa supports Windows 9x, 2K, XP, Vista, 7 and 8.
The legacy version of JavaRa supports Windows 9x, 2k, XP, and Vista WITHOUT UAC.

While TeaTimer is an excellent tool for the prevention of spyware, it can also interfere with other TASKS such as installing/uninstalling software as well as updating software. Follow these steps to disable TeaTimer.

1. Right click Spybot in the System Tray (looks like a calendar with a padlock SYMBOL ) and choose Exit Spybot S&D Resident
2. Run Spybot S&D
3. GO to the Mode menu, and MAKE sure Advanced Mode is selected.
4. On the left hand side, choose TOOLS > Resident
uncheck Resident TeaTimer and OK any promptand Restart your computer.

Note: If TeaTimer gives you a warning afterwards that some changes were made, allow this instead of blocking it.

Microsoft Windows Malicious Software Removal Tool is a free tool which helps to remove SPECIFIC malicious software from computers which run Windows operating systems. After it is installed, it silently runs in the background and removes the malicious software that it FINDS. When the detection and removal process is complete, the tool generates a report describing the outcome of the scan. It’s actually a free but basic anti-virus, anti-worm and anti-Trojan security utility that is provided by Microsoft to protect and secure Windows Vista, Windows XP, Windows 2000 and Windows 2003 system by way of post infection removal.

Where To Find MRT.EXE



By default, the tool can be found in the C:\Windows\System32 folder. Once you open this location, search for a file called mrt.exe. If you don’t find this file, it means that this tool is not installed on your PC. In this case you can download it directly from the Microsoft Download Center. The 64 bit version can be found here.

A quick way to launch the tool is to go to Start > Run and type mrt.exe then click OK.

How To Use It

After opening MRT.EXE, you’ll see the Welcome window, click Next.



Now you need to select the type of scan you want the tool to perform. You have three possible options: Quick scan, Full scan and Customized scan. If you did not scan your PC before and you don’t have a reliable antivirus solution installed, you might want to select Full scan. Once you selected the option you prefer, click Next.


It will start scanning your computer and show you the status of the scan. If malicious software has modified (or infected) user files on the computer, the tool will prompt you to remove the malicious software from those files. You can choose to clean specific files or all infected files found. Note that some data loss is possible during this process and that the tool may not be able to restore some files to the original, pre-infection state.



When finished you will see the results. In my case, no malicious software was detected. Now click Finish and the tool will close.





The program does not have any shortcut in Start Menu nor desktop or Quick Launch area. Actually WMSRT runs in the background once every month without your knowledge, if you have installed MSRT. If you feel like running the tool to check your system manually for frequency more than once a month, or suspecting your system is infected and want to run the MSRT to clean the infection, or simply want to display view the results of the scan (by default everything is silent unless infected), you can manually execute and run the tool with the following command:

Code: [Select]MRT.EXE
You can type this program name in command prompt, or Run command box, or in Start Search in Vista. Note that users MUST log on to the computer by using an account that is a member of the Administrators GROUP to use the Malicious Software Removal Tool. In Vista, user needs to give User Account Control permission to continue.


WMSRT MRT.exe supports four command line switches listed below, which is optional and most of the time not necessary unless you’re administrator for corporate network:

• /Q or /quiet - Use quiet mode. This option suppresses the user interface of the tool.
• /? - Display a dialog box that lists the command-line switches.
• /N - Run in detect-only mode. In this mode, malicious software will be reported to the user but will not be removed.
• /F - Force an extended scan of the computer.
• /F:Y - Force an extended scan of the computer and automatically clean any infections found.

Counterfeit software can be a serious threat. It can lead to a corrupted system, a loss of data, or even IDENTITY theft, so it’s important to know that you’re getting genuine Microsoft software at your point of purchase.

Counterfeit software is the result of unauthorized copying, reproduction, or manufacture of software products. Counterfeit software often looks authentic and is sometimes distributed in packaging that imitates the original manufacturer's packaging. Counterfeit Gallery

Updating your software is essential for good internet security. Without a valid license for your software you will not be able to update your software to patch it against the latest exploits. An UNPATCHED Operating System is wide open to MALWARE infections. Defining Malware: FAQ

There are some circumstances where a user is unaware that they have bought a pirated Operating System (Windows). Be aware of scams. Know Before You Buy

The use of Pirated software is ILLEGAL. Is your copy of Windows genuine? How to TELL

Use these tools if you have experienced any problems when trying to update your Windows Operating System. Select the method by which you acquired Windows and compare the anti-piracy features included with your product with the anti-piracy features included with genuine Microsoft software.

Purchasing Genuine Microsoft Software

Windows was preinstalled on my new PC

Acquired Windows via retail purchase

Acquired Windows Upgrade Volume License

Office Validation Assistant

How to Tell: Frequently Asked Questions

Protect Yourself from Piracy

Reporting Piracy

Microsoft Update

Office Update

Download Center

Microsoft.com

Removing the sticky from this post and MOVING to the FAQ security section.jwillnov09, we don't CONDONE advertising.


And we certainly don't and won't ADVISE others to use your SERVICE.

What are Flash Cookies or Local Shared Objects (LSO)?

Quote

Local Shared Objects (LSO), commonly called flash cookies, are collections of cookie-like data stored as a file on a user's computer. LSOs are USED by all versions of Adobe Flash Player and Version 6 and above of Macromedia's now obsolete Flash MX Player.

Source and full description: http://en.wikipedia.org/wiki/Local_Shared_Object

• Local Shared Objects -- "Flash Cookies"
  
• What are local shared objects?
  
• What are Flash Cookies?

• BleachBit
  
• 
  
• CCleaner Slim (No Toolbar)
  
• Flash Cookie Cleaner.com
  
• Flash Cookies Cleaner by HotCleaner
  
• Flash Cookie Killer
  
• FlashCookiesView
  
• Flush Flash
  
• Ghostery
  
• IE Privacy Keeper
  
• MAXA Cookie Manager (free & paid)

• Better Privacy add-on for Firefox
  
• Privacy + add-on for Firefox

• Mac OS X, Flush.app
  
• Linux, BleachBit for Linux

It's also very powerful and new users should be aware that it can be dangerous if used improperly (make sure that you know what you are selecting for deletion). I wouldn't recommend this tool to novice users unless, of course, if the windows version is very different than the Linux version. Is it?

These links were POSTED by the esteemed Oddjob and are worth reading.

What may have lead up to your infection and HELP keep your computer free of malware …

http://www.castlecops.com/t7736-So_how_did_I_get_infected_in_the_first_place.html

http://www.help2go.com/Tutorials/Protect_Your_PC/Avoid_Web_Browser_Hijackers.html

There is a little DUPLICATION but these tutorials are both well worth reading.


Also run through this before posting a HijackThis LOG …

http://www.help2go.com/Tutorials/Protect_Your_PC/Get_Rid_of_Spyware%2C_Adware%2C_and_Web_Browser_Hijackers.html

To remove the Norton virus:

Download the Norton Removal tool here

Do not run it yet.

1) Download and install ERUNT and have it make a backup of your registry...
2) Use Add Remove Programs FIRST and un-install Norton...
3) From Windows Explorer search for any folders NAMED Norton and Symantec and delete them...
4) Open regedit and type Norton in the search bar. Delete all entries it finds. F3 takes you to the next instance of Norton. Continue til you have reached the end of the registry...
5) Repeat the above process using Symantec INSTEAD in the search field. Delete any Symantec keys it finds...
6) Now run the Norton Removal tool you DLoaded...
7) Empty the recycle bin...
Go to My Computer and right click the C: drive and select Properties and run disk cleanup...
9) Re-boot and run disk defrag....

There you're done !

Kudos to Patio

• VirusTotal
  
• Jotti's malware scan
  
• VirSCAN.org

• At the upload site, click Browse.
  
• Locate the suspicious file and double click it to enter it into the window.
• Next click Send File/Submit/Upload (DEPENDING on the site)
  
  • Your file will possibly be entered into a queue which normally takes less than a minute to clear.
• This will perform a scan across multiple different virus scanning engines.
• Wait for all of the scanning engines to complete.
• Use the results to determine if the file is malicious or not.

• Write SCAN in the Subject field.
  
• Attach the file to be scanned. Such file must not exceed 10 MB in size. If the attached file is larger, the system will reject it automatically.
  
• You will receive an email with a report of the file analysis.

• Response time will vary depending on the load of the system at the time of placing your request.