HowTo prevent spyware infections and remove spyware

Spyware prevention:

[80s Surgeon General's voice] The best way to prevent spyware infection is to not use the web brower which the majority of spyware targets -- Internet Explorer.[/voice]

There are many alternative web browsers to Internet Explorer. Two I have the most familarity with are Firefox and Opera.
Another method which will help prevent spyware is using an antispyware tool which will run as you browse looking for spyware like the anitvirus programs do. Two I have seen do this is the antispyware tool Microsoft currently has in beta after buying out the company which was originally providing it and Spybot.
The other primary source of spyware as well as viruses and trojan horses is software respository sites. Infections from user downloaded software is a separate issue from web browser target infections. Sites like Download.com, TuCows.com, Majorgeeks.com all make it convient for finding a tool which may make your live easier. They also, reguardless of how much they scan for them, are used as a means to put out versions of programs to infect users computers. Spyware, virus, & trojan horse program writers will go to great lengths to fake out a reposnsitories scanning tools because of the wealth of personal information they may be able to get from a persons home or work computer.

The best way to avoid these types of infections is to only download internet software from the site of the person or company writing the software. Download.com usually will provide a link to the providing website. If the software repository you are using does not, searching on the program name with Google, Yahoo, Dogpile, etc. will often provide the site URL in the first few links returned.

Spyware removal:

For spyware removal, one of the key items I have found is using multiple tools to do the job. While a spyware program may be written to fool one or two antispyware tools, since they each use slightly different methods to detect, it is difficult and not worth the time for spyware writers to try and fool them all. Also, like with antivirus tools, I have seen cases were two antispyware tools have been able to detect a piece of spyware, but only one was able to actually clean it off the computer.

The other key item is the mode your windows machine is in when you attempt cleaning spyware. The mode which will give you the best chance of removing spyware is known as Safe Mode. In safe mode, windows does not load all the programs it normally does so the files windows normally keeps locked while allowing the user to browse the internet, IM other people, etc., are available to be scanned and cleaned.

To enter Safe Mode, you press the F8 key before the windows splash screen comes up. You may need to press it multiple times or hold it down depending on your computer and the version of windows being run. If windows recognized the F8 key being pressed, a text screen will come up with different choices for continuing the boot process. The best one to select is Safe Mode without Networking. Once you use the arrow keys to select that option press enter and the boot process will continue. Once it is done loading into safe mode, a popup window comes up stating so.

Some antispyware tools to consider using along with the two already stated:


*goes off to summon other geeks to add their knowledge & experience to this thread*

My new fav spyware remover is Ewido

Make sure you turn off system restore before doing it, and I would suggest running it in safe mode.

I would use firefox but i have problems with it. I can use it the first time when i get online but when i go offline and let it sit a few hours and when i connect to get back online all i get is there is no documentation for this.

I can not get to any sites at all. I do have AOL browser.

I use both Spybot and Ad-aware. Between the two they manage to nab all the malware that gets though the firewall.

Just to add my 2 cents.

http://www.spywareinfo.com/xscan.php

For a quick scan. It works pretty decent but doesn't have a comprehensive list of all adwares.

additional antispywares:

McAfee AntiSpyware: http://us.mcafee.com/root/package.asp?pkgid=182

ZoneAlarm AntiSpyware: http://www.zonelabs.com/store/content/catalog/products/sku_list_zaas.jsp

Max Secure Spyware Detector: http://www.spywaredetector.us/

I use Netscape and ad aware.

Linux Geek you rule..

Nightbird said:

I use Netscape and ad aware.

Linux Geek you rule..

Click to expand...

How is Netscape these days? Last time I looked at it was after AOL bought the closed source version and released the first production version. It was a major memory hog with all the unnecessary bells and whistles they added.

Well I like it because it's really good at showing graphics and pictures.

I run mozilla..
and a coctail of various spyware/adware apps. spybot s&d, adaware, and MS's antispyware.

That, and 80% of the time or so i'm booted into linux.. that helps.

My laptop however runs win2k. With that, i just be careful what i download, and run Mozilla. I check for crap once a week or so, and i rarely find anythign more than some annoying cookies.

Spyware

This is the rub on spyware: YOU CANNOT GET RID OF IT ONCE IT"S THERE! The only option one has is to reformat the infected hard drive. For many, this procedure is a little too advanced, but can be easilly performed with a little research. Spyware removers do NOT WORK because spyware writes itself directly into your computers' root directory. Once you have reformated the drive, use an alternate browser and mail server such as Netscape. Don't even open Internet Explorer the first time. I have been spyware free for over a year now using this advise. It really works.

Cowboy

Haven't investigated enough to give a definitive answer, but yeah, it often does seem like there isn't any way to get rid of spyware once it has its claws in your system. The thing I have found that helps the most is using multiple cleaners & doing the cleaning from safe mode. In many cases I've seen, cleaning while not in safe mode was an act of futility.

Yet another source of infection: https://forum.literotica.com/showthread.php?t=382880

This is simply not true

cowboyfiddler said:

This is the rub on spyware: YOU CANNOT GET RID OF IT ONCE IT"S THERE! The only option one has is to reformat the infected hard drive. For many, this procedure is a little too advanced, but can be easilly performed with a little research. Spyware removers do NOT WORK because spyware writes itself directly into your computers' root directory. Once you have reformated the drive, use an alternate browser and mail server such as Netscape. Don't even open Internet Explorer the first time. I have been spyware free for over a year now using this advise. It really works.

Cowboy

Click to expand...

Probably less than 1% of infections cannot be removed. And even that probably could if you had the time and tools.

Some infections ARE very hard to get rid of. There are special "tools" that can remove some of these hard to get rid of infections. You have to search for them and download them as necessary.

For the 90% of PC users that use Windows and IE, most of us don't have a problem as long as we keep our protection updated and running.

Linuxgeek, thanks for this thread. I mean that!
However, Linux and Firefox, etc are not really necessary for most of us who need to be compatable with the other 200 million users. Right now, you would need to be a computer geek to get all the programs you needed for linux that are more readily available for Windows. (NO, I'm not a Microsoft fan!)

MagicFingers said:

Linuxgeek, thanks for this thread. I mean that!
However, Linux and Firefox, etc are not really necessary for most of us who need to be compatable with the other 200 million users. Right now, you would need to be a computer geek to get all the programs you needed for linux that are more readily available for Windows. (NO, I'm not a Microsoft fan!)

Click to expand...

I don't disagree. Depending on the distro, it can be like building your own car and then driving it. Some of the distros have gotten a lot more non-tech user friendly. SuSe has come a long way (http://www.opensuse.org/). Ubuntu looks like it has some decent possibilities (http://www.ubuntulinux.org/).

For anyone who just wants to try out Linux on their system without having to install anything, I recommend using one of the CD Live versions. Knoppix is one I am very fond of (http://www.knoppix.net/). It, like many of the live CD versions, self configures itself with little if any input needed by the user. They recently also created a DVD Live version to give a person a plethora of Linux software to experiment with.

As far as compatability, many of the alteratives to Micro$oft products are very compatable. The only time I've heard of Netscape, Mozilla, or Firefox having problems displaying a webpage wrong that worked fine in IE is when the website did something to cause the non-IE browsers not to display it correctly. Open Office can open or write out files in M$ office format. Many products not produced by Micro$oft have Linux versions which run as they do if running the version for Windows.

The main compatibility issue I have seen is company leaders not willing to try a non name brand instead of Windows. With large companies like IBM and Novell backing, supporting and producing software for Linux, fortunately, the corporate attitude is changing.

Some anti-spyware tools do not work on new brands of spyware. Last year I threw five different programs (including all the usual, oft-recommended suspects) at a very annoying 'ware with no results. Tried three extremely complex manual removal procedures, none of which worked. Finally, after some heavy searching, I discovered that someone had got rid of the same thing by going to the source website and downloading their removal tool and instructions. (there's a law, apparently, that says you have to provide this if you install spyware without a person's consent on their machine--and some companies are actually abiding by it). Lo and behold... it worked, whereas nothing else had. If all else fails, I recommend this as a way to get rid of very pernicious and new spyware.

stirbird said:

Some anti-spyware tools do not work on new brands of spyware. Last year I threw five different programs (including all the usual, oft-recommended suspects) at a very annoying 'ware with no results. Tried three extremely complex manual removal procedures, none of which worked. Finally, after some heavy searching, I discovered that someone had got rid of the same thing by going to the source website and downloading their removal tool and instructions. (there's a law, apparently, that says you have to provide this if you install spyware without a person's consent on their machine--and some companies are actually abiding by it). Lo and behold... it worked, whereas nothing else had. If all else fails, I recommend this as a way to get rid of very pernicious and new spyware.

Click to expand...

One note about this. Most spyware companies "Removal" tools actually do remove the spyware program it's intended for, but they INSTALL several new ones in it's place.

DemonOuterverse said:

One note about this. Most spyware companies "Removal" tools actually do remove the spyware program it's intended for, but they INSTALL several new ones in it's place.

Click to expand...

Makes one wonder how many of the spyware removal tools are akin to the Jerusalem virus and its first removal tool of the DOS days.

By chance have you run across a list of spyware removal tools known to install other spyware?

To prevent spyware from infecting you in the first place, try SpywareBlaster (get it at http://www.javacoolsoftware.com/spywareblaster.html).

Also, try not to listen to cowboyfiddler. It is completely possible to remove any and all spyware, some just takes more time/effort. SpyBot has been mentioned here and does a great job of removing even spyware that is resident in memory.

Oh, and don't use Internet Explorer.

ZDNet: To catch a spy: Anti-spyware tools reviewed

Article table of contents:

Introduction
Spyware & adware
Product reviews
Computer Associates
Lavasoft
McAfee
Microsoft
PC Tools
Symantec
Trend Micro
Webroot
How we tested
Test results
Specifications
Editor's Choice

Spyware, application attacks to be biggest 2006 threats

Other notable threat trends for 2006 include:

Phishing: Cobb said phishing scams will rise to a new level of sophistication, to the point where legitimate Web and e-mail offers from trusted service providers will look less authentic than the fraudulent offers.

"The banks, financial services companies and other high-profile sites will have to be very careful," he said, "because I think people's concern about phishing will impact not just their ability to promote businesses online, but also possibly online shopping altogether."

Blended threats: Lambert said as virus writers become more proficient in the art of spyware, a new generation of dangerous threat cocktails is likely to emerge.

"Imagine a world where you might have spyware on your computer that records which sites you go to on a daily basis, and then relays that data back to a central server," she said. "Then, knowing which banks I use, I could get a targeted spam/phishing attack from an attacker, but it's no longer a random bank asking for my information. It looks like my bank asking for my information."

Data exposures and thefts: In 2006, few malicious hackers will be motivated by the challenge. Instead, Harris said, most will strive solely for financial gain, and that means companies that don't pay extra attention to safeguarding customer information will be victimized, a la Bank of America Corp., ChoicePoint Inc. and TransUnion LLC.

Unfortunately, I don't have anything additional to add, but figured a bump to the top might get some other people posting their spyware cleanup sucesses and maybe help someone who is trying to deal with a spyware incursion.

You got spyware problems, I got the answer.

I have been spyware free for at least 2 years now. go search google for hijackthis.exe DONT try and use this product yourself. Scan your computer with it, save the log file and post a copy of the log on www.cexx.org ....They train people to know what to look for through the hijackthis. Once you get familiar enough with the program on your computer you should be able to do it yourself though. After you are done with that download spywareblaster which prevents spyware from being installed and it runs constantly, just remember to update. The last part is to use firefox as a web browser. I have done just these few things and have had no problems with spyware in the longest time.

Oh yeah, just a hint for those with new computers...Reformat ur computer before you use it. Companies such as dell put spyware on there when they send you your "new" computer.