BleepingComputer.com: Antivirus, Antimalware, And Antispyware Resources

Here is a list of Virus/Malware related links, software, and resources to help with the removal of Spyware. This list has been created from a variety of sources and anyone is free to copy this list in its entirety for their boards or other purposes. Please note that BleepingComputer does not provide any warranty that these tools will work as advertised or not cause further problems to your computer. Please use only if you understand what you are doing.

Note: At the top of the pages in this site you will sometimes find ads for Spyware Removal Programs which are in no way affiliated with Bleeping Computer. Unfortunately, some of these ads display products that we do not recommend. Before you purchase a program in one of these ads, please refer to this Rogue Anti-Spyware List or ask us before purchasing a product so we can verify it for you. On the other hand, all the products listed below this note can be used with the knowledge that they are consdered reliable by many experts in this topic.


1. Spyware & Malware Removal Utilities

• a² - This is an excellent and highly recommended software for scanning and removing Trojans, Worms, and Dialers.
  
  
  
• Ad-Aware - The original spyware removal tool. It is an essential tool to use alongside Spybot when cleaning your system.
  
  
  
• CWShredder - A tool created by Merijn for the sole purpose of removing the CoolWebSearch Hijacker.
  
  
  
• HijackThis - A Windows Enumeration tool that has become essential to removing certain Spyware and Hijackers. Do not use this tool without expert assistance.
  
  
  
• LSP-Fix - A program that is necessary to remove certain files associated with Spyware and Hijackers.
  
  
  
• MalwareBytes' Anti-Malware[/b] - Must be in everyones security toolkit!
  
  
  
• Spybot - Search & Destroy - An essential tool to use alongside AdAware when cleaning your system.

2. Commercial Spyware and Malware Removal Programs

• Ad-aware - Spyware/Adware removal
  
  
  
• Avast
  
  
  
• Spysweeper - Spyware/Adware removal
  
  
  
• Computer Associates Antivirus Plus
  
  
  
• Dr. Web CureIt
  
  
  
• ESET Nod32
  
  
  
• Kapersky Antivirus
  
  
  
• McAfee Antivirus
  
  
  
• Panda Antivirus
  
  
  
• TrendMicro Antivirus

3. Spyware Protection Programs

• hpguru's HOSTS File - Another Hosts file.
  
  
  
• IE-Spyad - A registry file that adds a long list of known malware domains to your restricted sites section of Internet Explorer.
  
  
  
• SpywareBlaster - A program that locks your browser from running known malware or downloading programs from known malware sites.
  
  
  
• SpywareGuard - A real time spyware/malware protection program that alerts you when malware is trying to install on your computer.
  
  
  
• MVPS Host - A hosts file that will block you from connecting to known malware and adware sites.

4. Free Online/Virus Scanners

• avast! 4 Home Edition - A free full featured antivirus software.
  
  
  
• BitDefender Online Scan - Free online virus scanner.
  
  
  
• AVG Virus Scan - A free full featured antivirus software.
  
  
  
• Avast Free - Free full featured antivirus software.
  
  
  
• Mcafee Online Scan - Free online virus scanner.
  
  
  
• GFI Trojanscan - A free online Trojan Scanner.
  
  
  
• Panda Active Scan - Free online virus scanner.
  
  
  
• RAV Free Online Scan - Free online scanner that allows you to scan a specific file.
  
  
  
• Trend Micro Housecall - A free online virus scanner.
  
  
  
• Virus Total - This site will allow you to submit a file and have it scanned by numerous virus scanners and display the results.
  
  
  
• Jotti's malware scan 2.24 - This site will allow you to submit a file and have it scanned by numerous virus scanners and display the results. The advantage to this site is that it uses the Norman Antivirus Sandbox feature to give you information about what the file does if it can not identify the type of virus it is.

5. Malware/Virus Specific Cleaners or References

• CoolWebSearch Chronicles by Merijn - Necessary article when having trouble cleaning a CWS infection.
  
  
  
• FixSasser - Sasser Removal Tool.
  
  
  
• Kill2ME - "A removal tool specifically for the Look2Me parasite. This tool removes versions 115, 116, 117 118, 120, 121 and 122 on all Windows versions."
  
  
  
• KillBox - Used when trying to remove Look2ME and VX2.BetterInternet.
  
  
  
• Peper Removal Program - Program to remove the Peper Trojan.
  
  
  
• MSBlaster Removal Tool - Tool to remove MSBlaster.
  
  
  
• RapidBlaster Removal Program - A tool to remove RapidBlaster.
  
  
  
• Mcafee Stinger - A program that removes various worms, trojans, and viruses.
  
  
  
• VX2.BetterInternet Finder - Used to remove Look2ME and VX2.BetterInternet versions 123 and 124 (the most recent ones).

6. Reference sites

• Bleeping Computer Windows Startup Programs Database
  
  
  
• Answers that work - A large list of tasks and processes and what they are.
  
  
  
• CLSID listing - A large list of CLSIDs, the characters between the {} in a HijackThis log, and what they are for.
  
  
  
• Doxdesk Parasite Info - A reference site on various Parasites/Malware.
  
  
  
• Google - Need we say more? Just type what you're searching for in the field and hit the button.
  
  
  
• Greatis Startup Application Database - Another database of startup programs.
  
  
  
• Kephyr File Database - A database of file names and their functions.
  
  
• Pacman's Startup Programs List - Pacman's list of startup programs.
  
  
  
• Pacman's Startup Lists for Offline Reading - Downloadable version of Pacman's startup list.
  Alternate site of Pacman's Startup List
  
  
  
• Wintasks Process Library - Large database of processes and what they are.
  
  
  
• Windows Startup Online Database - Large database of startup entries.

7. Tutorials

What is Spyware?

• Understanding Spyware, Browser Hijackers, and Dialers.

Spyware Removal Tools

• Using Ad-aware to remove Spyware/Hijackers from Your Computer.
  
  
  
• Using Spybot - Search & Destroy to remove Spyware from Your Computer.
  
  
  
• How to remove CoolWebSearch with CoolWeb Shredder.
  
  
  
• Using HijackThis to Remove Spyware, Browser Hijackers, and Dialers.

Tools to help prevent Spyware

• The Hosts File and what it can do for you.
  
  
  
• Using IE-Spyad to enhance your privacy and security.
  
  
  
• Using SpywareBlaster to protect your web browser.
  
  
  
• Using SpywareGuard to protect your computer from Spyware/Hijackers.
  
  
  
• Using LSP-Fix to remove unwanted LSPs from your computer.

If there are any more resources that I may have left off, please let me know.

Adaware has a new VX2 Cleaner plugin

http://www.lavasoft.de/software/plugins/vx2cleaner.shtml

Quote

a² Free Trojan Scanner
I personally have used the free version many times over the past few weeks and it works great.

Two sites to help repair damage done by malware and/or common problems with Windows by way of registry files, scripts and other means.

Doug's Windows Tweaks and Tips--most operating systems.

Kelly's Korner--for XP.

One can restore the functionality of utilities native to Windows such as the Registry Editor and sometimes even replace the entire file. For example the Disk Cleanup utility can be replaced in its entirety.

I recently had the problem of Disk Cleanup hanging when first opened and it was supposed to be compressing old files. The appropriate regfile from Kelly's Korner fixed it right up.

Good stuff, thanks Here is some of the stuff I've found tonight.

How to Analyze a HijackThis log - I've just started learning, and this is one of my favorite tutorials.

HJTHotkey - This program is designed to speed up the researching of items in a HijackThis log once it has been posted onto a forum or from a log file. It will run in the system tray and when a hotkey/shortcut key is pressed, it will copy the word that has been selected and automatically search for that word on Google, sysinfo.org, windowsstartup.com, etc depending on the hotkey that is pressed.

So many products, so little time! Folks, having also read the

How did I get infected ? With steps so it does not happen again ! http://www.bleepingcomputer.com/forums/topic2520.html

and being totally convinced of the need for proactive protection, is there any way I can reduce (ideally down to 1) the number of packages I need to buy to cover what my current ad-aware AND spybot S&D AND AVG AND spyblaster AND BlackIce do- something that can run automatically in the background... I have read good things about ZoneAlarm Security Suite, but I imagine that it would not cover all the above. I've asked one of you guys by email already, but I thought I'd open it up to the wider forum.

Thanks for any advice.

Well after being totally paranoid about the whole business , I settled for just Zone Alarm Pro security suit for Firewall and Virus protection. I have to say I am very happy with it BUT I run SpyBot occasionally, Ad-Aware ALL THE TIME, have SpyWareBlaster 3.3 running and Microsoft Beta and SP2 for XP.
EVERYTHING IS FULLY UP TO DATE.

BUT it doesn't stop Cookies & Data Miners being installed and many sites will not run without allowing their install, plus many International sites are not protected from the local cookies etc by the major European or US vendors. Russian News etc.

The Bad news is that after months of trying to find the same answer I came to the conclusion NOTHING exists or probably ever will that does all things for all men!!!
APART From disconnecting from the Net and switching Off The Power!!

THE GOOD NEWS IS!!! I no longer know what a pop up or banner add or unwanted add is, unless I want to. Everything apart from ZA Pro was Free

HOW???? Just followed BC advice and followed Grinlers and other peoples advice.

I have to say that Microsoft Beta runs every morning at 1am, and these days its just normal to get a Zero result.

OH, what you suggest or seek would make the Manufacturer and designer Millionaires over night...... Go On give it a go and I will come in halves with you

Software firewall resources:

www.zonelabs.com ZoneAlarm free-subscription firewall and ZoneAlarm Pro paid-sub version

www.sygate.com Sygate free and Sygate pro paid firewall

www.kerio.com Kerio free firewall

McAfee, Symantec/Norton, Tiny Personal Firewall, Computer Associates, and others provide paid sub versions as well.

Use a router as an additional firewall between you and the Web. Avoid running multiple resident utilities of the same type: limit it to one resident antimalware utility, one resident spyware blocker, and one software firewall and use all others as intermittent scans or online scanners.

Hi everyone. There is a tool available form Microsft recently and very effective based on the 7 times i have used it when cleaning up a pc in person.

Its freely available and seems to be updated continuosly. Please see the following link for the tool. Easy to use as well. Could the experts here please evaluate it ?

http://www.microsoft.com/downloads/details...&displaylang=en

There is an entire forum for Microsoft Anti-Spyware Beta.
Regards,
John

I have tried to update definitions in Ad Aware and all I get is "definition files could not be read".Anybody have any response to this?

Yeah, I had that. Go into the following folder and delete the defs.ref file if you used the default installation location:

C:\Program Files\Lavasoft\Ad-Aware SE Personal

Make sure AdAware is closed before you do this and it woldn't be a bad idea to reboot. Then try updating again. Let me know if that works.

I just tried updating again and it worked.Strange things these.
Thanks.

Okay everyone,

I have installed Spybot S&D and Spyware blaster.(already had AdAware).
I have a Win XP firewall and there is one on PC-cillin 2005.
Should I use yet another one?



Rhubarb

That's a great list and handy. I've also found BHO DEMON helpful

http://www.definitivesolutions.com/bhodemon.htm