Anti-Malware Scans and Procedures

I will periodically repost this with updated programs and so forth.  I will then edit the old ones with a link to the new one.

Run the programs in order.

How to tell if you are running 32-bit or 64-bit:
If you are running XP, you are almost certainly running 32-bit unless you know you are running 64-bit.
If you are running Vista/7, open the Start menu (Windows icon in the lower left corner of the screen), right-click on "Computer," and select "Properties."  System Type will list 32-bit or 64-bit.


I. Remove the Temp Files
A lot of viruses use temp files to hide in, and anyway there’s no point taking the time to scan files you don’t need.

CCleaner
Good cleaner, includes a scan to remove bad registry keys, which is useful after all the other scans have been run.  But it can only clean files out from the current user directory, not others.

TFC (OldTimer’s Temp File Cleaner)
Can clean temp files for other users and a few other things.  Requires a restart after running.  TFC removes files CCleaner doesn’t & visa versa; run both.


II. Anti-Malware Scans
If you have anti-virus (AV) or anti-malware software on your computer, be sure to disable the active/real-time scanner.  If you have Spybot SD installed, I would recommend removing it.  It used to be very good, but isn’t now, and TeaTimer will slow down your scans drastically.

Malware Bytes
Really good general anti-malware program.  Free version allows you to run on demand scans, paid version has a real-time scanner that continually monitors the computer.  The free version is more than adequate.  Make sure you have the latest updates .  Run a full scan. Reboot the computer if it asks you too.

ComboFix
This is a very effective, but potentially dangerous program.  It may delete files vital to your computer not being a brick (though I have never seen this happen).  If you are not comfortable with this risk, don't run this program.  Please read the guide provided by Bleeping Computer.  If you can't find this download link, it is here.  ComboFix only works on 32-bit computers.  This is the best anti-root-kit tool out there.

Anti-Virus Scan
If you already have paid anti-virus software, run an on-demand, full scan with it.  If you have free AV software, a trial, or your paid AV software will expire in less than three months, I would recommend removing it and replacing it with Microsoft Security Essentials (MSE).  MSE is free from Microsoft; the only requirement is that you have a genuine copy of Windows.  It is a very, very good program.  This is the same engine MS uses for its Front End Corporate product.  Please note that more than one AV program will severely slow down your computer, and is really not recommended.

If you would like to compare MSE, or your current AV program, to others, check out av-comparatives.org.  This is an organization dedicated to testing these scanners against each other.  They are considered an industry standard.

Again, make sure the program is fully updated and run a full scan.  MSE will take a very long time to scan this way, but it is very through.

Eset Online Scanner
The next few scanners are all online scanners.  Some of these require Internet Explorer (IE), some don't.  I would recommend running all of them from IE just so you you don't have to guess.  This scan may be run in any browser, but is fastest in IE.  Make sure "Remove found threats," "Scan archives," (under advanced settings) "Scan for potentially unwanted applications," "Scan for potentially unsafe applications," Enable Anti-Stealth technology" are all checked.  Then start the scan.  After if finishes, check "Remove items from quarantine" and "Uninstall application."

OneCare
Hypothetically, this should be the same as MSE, but it's not.  They each find things the other doesn't.  This scan also deletes more temp files, scans open network ports, and lets you know if you need to defragment the  hard drive.  This is a very long scan, and must be run in IE.  Run a complete scan.

 It may not work on Windows 7 or Vista if it is 64-bit.  If it doesn't work, and you have MSE, skip it.  If it doesn't work and you're running another AV program, disable the AV program on your computer, download and install MSE, and immediately disable MSE's real-time scanner.  As soon as you are done with the scan, remove MSE.

Housecall
TrendMicro's scanner.  Doesn't work as it used to, but it may find something useful.  Optional scan if all the other scanners are finding a bunch of things.  Click the link to download the 32-bit or 64-bit version depending on what your system is.  Click the "Get HouseCall Now" button.  Once it's installed, click "Settings" under the "Scan Now" button.  Check "Run a full scan," click "OK," and then click "Scan Now."

F-Secure Online
Another optional scan.  Mostly seems to find tracking cookies, but again, it could find more if all the others are finding things.  Run a full scan.


III. Extra Security Programs
AV and anti-malware programs are great, but only after you've gotten a virus.  The best way to avoid this hassle is to avoid getting viruses in the first place.  But how do you do that?  The two best methods are to avoid bad sites (or ads), and to make sure you are running the most current versions of your software.

Secunia PSI 2.0 Beta
Secunia PSI is an absolutely essential program.  It scans most of the programs on your computer and makes sure everything is up to date.  Some programs (marked AU) will automatically update.  These include Java, Flash, and Adobe reader — the programs most likely to be exploited to give you a virus.  Most programs it will simply provide you with a direct download link to the latest version.  Occasionally if programs are very out of date, you will need to uninstall them entirely, delete its folder from Program Files (or Program Files (x86)), then install the new version.  The beta version is far more stable on 64-bit machines, and includes the auto-update feature.  I have never had a problem with it and would recommend it highly over the non-beta version.

Firefox Web Browser
Firefox is generally a more secure browser than IE, but that's not why I recommend it.  I recommend it because of the built in anti-phishing defenses (which have saved me from a grievous error once) and the add-ons.
The Web of Trust (WoT) add-on shows safety rankings next to links on major search engines and webmail. "WOT ratings are powered by a global community of millions of trustworthy users who have rated millions of websites based on their experiences."
The Adblock Plus add-on was developed to block annoying ads on the internet.  But many virus writers are using ads to propagate their viruses.  Blocking most internet adds is the single most effective thing you can do to protect yourself against viruses.  The down side is that most of the internet depends on ad revenue to exist, so this is using their services without providing them a way to pay for them.  On the other hand, I feel that a line has been crossed.  Web masters deserve to have income, but not at the expense of my safety or security.  I would recommend adding subscription lists for EasyList and FanBoy's List.


Opera Web Browser
An alternative to Firefox is Opera.  Every other browser basically copies what Opera does.  It is the fastest, most configurable without add-ons, and the most innovative browser.  It has a content blocker (like Adblock Plus) already built in, but it is much more simple and must be manually updated.  There are instructions for adding a filter list here.  WoT is sort of available for Opera.  I have not tested it yet, but I will soon and report.  Personally, I really like Opera.

Google Chrome Web Browser
personally, I'm not fond of Chrome.  It feels like a dumbed down version of Opera to me.  But if you really like it, it's good to know that there is an Adblock add-on for it.  I have heard it is not as good as Adblock Plus for Firefox.  WoT is available for Chrome, too.


That's all for now.  Please feel free to ask questions in the comments.

In the begining....

Hello, welcome to the Next-Realm Tech blog.  My hope is that these posts will be full of useful information about how to do simple, useful things and about nifty programs.  Partly this will just be me linking to programs and citing the people who told me about it.

Why I am doing this

1. I have an almost uncanny ability to find useful programs.  (Usually by listening to a lot of other people smarter than I am).  My job also puts me in a good position to test a lot of the anti-virus tools and know what actually works against the problems people usually have.
    
2. I get asked a lot about procedures for doing things like cleaning viruses.  I’d like to have one place where I know I have it all down where I can point people.  Also, I think this information could help a lot of people and save them time and money, and I like that idea a lot.
   
3. I would like to set myself a project that (hopefully) forces me to be timely and responsible.
   
4. I would like to improve and practice my technical writing.  Being able to write clearly and simply about technical programs and procedures so that anyone may understand the writing is critical for effectively working in IT.  I hope this blog will both help me accomplish that clarity, and maybe even be a reference I can use to show my skill.

Who this blog is written for:

Average computer users (also know as humans).  Far too many blogs about technical things sacrifice clarity for brevity.  Hopefully I’ll be able to outline what I talk about well enough for people who are technical to skim, while still providing full explanations for people who are less sure of their abilities.  Hopefully I will have lots of screen shots.  If you ever need further explanation on any step, mention it in the comments and I’ll try to elaborate.  If you would like me to try to cover a specific topic, send me an email at deramin@next-realm.com.