Viruses and Worms:
Viruses and worms are malicious computer programs designed to spread from computer to computer. A virus or worm can enter your computer through e-mail, or programs you've downloaded, or through open
ports on your computer. Viruses and worms sometimes are programmed to do destructive and malicious things, such as send copies of itself to everyone in your address book or delete files on your computer.
Virus Prevention:
Did you know that the number one method of virus intrusion is through
email attachments? in fact, over 90% of viruses are transmitted
by email and 3 out of 100 emails are infected with a virus!
How to safe-guard my system from a virus!
--------------------------------------------------------------------------------
What's the key to preventing viruses? Caution first and software
second.
Computer viruses are often spread by email and web-based
downloads, sometimes disguised as games, images, or ordinary-looking
documents that
when opened can damage your computer files or operating system.
To guard your computer, we suggest the following steps:
Do not download any files from strangers. Do not open any files
attached to an email from an unknown, suspicious or untrustworthy source.
Do not open any files attached to an email unless you know what it is,
even if it appears to come from a friend or someone you know. Some viruses
can replicate themselves and spread through email. Better be safe than
sorry and confirm they really sent it.
Do not open any files attached to an email if the subject line is questionable
or unexpected. If you feel you must, always save the file to your hard
drive first.
Back up your files on a regular basis. If a virus destroys your files,
at least you can replace them with your back-up copy. You should store
your backup copy in a separate location from your work files, preferably
one that is not on your computer.
Keep your system software up-to-date. Many viruses can be rendered powerless
by downloading updates for your operating system. Windows users
can do this by visiting Microsoft's Windows Update site.
Install (and keep up-to-date) an anti-virus software package. There are
many excellent anti-virus programs available. Visit our Downloads
section for the latest software.
Finding Files on your computer.
The find files option is always the best. Don't try to use
the file explorer as
most likely you will just get frustrated.
Start Menu > Search > Files and folders
This will open a window that allows you to search all files
and folders on your computer.
The advantage of using this tool is that it allows you to search
hidden and system files without
changing file and folder options in windows explorer. When
searching use the advanced options to find those nasty little buggers.
Now in the "All or Part of the File Name" entry
area, copy and paste the full file path and click search.
If it pulls up a file, delete it. However, it may not let
you
delete it. If it doesn't, it is most likely because it is
in the System Volume Recovery Folder. In this case follow
the
directions below and then redo your search and
try deleting the file again.
Take a look at the full path of the virus it finds. It might
be in your System Volume Information folder (Your system restore
files). If that is the case, you can do the following:
Windows Millennium Edition (ME) and Windows
XP have a feature known as System Restore, which creates backups
of certain files in the _Restore folder. The System Restore
feature usually backs up files with EXE or COM extensions,
which may include infected files and malware programs. Files
in the _Restore folder are protected and can only be accessed
using System Restore. This feature must be disabled first before
some antivirus can access and clean these files.
The following procedure disables the System Restore feature:
For Windows ME
Right-click the My Computer icon on the Desktop and click
Properties.
Click the Performance tab.
Click the File System button.
Click the Troubleshooting tab.
Select Disable System Restore.
Click Apply > Close > Close.
When prompted to restart, click Yes.
Press F8 while the system restarts.
Choose Safe Mode then hit the Enter key.
After your system has restarted, continue with the scan/clean
process. Files under the _Restore folder can now be deleted.
Re-enable System Restore by clearing Disable System Restore
and restarting your system normally.
For Windows XP
Log on as Administrator.
Right-click the My Computer icon on the desktop and click Properties.
Click the System Restore tab.
Select Turn off System Restore.
Click Apply > Yes > OK.
Continue with the scan/clean process. Files under the _Restore
folder can now be deleted.
Re-enable System Restore by clearing Turn off System Restore.
If all else fails, you can try these 2 tools to find certain
viruses.
Stinger
Stinger is a stand-alone utility used to detect and remove
specific viruses. It is not a substitute for full anti-virus
protection, but rather a tool to assist administrators and
users when dealing with an infected system. Stinger utilizes
next generation scan engine technology, including process
scanning, digitally signed DAT files, and scan performance
optimizations
HijackThis
A general homepage hijackers detector and remover. HijackThis
examines certain key areas of the Registry and Hard Drive
and lists their contents. These are areas which are used
by both legitimate programmers and hijackers. It is continually
updated to detect and remove new hijacks.
Note: HijackThis does not target specific programs/URLs, just
the methods used by hijackers to force you onto their sites.
As a result, false positives are imminent and unless you are
sure what you're doing, you should always consult with knowledgable
folks on the forums before deleting anything.
Using Hijackthis: Hijackthis scans key areas of the registry
and hard drive and "always" shows valid registry
entries.
commonly known as fasle positives. Do not check and fix anything
that you do not 100% know is a virus or browser
hijacker. However there will be entries that are obvious and
those you can remove without worring about it.
This is an example of one that can be removed.
ie: 016-DPF{HG496AB-FG42-R4TY-496SJ847} (Sex-redirect) Http://www.search.url/petite-teens/update
Those that can be removed you will clearly see a reference
to some scumbag website. The best way to use this product
is to save the scan file and post it to the spyware forums
that cater to this program. They have experts that browse the
forum and help people everyday with removal of these types
of viruses.
Here is the link to thier forums.
SpywareInfo.com
*Note that anti-virus software can't remove
spyware, they can only deal with viruses and trojans
|