I need working solutions that can get the job done in the fastest time.
So far I've come up with the following - and want to know if anyone has other spyware prevention / removal software (freeware), or procedures that you use to rid a seriously infected PC of all the garbage?
1) Backup the registry
2) Disable System Restore
3) Install Spybot, Ad-Aware, and AVG Anti-virus
(If you can get to the Internet - do the following)
a) Run Windows Updates for all critical updates
b) Run the updates for Spybot , Ad-Aware and AVG
4) Look through the Add/Remove Programs list to see what 'known' apps should be uninstalled (sometimes not possible without Internet access).
Note:
If there are a 'lot' of junk programs:
a) Change 'folder options' to 'show hidden files'
b) Turn off 'Hide protected operating system files'
c) Get rid of whatever is in the Windows Temp directory
d) Go through all users' 'Local Settings' directories to clean out the 'Temp' & 'Internet Files' including History
5) Run msconfig and disable all 'startup' options
6) Reboot to Safe Mode
7) Run Ad-Aware and Spybot with advanced features and remove whatever is found (run again on startup)
Use regedit to look in the 'Run' section and clean it up if necessary.
9) Reboot to Normal
- if not already available, establish an Internet connection
- get updates if not already done
- reboot to Safe mode and rerun each program again
10) Run AVG
11) Run Trend Micro's free 'Housecall' scan
12) Restore msconfig to it's previous state
13) Turn on System Restore and create a new restore point
14) Clean up the computer with Symantec's System Works
15) Run defrag
It takes me 2 - 3 hours, just to complete this procedure... but I think it's necessary. On the other hand, I wonder if $130 to $200 for this thorough of a job is really necessary - when they'll probably have it gunked up again in less than a month
(without some software / education)
Any recommendations, additions, comments or suggestions
:
ps: thanks RussS for your input!
I have a lab machine with a very long IDE & power cables that I use to hook up to the drive of the infected machine without needing to remove it from its case. On my lab machine I run NAV as the main one, but also have several others installed in case I have issues that I can't resolve.
