CompHelpCo

Malware is malicious software, a program running on your computer that does you harm. Sometimes it’s called spyware, sometimes it’s called a virus. Often it’s called something unprintable.

This article is a product of 10 years cleaning malware off computers. If you think you’ve got malware and want to get rid of it, call me. Please feel free to distribute Computer Security as long as you keep it intact and include the copyright and contact information.

How to Make Money with Your Computer

The first malware I ever saw was amazing. A client brought me up to his daughter’s room and started her computer. As soon as it came up, the desktop was covered with porn site windows opening up as fast as they could! His daughter was terrified. I was too!

Some malware watches what you do with your computer, what Web sites you go to, who you send email to…, and sends this information to advertisers. That’s why it’s called “spyware”: it spies on you. Advertisers use this information to profile you so they can send you ads that you will be interested in. Advertisers are willing to pay big bucks for this kind of information.

The chances that you will click on a random Web ad are 1 in 200. If they know something about you, the chances you will click on it rise to 1 in 5. Your profile is worth a lot of money.

The problem of malware is growing and growing. THEY are making money with your computer.

The first symptom of malware is your computer slows down. That’s because it is now the unwilling host to malware programs. It takes forever to boot up, forever for programs to start, forever to shut down.

Most malware is not illegal because you consented to it. When you downloaded that free weather forecasting program, somewhere in the process it presented its terms and conditions to you and you clicked on the “I Agree” button. Somewhere in those terms and conditions was a notation that said you consent to their malware.

Another big symptom of a malware invasion is ads that just appear on your screen when you’re not doing anything at all. You’re thinking about the next sentence in your letter to your sister when POW! the University of Phoenix wants you to enroll.

The third big symptom of malware is your Web browser won’t go where you want it to go. You try to go to Google and it sends you to CoolWebSearch.

One might think the solution is to scan your computer with “anti-malware” programs. Don’t! There are dozens of “anti-malware” programs out there with very powerful-sounding names like Windows Antivirus 2010. Most of them give you malware! The money is just too good to resist. There is even one “malware removal tool” that won’t stop sending you pop-up ads and won’t remove itself until you pay them to remove it! Cyber-blackmail!

Once your computer gets infected, anti-malware tools are useless. The malware digs itself in deep and it takes an expert to remove it.

Sometimes removing malware can leave the computer in worse shape than before the problem was fixed. Really. Before removal, the computer was running slow but at least you could still get your email. After removal, sometimes your computer can’t get to the Internet at all. Malware does serious damage to computer system files and removing the bad stuff leaves the good stuff in need of real repair. This happens in about 5% of the cases I see.

There are two legitimate, good, and free malware removal tools:

Spybot Search & Destroy

http://majorgeeks.com/download2471.html

AVG Free

http://majorgeeks.com/download886.html

Microsoft offers Microsoft Security Essentials. It is well-reputed but I don't think it's as good as AVG Free.

None of these programs are 100% effective. When I get a machine to clean, I run up to five different scanners and even then sometimes there is still malware left that can’t be cleaned. Removing malware is a lot of work.

Stay away from these very popular malware carriers:

Comet Cursor
CoolWWWSearch
Gator
Grokster
HotBar
KaZaa
LimeWire
MyWebSearch
Morpheus
Spyware Assassin
Those cute little animated icons.

Malware carriers are often very popular and some of them do good things, but they come with hidden trouble. And be especially wary of programs that claim to be removal tools. For every legitimate tool there are twelve bad ones.

Your computer probably became infected by malware in more than one way. Here's how your computer can become infected.

The point is, there are lots of ways to get malware. You can get it through your actions, or through your inaction. Once one malware program is running on your computer, it lowers your computer’s defenses and allows others to come on board too.

Malware starts out slowing your machine down a little bit, then a little more…

Soon your machine can’t do a thing. Once your machine is limping along or crashing, it has passed beyond what mortal civilians can do to clean it and it’s time to take it to the doctor.

The September 2004 issue of Consumer Reports had a great cover story, “Protect Yourself Online.” I highly recommend you go to your public library and read the article. Here are the facts about computer security today and lots of things Consumer Reports didn’t tell you.

You absolutely must have antivirus software, and it has to be up-to-date or guaranteed you will get a virus. It is only a matter of a week or so before your machine gets infected.

Antivirus software will cost you $90 and it will keep your clean machine clean. Removing a virus from a machine that’s infected will cost you $250. Do the math.

Norton and McAfee are the “big boys” in the anti-malware game. Malware writers (“the bad guys”) test their new malware against these programs to make sure they can circumvent their protection. If you’re experiencing a slow computer and it has Norton or McAfee on it, removing it will make your computer run faster. Then install AVG Free.

Macintosh? Mac’s get malware, just not as much. This is not because Mac’s are safer, but because there aren’t enough of them to make it worth anyone’s time. I have cleaned viruses from Mac’s, but until Macintosh is more than 4% of the computer market, a Mac is safe.

A “firewall” watches your Internet data going in and out and prevents communication from happening if it shouldn’t. Modern PC’s and Mac’s all have built-in firewalls. They are the ones I recommend, and again, you must have one.

There are other firewalls available: Zone Alarm, Black Ice, etc. These products are good if you know how to use them and that’s the problem. Civilians do not know what to do when the firewall puts up an “alert.” They almost always make the wrong choice, and then they wind up unprotected. Worse, these firewall products slow your computer and Internet connection down so even if they’re working, they get in the way.

If your home or office has a “router” between your machine and the Internet, you can relax a bit on firewalls. The router has a built-in firewall so you’re protected.

What if you’ve got an older computer? Are you ready for some bad news? Older operating systems were just not written with security in mind. It’s a lot like driving an older car before seat belts and air bags. If your privacy and data are worth anything to you, you’ll move up to Windows 7 or OS X on your Mac.

Protecting yourself from malware is complicated. But if you’re one of the many families or companies that have called me back more than once to remove malware, you’ll want to follow these suggestions to protect yourself.

Set your Internet Security. Do it. This is important. See Part 4, following.

If the window or email says “Malware Alert!” or some-such, close it. Click the “X” in the corner. When you see a window that says “Your computer may be infected…,” close that window by only clicking the “X” in the corner. And, your computer is infected, by the way.

Get Spybot Search & Destroy. Spybot is great and free. Download it, install it, run it, get the updates, and if your computer isn’t too badly infected, your malware problems are solved for the moment. Run Spybot weekly. You’ll be amazed at how much malware you pick up each week.

Update, Update, Update. Malware exploits holes in your computer’s security. As holes are found and fixed, Apple and Microsoft release “Critical Updates” for your machine to automatically install. Install them all, every time. Set Automatic Updates to run daily. Microsoft releases updates at least monthly (on the 2^nd Tuesday of the month) and other times when necessary.

When you see the text, “Updates are ready for your computer…” with the yellow shield icon, you know Microsoft is trying to update your computer.

If you don’t see the “Updates…” prompt at least once a month, your computer needs serious updating, it is years out-of-date.

Other popular programs that need updating are Adobe Reader, Java, and iTunes. The latest versions of these programs all update themselves when a hole is found and fixed. Get the latest versions of these programs by going to their respective Web sites and installing them.

IM with care. The people who call me back again and again to remove malware are all people whose teenagers do a lot of instant messaging.

If it’s free, it’s probably bad. Not to be repetitive, but don’t download free clock-setting software, music sharing software, animated icons, weather info, search assistants…

Malware is impossible to completely prevent because you can infect yourself. All the home security systems in the world won’t protect you if you open the door to a thief. The same applies to a computer. To really protect yourself you have to have AVG, run Spybot once a week, and be careful all the time. Sorry about that.

I have a low opinion of AOL Antispyware and if you have the option, skip this product. Having it only gives one a false sense of security.

Be very suspicious of anti-malware programs not mentioned here. There are many ad blocker, spy killer, virus cleaner programs that are themselves malware. For example, Spy Hunter does indeed protect against some malware, but it pushes its own pop-up ads at you. Spyware Assassin is just that, a malware program that assassinates your computer.

There is a program out there called Spy Sweeper. Though it is a legitimate anti-malware product, I have found it to be largely ineffective. Some Internet Service Providers give away Spy Sweeper to people who ask for it. In my humble opinion, don’t waste your time unless you want a false sense of security.

Your browser should be set to high security, but it probably isn’t. You need to do this.

4. Click on the “Reset all zones to default level” button at the bottom. This sets your security for all four kinds of Internet sites. Good job so far.

6. Set the slider to “Medium High”. If you don’t see a slider, click the “Default” button first, then set the slider to “Medium High.”

7. If you have a “Pop-up Blocker” choice, make sure it is checked to block pop-ups.

Unfortunately that’s not all there is to it. With the settings now set in your browser, a drive-by infection can still try to infect your computer, but now it will have to ask your permission! This is what one might look like:

And stay away from that Web site. They have shown themselves for what they truly are.

There are other browsers out there to choose from. Research “Browser Security Ratings” before choosing one. Some are easier to hack than others.

The bad guys are not just high school kids, they’re pros. Organized crime is into the Internet in a big way. The most egregious method yet of stealing with a computer has come to be called “phishing.” In it, you receive an email from a bank or someone you do business with asking you to log on to their Web site and confirm your account information.

That email was not really from Bank of America, or eBay, or Schwab, or the IRS. It only looked like it came from there.

It is very easy to fake where an email is from. I do it myself every Christmas when my kids receive an email from Santa@NorthPole.np.

It is very easy to set up a fake Web site. Just because a site looks and sounds sincere doesn’t mean it is sincere. Check the address at the top of your browser. What you see there is where you are, not what it says on the Web page. Phishing sites will have “similar sounding” names like:

MICR0S0FT.com Those are zeroes, not the letter “o” in “MICROSOFT”. See them?

Be suspicious. Call your bank on the phone and verify that they need your account info. Use the telephone number you have, not the one in the email.

Poor people can be victims too. Thieves do not only steal thousands from large accounts. They also steal dollars and cents from small accounts. This has happened to me twice. If you see an unknown transaction on your credit card, even if it’s only for a buck or two, question it! Your bank will be happy to help you.

Don’t tell your password to anyone, ever. The good guys will never ask for it.

The good guys know your name. The bad guys don’t. A good sign of a phish is it is generic: Dear Account Holder, Dear PayPal User,… This may change, however, as phishers get better at it.

Make up a “strong” password. The length of the password is not what makes it strong. The variety of the characters is. Make up a password that is not going to be in a dictionary. Something with upper and lower-case letters, numbers, and a punctuation mark or two. “23skiDoo!” “GoRedSox2012!” “5000dollars?” Don’t use these, but you get the idea.