Here is a list of Virus/Malware related links, software, and resources to help with the removal of Spyware. This list has been created from a variety of sources and anyone is free to copy this list in its entirety for their boards or other purposes. Please note that BleepingComputer does not provide any warranty that these tools will work as advertised or not cause further problems to your computer. Please use only if you understand what you are doing.

Note: At the top of the pages in this site you will sometimes find ads for Spyware Removal Programs which are in no way affiliated with Bleeping Computer. Unfortunately, some of these ads display products that we do not recommend. Before you purchase a program in one of these ads, please refer to this Rogue Anti-Spyware List or ask us before purchasing a product so we can verify it for you. On the other hand, all the products listed below this note can be used with the knowledge that they are consdered reliable by many experts in this topic.


1. Spyware & Malware Removal Utilities

• a² - This is an excellent and highly recommended software for scanning and removing Trojans, Worms, and Dialers.
  
  
• Ad-Aware - The original spyware removal tool. It is an essential tool to use alongside Spybot when cleaning your system.
  
  
• CWShredder - A tool created by Merijn for the sole purpose of removing the CoolWebSearch Hijacker.
  
  
• HijackThis - A Windows Enumeration tool that has become essential to removing certain Spyware and Hijackers. Do not use this tool without expert assistance.
  
  
• LSP-Fix - A program that is necessary to remove certain files associated with Spyware and Hijackers.
  
  
• Spybot - Search & Destroy - An essential tool to use alongside AdAware when cleaning your system.

2. Commercial Spyware and Malware Removal Programs

• Ad-aware - Spyware/Adware removal
  
  
• Spysweeper - Spyware/Adware removal
  
  
• Computer Associates EZ Antivirus
  
  
• Kapersky Antivirus
  
  
• McAfee Virusscan
  
  
• Panda Antivirus
  
  
• TrendMicro Antivirus

3. Spyware Protection Programs

• hpguru's HOSTS File - Another Hosts file.
  
  
• IE-Spyad - A registry file that adds a long list of known malware domains to your restricted sites section of Internet Explorer.
  
  
• SpywareBlaster - A program that locks your browser from running known malware or downloading programs from known malware sites.
  
  
• SpywareGuard - A real time spyware/malware protection program that alerts you when malware is trying to install on your computer.
  
  
• MVPS Host - A hosts file that will block you from connecting to known malware and adware sites.

4. Free Online/Virus Scanners

• avast! 4 Home Edition - A free full featured antivirus software.
  
  
• BitDefender Online Scan - Free online virus scanner.
  
  
• AVG Virus Scan - A free full featured antivirus software.
  
  
• Avast Free - Free full featured antivirus software.
  
  
• Mcafee Online Scan - Free online virus scanner.
  
  
• GFI Trojanscan - A free online Trojan Scanner.
  
  
• Panda Active Scan - Free online virus scanner.
  
  
• RAV Free Online Scan - Free online scanner that allows you to scan a specific file.
  
  
• Trend Micro Housecall - A free online virus scanner.
  
  
• Virus Total - This site will allow you to submit a file and have it scanned by numerous virus scanners and display the results.
  
  
• Jotti's malware scan 2.24 - This site will allow you to submit a file and have it scanned by numerous virus scanners and display the results. The advantage to this site is that it uses the Norman Antivirus Sandbox feature to give you information about what the file does if it can not identify the type of virus it is.

5. Malware/Virus Specific Cleaners or References

• CoolWebSearch Chronicles by Merijn - Necessary article when having trouble cleaning a CWS infection.
  
  
• FixSasser - Sasser Removal Tool.
  
  
• Kill2ME - "A removal tool specifically for the Look2Me parasite. This tool removes versions 115, 116, 117 118, 120, 121 and 122 on all Windows versions."
  
  
• KillBox - Used when trying to remove Look2ME and VX2.BetterInternet.
  
  
• Peper Removal Program - Program to remove the Peper Trojan.
  
  
• MSBlaster Removal Tool - Tool to remove MSBlaster.
  
  
• RapidBlaster Removal Program - A tool to remove RapidBlaster.
  
  
• Mcafee Stinger - A program that removes various worms, trojans, and viruses.
  
  
• VX2.BetterInternet Finder - Used to remove Look2ME and VX2.BetterInternet versions 123 and 124 (the most recent ones).

6. Reference sites

• Answers that work - A large list of tasks and processes and what they are.
  
  
• CLSID listing - A large list of CLSIDs, the characters between the {} in a HijackThis log, and what they are for.
  
  
• Doxdesk Parasite Info - A reference site on various Parasites/Malware.
  
  
• Google - Need we say more? Just type what you're searching for in the field and hit the button.
  
  
• Greatis Startup Application Database - Another database of startup programs.
  
  
• Kephyr File Database - A database of file names and their functions.
  
• Pacman's Startup Programs List - Pacman's list of startup programs.
  
  
• Pacman's Startup Lists for Offline Reading - Downloadable version of Pacman's startup list.
  Alternate site of Pacman's Startup List
  
  
• Wintasks Process Library - Large database of processes and what they are.
  
  
• Windows Startup Online Database - Large database of startup entries.

7. Tutorials

What is Spyware?

• Understanding Spyware, Browser Hijackers, and Dialers.

Spyware Removal Tools

• Using Ad-aware to remove Spyware/Hijackers from Your Computer.
  
  
• Using Spybot - Search & Destroy to remove Spyware from Your Computer.
  
  
• How to remove CoolWebSearch with CoolWeb Shredder.
  
  
• Using HijackThis to Remove Spyware, Browser Hijackers, and Dialers.

Tools to help prevent Spyware

• The Hosts File and what it can do for you.
  
  
• Using IE-Spyad to enhance your privacy and security.
  
  
• Using SpywareBlaster to protect your web browser.
  
  
• Using SpywareGuard to protect your computer from Spyware/Hijackers.
  
  
• Using LSP-Fix to remove unwanted LSPs from your computer.

If there are any more resources that I may have left off, please let me know.

Adaware has a new VX2 Cleaner plugin

http://www.lavasoft.de/software/plugins/vx2cleaner.shtml

a² Free Trojan Scanner
I personally have used the free version many times over the past few weeks and it works great.

Two sites to help repair damage done by malware and/or common problems with Windows by way of registry files, scripts and other means.

Doug's Windows Tweaks and Tips--most operating systems.

Kelly's Korner--for XP.

One can restore the functionality of utilities native to Windows such as the Registry Editor and sometimes even replace the entire file. For example the Disk Cleanup utility can be replaced in its entirety.

I recently had the problem of Disk Cleanup hanging when first opened and it was supposed to be compressing old files. The appropriate regfile from Kelly's Korner fixed it right up.

Good stuff, thanks Here is some of the stuff I've found tonight.

How to Analyze a HijackThis log - I've just started learning, and this is one of my favorite tutorials.

HJTHotkey - This program is designed to speed up the researching of items in a HijackThis log once it has been posted onto a forum or from a log file. It will run in the system tray and when a hotkey/shortcut key is pressed, it will copy the word that has been selected and automatically search for that word on Google, sysinfo.org, windowsstartup.com, etc depending on the hotkey that is pressed.

So many products, so little time! Folks, having also read the

How did I get infected ? With steps so it does not happen again ! http://www.bleepingcomputer.com/forums/topic2520.html

and being totally convinced of the need for proactive protection, is there any way I can reduce (ideally down to 1) the number of packages I need to buy to cover what my current ad-aware AND spybot S&D AND AVG AND spyblaster AND BlackIce do- something that can run automatically in the background... I have read good things about ZoneAlarm Security Suite, but I imagine that it would not cover all the above. I've asked one of you guys by email already, but I thought I'd open it up to the wider forum.

Thanks for any advice.

Well after being totally paranoid about the whole business , I settled for just Zone Alarm Pro security suit for Firewall and Virus protection. I have to say I am very happy with it BUT I run SpyBot occasionally, Ad-Aware ALL THE TIME, have SpyWareBlaster 3.3 running and Microsoft Beta and SP2 for XP.
EVERYTHING IS FULLY UP TO DATE.

BUT it doesn't stop Cookies & Data Miners being installed and many sites will not run without allowing their install, plus many International sites are not protected from the local cookies etc by the major European or US vendors. Russian News etc.

The Bad news is that after months of trying to find the same answer I came to the conclusion NOTHING exists or probably ever will that does all things for all men!!!
APART From disconnecting from the Net and switching Off The Power!!

THE GOOD NEWS IS!!! I no longer know what a pop up or banner add or unwanted add is, unless I want to. Everything apart from ZA Pro was Free

HOW???? Just followed BC advice and followed Grinlers and other peoples advice.

I have to say that Microsoft Beta runs every morning at 1am, and these days its just normal to get a Zero result.

OH, what you suggest or seek would make the Manufacturer and designer Millionaires over night...... Go On give it a go and I will come in halves with you

Software firewall resources:

www.zonelabs.com ZoneAlarm free-subscription firewall and ZoneAlarm Pro paid-sub version

www.sygate.com Sygate free and Sygate pro paid firewall

www.kerio.com Kerio free firewall

McAfee, Symantec/Norton, Tiny Personal Firewall, Computer Associates, and others provide paid sub versions as well.

Use a router as an additional firewall between you and the Web. Avoid running multiple resident utilities of the same type: limit it to one resident antimalware utility, one resident spyware blocker, and one software firewall and use all others as intermittent scans or online scanners.

Hi everyone. There is a tool available form Microsft recently and very effective based on the 7 times i have used it when cleaning up a pc in person.

Its freely available and seems to be updated continuosly. Please see the following link for the tool. Easy to use as well. Could the experts here please evaluate it ?

http://www.microsoft.com/downloads/details...&displaylang=en

There is an entire forum for Microsoft Anti-Spyware Beta.
Regards,
John

I have tried to update definitions in Ad Aware and all I get is "definition files could not be read".Anybody have any response to this?

Yeah, I had that. Go into the following folder and delete the defs.ref file if you used the default installation location:

C:\Program Files\Lavasoft\Ad-Aware SE Personal

Make sure AdAware is closed before you do this and it woldn't be a bad idea to reboot. Then try updating again. Let me know if that works.

I just tried updating again and it worked.Strange things these.
Thanks.

Okay everyone,

I have installed Spybot S&D and Spyware blaster.(already had AdAware).
I have a Win XP firewall and there is one on PC-cillin 2005.
Should I use yet another one?



Rhubarb

That's a great list and handy. I've also found BHO DEMON helpful

http://www.definitivesolutions.com/bhodemon.htm

Boopme,

Thanks a lot. I'll be sure to give BHO Demon a try.




Rhubarb

have just installed BHO Demon it gave me a list, a couple of yahoo serch sites and norton updater. does that sound like the right sort of stuff that should be in there.

cheers

Hmm...

More ads,etc. Having second thoughts.

Thanks for the info.

Rhubarb

A post here mentions Sygate Firewall. I heard that Sygate has recently been bought by Symantec so the free version won't be supported anymore.
Next thing, is http://www.fixsasser.com/ the website for the FixSasser tool. I'd like to include a link to its main page on my website.

Not a fan of SpywareDoctor are you grinler?

Hi Grinler

What have you to say about the tool anti spyware doctor (v 3.8)?

I hope you tell me something.

Regards,

Darthy

Darthy,
Do you have a link to anti spyware doctor?
I can't find anything on it.
Is it spelled correctly?

You are right, it is not. The right spelling is [b]Spyware Doctor.

You have to excuse me. I only speak english as my second language, because I'm portuguese.

Regards,

Darthy

Excuse me my question tg1911:

Do you know to speak anymore language than yours?

Best regards,

Darthy

Sorry Darthy, only English.
I can't help you out too much, with Spyware Doctor, because I don't use the program.
It rates pretty high, in different reviews on the internet.
Several of the members here, use it.
I can't remember any complaints.

I use freeware programs, for my spyware problems.
We have a list of several good ones, here:
Freeware Replacements For Common Commercial Apps

Hi tg1911

Let's don't talk about this anymore. I'm sorry too about my stupid question.

Thanks for the link.

Darthy

Thanks Elendil,

I'll check it out. Sorry so long to get back to you.



rhubarb

Spyware Doctor SUX if your using the free version. Itll give you false positives and direct you to its "homepage" telling youll itll only fix the "false positives" if you purchase the full program. For me personaly, it told me that the VPN \ CLIENT I needed was a very high risk virus. They made it sound real scary. And than of course directed me right to the site to purchase the full paid version.No other program has ever suggested the VPN services are trojans\malware... why would they? To me it " Spyware Doctor " is malware as it tricks you into buying their product. Also watch out for the Google toolbar thats bundled with the installation package .. If you click next to fast youll end up installing it ( probley accidently) as I did. Anyways thats my opinions on that.. RAY

Thanks Ray,

Spyware Doctor was one I always wonderd about.
I had Google toolbar a long time ago,but got rid of it.


rhubarb

Since AOL is paying Kaspersky Labs big bucks to use their AV engine with an AOL skin, can we add Active Virus Shield to the list of free AV programs? I'm fairly certain it's the most effective AV program you can get for free.

I think it would be good if we could add it to the list of Freeware Replacements for Commercial Apps thread, too.

Having tried the Active Virus Shield, I would not add it to the list. It is malware/spyware. Any AOL product is a virus in itself.

You're going to have to back that up with a very reputable source for me to not dismiss that claim outright.

There are some concerns that the EULA could allow AOL to display ads on it in later releases, but as it stands now the program is only differs from retail Kaspersky by having an AOL skin, an AOL toolbar (not required for install), and the lack of an integrated browser AV plugin. If it were a virus or spyware I sincerely doubt it would be hosted on majorgeeks, softpedia, zdnet, etc. And if it had malware components then the Spysweeper installation on my test bench would have likely picked up on it.

I have to agree that calling Active Virus Shield and thus Kaspersky malware/spyware is delusional, since KAV is my AV of choice. Maybe calling AOL that is tongue in cheek?

Anyway I've also considered having it put on the list, and made some notes on it the other day. My main problem with it is that it is only free for a year, like the EZArmor suite that CA Associates used to(?) offer. Following are my quicknotes and sorry they aren't formatted very well

I was going to do more research on this before posting, but thought at least this much needs to get out.

The website has changed. Unfortunately the new web address doesn't appear to be working. The new web address is listed as: http://www.hosts-file.net/

Orange Blossom

Fixed