Antispyware Scanners - Run at least one, preferably two - if your system is functioning well enough:
++++++++++++++++++++++++++
Ad-Aware (Win 98/Me/NT/2000/XP)
Download
Ad-Aware 2007 and install it. If you already have Ad-aware 2007, please configure it per instructions below. If you have a previous version of Ad-Aware, please install the newest build
Launch Ad-Aware and update the Definition Files by clicking on 'Check for Updates now' in the lower right hand corner. Then, to run:
- Click on "Scan now"
- Uncheck "Search for negligible risk entries"
- Check "Search for low risk entries"
- Check "Perform a full system scan"
- Click the "Next" button in the lower right hand corner. to begin scanning.
- When the scan has completed, select Next.
- In the Scanning Results window, select the "Scan Summary" tab.
- Check the box next to each "target family" you wish to remove.
- Click next, Click OK.
- Shutdown/restart the computer.
++++++++++++++++++++++++++
SpyBot S&D (Win 95, 98, ME, 2K, XP, 2003, PE, Vista)
Supported Operating Systems - All Versions of Windows including Vista
- Can be integrated into Vista Security Center - Monitors if Spybot-S&D is up-to-date and whether the permanent protection (TeaTimer) is running or not).
Download
Spybot Search & Destroy and install it.
- Run Spybot and allow it to create a backup of your registry when prompted.
- Click on "Search for Updates".
- If any updates are found, place a check mark next to each one.
- Click on "Download Updates".
- Click on "Immunize" [When it detects what has or has not been blocked, block all remaining items].
- Do this by clicking the green plus sign next to immunize at the top.
- Click on "Check for Problems" and if any problems are found, click on "Fix Selected Problems".
- Reboot your computer.
Bleeping Computer's Setup & Configuration Instructions
Tom Coyote's Tutorial & Help
++++++++++++++++++++++++++
Windows Defender (Win XP SP2, Win 2003 SP1+, Vista) - This scanner will remove the Sony XCP DRM rootkit
Windows XP and Windows Server 2003 users can find information and download links for
Windows Defender
Please note: The Microsoft download site will require you to validate your copy of Windows before allowing you to download this program. Only systems that are fully updated with all service packs will be allowed to download.
Supported Operating Systems - Windows Server 2003 Service Pack 1
- Windows XP Service Pack 2
- Vista (it comes installed with the Operating System so you don't need to download it)
- Download and install the Windows Defender by checking the use recommended settings option.
- When the installation has finished, allow the program to automatically update the definitions and perform a quick scan. This will only take a few minutes, but it is not enough to ensure you have a clean system.
- Following the completion of the quick scan, click the white down arrow next to Scan, and then click Full Scan. The Full Scan option will allow Windows Defender to perform an in depth scan of your entire system which is necessary to detect any hidden spyware/adware threats.
- When the full scan is complete, you will be presented with your spyware scan results.
- Take the default action suggested by Windows Defender to deal with all threats found.
- Once you have selected an action for all threats found in the spyware scan results, you will need to reboot your computer.
For more detailed instructions consult
Beyond the Basics Help and How Tos and the
Windows Defender FAQ
Note: Windows Defender will remove the rootkit portion of the Sony XCP DRM software.
++++++++++++++++++++++++++
SUPERAntiSpyware
SUPERAntiSypware (SAS) is free to home users
Supported Operating Systems - Windows 98, ME, 2000, XP, 2003, Vista
System Requirements
- 400Mhz or faster Processor with atleast 256MB RAM
Download and install
SUPERAntiSypware using the default settings
- Double-click the SUPERAntiSpyware desktop icon to launch the program.
- When you are asked to update the program definitions, click Yes.
Only if you are not prompted to update the definitions or already have SAS, select
Check for Updates before scanning.
Program Setup
Select
Preferences | Scanning Control
Check the following
Scanner Options:
- Close browsers before scanning.
- Scan for tracking cookies.
- Terminate memory threats before quarantining.
Click the
Close button to leave the control center screen.
Scanning
- On the main SAS screen, under Scan for Harmful Software select Scan your Computer.
- On the left, make sure your primary drive (normally C:\Fixed Drive) is selected, plus any other hard drives that are connected to your system.
- On the right, under Complete Scan, choose Perform Complete Scan.
- Click Next to start the scan.
- After the scan is complete, a Scan Summary box will appear listing potential threats that were detected. Click OK.
- Check all detected threats, then click "Next".
- A notification will appear that "Quarantine and Removal is Complete". Click OK and then click the Finish to return to the main menu.
- Reboot your computer
Retrieving the scan report
- Relaunch SUPERAntispyware
- Click Preferences | Statistics/Logs
- Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
- If there are several logs, select the most recent and press View log. The SAS scan log will be displayed in your default text editor.
- If you are posting a HJT log, and any threats (excuding cookies) were found - copy and paste the SAS Scan Log results in your HJT topic - along with your HJT log.
- Click Close to exit the program.
If you have questions or need help, please refer the
SUPERAntiSpyware Frequently Asked Questions.
++++++++++++++++++++++++++
Prevx2
Please note: Prevx2 provides the cleanup option only for 30 days of free use, thereafter it will only detect and not cleanup infections.
Supported Operating Systems - Windows 2000, Windows 2003 and Windows XP - a Beta version is available for Vista (32 and 64 bit)
- Download and install Prevx2 by clicking the Download Now button.
- When the installation has finished click on the Start Trial to activate and then reboot your system.
- Allow the installation scan to complete after the reboot.
- If malware is already running then the Process Scan will detect and launch the Cleanup routine.
- Follow the directions on the screen.
==========================