Wednesday, July 7, 2010

Malicious Software Removal

Please open ZoneAlarm by going to the Windows START menu, Programs, ZoneAlarm and choosing ZoneAlarm Security. When it opens go to the AntiVirus/AntiSpyware option on the left and click “Check for Updates” to bring the definitions up to date.

Next, you will need to restart your computer in “Safe Mode with Networking” and scan for Viruses and Spyware. This can be accomplished by pressing F8 as the computer starts up (BEFORE the first Windows screen with the black background) and then select Safe Mode with Networking. If you have trouble restarting in safe mode please use this alternate method:
* While in Normal mode, Close all programs.
* Click Start, Run and type MSCONFIG in the box and click OK
* In the System Configuration Utility, choose the BOOT.INI tab up the top and tick the "/SAFEBOOT" option AND also "NETWORK" in the Boot Options section.
* Now click the OK button. After pressing the button you will be presented with an option to Restart or Exit Without Restart. Please choose the Restart option and the computer will now boot up into Safe Mode.

Once in Safe Mode, please go to the Windows START menu, Programs, ZoneAlarm and click "ZoneAlarm Security" to start ZoneAlarm. ZoneAlarm could take around 20 seconds or so to start but when it is ready the main ZoneAlarm window should open.

First, go to AntiVirus/AntiSpyware on the left and click "Scan for Viruses/Spyware" and allow ZoneAlarm to remove or quarantine any malicious files.

When you are finished in Safe mode you will need to start the computer in normal Windows mode. If you did not use the MSCONFIG program to enter Safe Mode then just restart your computer in the normal manner.
IF and ONLY IF you used the MSCONFIG program to enter Safe Mode, please run it again and uncheck the "/SAFEBOOT" option on the BOOT.INI tab and click OK choose the option to restart your computer.

***Please Note: when you restart your computer you may see a prompt from the Windows System Configuration Utility. Please tick the box for "Don't show this message or launch the System Configuration Utility when Windows start:" and then click OK.

If you were unable to remove the malicious software, try using the Microsoft Windows Malicious Software Removal Tool:
To use this tool is to go to the Windows START menu and choose Run (or just use "Search" in 7/Vista) and copy and paste in the following:
mrt.exe /F:Y

If you are still unable to remove the malicious software, you may wish to consider trying either MalwareBytes Anti-Malware or Super AntiSpyware, both of which are free for home users.
MalwareBytes Anti-Malware (www.malwarebytes.org) direct download link:
ftp://majorgeeks.mirror.internode.on.net/spyware/mbam-setup-1.46.exe
Super AntiSpyware:
http://www.superantispyware.com
NOTE: Please update these programs "before" scanning for malicious software.

No comments: