FAQ’s Frequently Asked Questions
Why do I need to disable the system restore?
Why do I need to have the ability to view hidden files and folders?
Why do I need to create a folder called “Cleaners” on my desktop?
Why delete temporary files from my computer?
What is the purpose of resetting my Internet Explorer settings to default?
What is Belarc advisor?
What is a computer Virus?
What is Spyware?
What is Malware?
Where can I find out if a Virus is Fake or a Hoax?
How can I backup my files?
Why do I need to disable the system restore?
Answer: System Restore is one of the most important feature of Windows operating system that started to roll in Windows ME. It was still included in other versions since then like Windows 98, Windows Vista and Windows 7. The purpose of this system restore was simply to manually record a point where computer is performing at its best. In times of difficulties like virus infection, system crashes, software error and so on, it can be restore back to its previous point. Unfortunately, some viruses and Trojans can also infect system restore, so if a restore point is infected, there is a possibility that the threats will also be restored unknowingly. This is why disabling system restore is advised by security experts to avoid such situation.
http://www.precisesecurity.com
Answer: Windows 7 utilizes a restore utility that backs up selected files automatically to the C:\_Recovery folder. This means that an infected file could be stored there as a backup file, and VirusScan will be unable to delete these files. You must disable the System Restore Utility to remove the infected files from the C:\_Recovery folder.
www.mcafee.com
Answer: With System Restore in Windows 7, you can restore your computer to a previous state, and you do not lose personal data files (such as Word documents, graphic files, and e-mail). System Restore actively monitors computer file changes and some program file changes to record or store earlier versions before the changes occurred. You do not have to take computer snapshots because System Restore automatically creates identifiable restore points that you can use to revert to a previous time. Restore points are created when significant computer events occur (such as the installation of a program or a driver) and periodically (each day).
To help protect critical computer and program files, System Restore monitors, records, and in some cases copies these files before they are modified. For example, when a procedure or a program (such as an upgrade, an inadvertent user change, a driver installation, or a virus) modifies a critical computer file or program file, System Restore records and saves a copy of the file before the change occurs. If a problem occurs, a restore operation can replace files with previously saved versions of those files. Antivirus programs use auto-detection or scanning mechanisms to monitor critical and personal files on the computer for signs of infection. The antivirus program then takes action to clean, remove, or quarantine (isolate) files that known viruses have infected. System Restore also tracks an antivirus program when it modifies (cleans), moves, or deletes a monitored, critical, computer or program file.
During a restoration, an active antivirus program scans for infected files. If the antivirus program detects any infected files, the antivirus program tries to modify, move, or delete the infected files. If the antivirus program successfully cleans the infected files, System Restore restores the cleaned files. However, if the antivirus software cannot clean a file, the antivirus software deletes or quarantines the file. As a result, the restoration does not work because these actions to the file cause an inconsistent restoration state. As a result, System Restore reverts to the state immediately before the restoration.
Signature files for antivirus programs are updated as viruses become known. As a result, a restoration that did not work several days ago might succeed after the antivirus program is updated. However, if you undo and retry a restoration to a point that succeeded before, the restoration may not work if a new signature or definition detects a virus that the antivirus program cannot clean on a backed-up file.
http://support.microsoft.com/kb/831829
Why do I need to have the ability to view hidden files and folders?
Answer: Some Viruses, Spyware, Malware, and Fakeware will create hidden files and folders on you system that will, Self-Replicate and create more hidden files and folders. The only way to see those kinds of files, are to make the hidden files and folders viewable. In addition, in order to be able to remove some of the temp files stored onto your PC you would have to have the hidden files and folders options enabled.
Why do I need to create a folder called “Cleaners” on my desktop?
Answer: You do not have to create a folder called cleaners on your desktop; In fact you can download the cleaning tools to any folder on your computer. I suggest creating the Cleaners folder for one reason. The reason is so that as you download the tools you need to use to clean your system, the cleaners will be located in one folder and the cleaning tools will be easily accessible.
Why delete temporary files from my computer?
Answer: Temporary files are just that, temporary, they are files that are meant not to be permanent on your computer system. These file are created by just about any application. These files are the primary target for viruses, malware, and spyware; these malicious programs usually get stored in these temporary file locations and attack your computer. In Addition these files are not needed and take up hard disk space and limit disk caching abilities for the computer. So in the end your computer benefits greatly by removing these unnecessary files.
Microsoft defines temporary and temporary internet files as:
The Windows Desktop (Write, etc.) and MDI (multiple document interface) applications (such as Excel) create temporary files to handle necessary user editing.
Because a Desktop application cannot have multiple documents open at once, it must immediately create a temporary file that allows you to "undo" any editing, etc. MDI applications create temporary files only when needed (for related editing), rather than for every worksheet that is open.
When running an MS-DOS standard application under Windows/286, Windows/286 creates a temporary file (for example, ~PIFCHFA.TMP) so it can swap to disk to make room for other applications to use memory.
When printing from Windows or any Windows application with the spooler enabled, Windows creates temporary files on the hard disk. Windows spools the print job to the temporary file and then sends it to the appropriate printer as a background operation.
What is the purpose of resetting my Internet Explorer settings to default?
Answer: Browser hijacking is a type of online fraud. Scammers use malicious software to take control of your computer's Internet browser and change how and what it displays when you're surfing the web. Resetting your internet Explorer settings is a crucial step when trying to eliminate a browser Hijack.
How do I know if my browser has been hijacked?
Answer: Your home page or other settings change on your computer. Links are added that point to websites that you'd usually avoid. You can't navigate to certain web pages, such as antispyware and other security software sites. A seemingly endless barrage of ads pops up on your screen. New toolbars or Favorites are installed that give you icons and links to web pages that you don't want. Your computer runs sluggishly. Malicious software can slow down your computer.
How do I Fix a Browser Hijack?
Answer: following the steps in the PC Cleaning guide will rid you of a browser hijack. Microsoft has a procedure for fixing a browser hijack as well. The procedure is listed below.
Stop cascading pop-up windows.If endless pop-up windows appear on your screen, you'll probably want to stop them first. To do this in Microsoft Windows 7, Windows Vista, Windows XP, or Windows 2000 while using Internet Explorer:
Press CTRL+ALT+DEL, click Task Manager, and then click the Processes tab.
Click IEXPLORE.EXE, and then click the End Process button.
This closes all instances of Internet Explorer. Then you can re-open the program to continue browsing as usual. To help prevent future attacks, you should also have a pop-up blocker turned on. The pop-up blocker is turned on by default.
To confirm that the pop-up blocker is on in Internet Explorer 9 click the gear icon and point to Internet Options. Click the Privacy tab and make sure the box is checked next to Turn on Pop-up Blocker.
If you still experience the other effects of a hijacked web browser, try the following:
Install Microsoft Security Essentials or another antivirus and antispyware program. Microsoft Security Essentials is free software that will help protect your computer from malicious software such as viruses or spyware. Many browser hijacking programs can be identified and removed by downloading, installing, and running Microsoft Security Essentials or a similar tool.
Run the Malicious Software Removal Tool.This can catch some, but not all, kinds of hijacking software.
Reset Internet Explorer settings. If you're using Internet Explorer and your home page has been changed, you can often reset it yourself.
Note If you use Microsoft Security Essentials, Forefront Client Security, Windows Defender, or the Windows Malicious Software Removal Tool and these tools have detected and removed hijacking software from your computer, these tools might change your home page and your search page to help protect against the malicious software.
Disable add-ons. Many browser hijackings come from add-ons, also known as ActiveX controls, browser extensions, browser helper objects, or toolbars. These items can improve your experience on a website by providing multimedia or interactive content, such as animations. However, some add-ons can cause your computer to stop responding or display content that you don't want, such as pop-up ads. Internet Explorer 9 warns you in the notification area of your browser if an add-on is slowing your computer down. You can also view the add-ons that you already have installed and disable the add-ons that you don't want by clicking the gear icon, and then clicking Manage Add-ons.
What is Belarc advisor?
The Belarc Advisor builds a detailed profile of your installed software and hardware, network inventory, missing Microsoft hotfixes, anti-virus status, security benchmarks, and displays the results in your Web browser. All of your PC profile information is kept private on your PC and is not sent to any web server.
What is a computer virus?
Computer viruses are small software programs that are designed to spread from one computer to another and to interfere with computer operation. A virus might corrupt or delete data on your computer, use your email program to spread itself to other computers, or even erase everything on your hard disk. Computer viruses are often spread by attachments in email messages or instant messaging messages. That is why it is essential that you never open email attachments unless you know who it's from and you are expecting it. Viruses can be disguised as attachments of funny images, greeting cards, or audio and video files. Computer viruses also spread through downloads on the Internet. They can be hidden in illicit software or other files or programs you might download. To help avoid computer viruses, it's essential that you keep your computer current with the latest updates and antivirus tools, stay informed about recent threats, run your computer as a standard user (not as administrator), and that you follow a few basic rules when you surf the Internet, download files, and open attachments. Once a virus is on your computer, its type or the method it used to get there is not as important as removing it and preventing further infection.
What is spyware?
Spyware is a general term used to describe software that performs certain behaviors, generally without appropriately obtaining your consent first, such as: •Advertising •Collecting personal information •Changing the configuration of your computer Spyware is often associated with software that displays advertisements (called adware) or software that tracks personal or sensitive information. Trading tracking for services
That does not mean all software that provides ads or tracks your online activities is bad. For example, you might sign up for a free music service, but you "pay" for the service by agreeing to receive targeted ads. If you understand the terms and agree to them, you may have decided that it is a fair tradeoff. You might also agree to let the company track your online activities to determine which ads to show you.
What does Spyware Do?
Other kinds of spyware make changes to your computer that can be annoying and can cause your computer slow down or crash. These programs can change your web browser's home page or search page, or add additional components to your browser you don't need or want. They also make it very difficult for you to change your settings back to the way you had them. Know what you're installing
The key in all cases is whether or not you (or someone who uses your computer) understand what the software will do and have agreed to install the software on your computer. A common trick is to covertly install the software during the installation of other software you want such as a music or video file sharing program. Whenever you install something on your computer, make sure you carefully read all disclosures, including the license agreement and privacy statement. Sometimes the inclusion of unwanted software in a given software installation is documented, but it might appear at the end of a license agreement or privacy statement.
What is Malware?
Malware is short for "malicious software." Malware is any kind of unwanted software that is installed without your adequate consent. Viruses, worms, and Trojan horses are examples of malicious software that are often grouped together and referred to as malware. How to help protect your computer from malware
There are several free ways to help protect your computer against malware: •Make sure automatic updating is turned on to get all the latest security updates. •Keep your firewall turned on. •Don't open spam email messages or click links on suspicious websites. •Download Microsoft Security Essentials, which is free, or another reputable antivirus and anti-malware program (see the warning below). •Scan your computer with the Microsoft Safety Scanner. Warning: Cybercriminals sometimes try to trick you into downloading rogue (fake) security software that claims to protect you against malware. This rogue security software might ask you to pay for a fake product, install malware on your computer, or steal your personal information. Types of malware
Although there is no official breakdown, we can divide malware into several broad categories of malware: adware, spyware, hijackers, toolbars, and dialers. Many, if not most malware programs will fit into more than one category. It is very common for people to use the words adware, spyware, and malware interchangeably. Most products that call themselves spyware or adware removers will actually remove all types of malware. Adware Adware is the class of programs that place advertisements on your screen. These may be in the form of pop-ups, pop-unders, advertisements embedded in programs, advertisements placed on top of ads in web sites, or any other way the authors can think of showing you an ad. The pop-ups generally will not be stopped by pop-up stoppers, and often are not dependent on your having Internet Explorer open. They may show up when you are playing a game, writing a document, listening to music, or anything else. Should you be surfing, the advertisements will often be related to the web page you are viewing.
Spyware Programs classified as spyware send information about you and your computer to somebody else. Some spyware simply relays the addresses of sites you visit or terms you search for to a server somewhere. Others may send back information you type into forms in Internet Explorer or the names of files you download. Still others search your hard drive and report back what programs you have installed, contents of your e-mail client's address book (usually to be sold to spammers), or any other information about or on your computer – things such as your name, browser history, login names and passwords, credit card numbers, and your phone number and address. Spyware often works in conjunction with toolbars. It may also use a program that is always running in the background to collect data, or it may integrate itself into Internet Explorer, allowing it to run undetected whenever Internet Explorer is open.
Hijackers Hijackers take control of various parts of your web browser, including your home page, search pages, and search bar. They may also redirect you to certain sites should you mistype an address or prevent you from going to a website they would rather you not, such as sites that combat malware. Some will even redirect you to their own search engine when you attempt a search. NB: hijackers almost exclusively target Internet Explorer. Toolbars Toolbars plug into Internet Explorer and provide additional functionality such as search forms or pop-up blockers. The Google and Yahoo! toolbars are probably the most common legitimate examples, and malware toolbars often attempt to emulate their functionality and look. Malware toolbars almost always include characteristics of the other malware categories, which is usually what gets it classified as malware. Any toolbar that is installed through underhanded means falls into the category of malware. Dialers Dialers are programs that set up your modem connection to connect to a 1-900 number. This provides the number's owner with revenue while leaving you with a large phone bill. There are some legitimate uses for dialers, such as for people who do not have access to credit cards. Most dialers, however, are installed quietly and attempt to do their dirty work without being detected.
Hoaxes
Trend Micro’s Scam’s and Hoax’s Page
http://www.trendmicro.com/vinfo/hoaxes/default.asp
McAfee Hoax’s Page
http://vil.nai.com/vil/hoaxes.aspx
McAfee states about hoaxes
Virus Hoaxes: Not Just Harmless Pranks
There are a lot of viruses out there. And then there are some viruses that aren't really out there at all. Hoax virus warning messages are more than mere annoyances. After repeatedly becoming alarmed, only to learn that there was no real virus, computer users may get into the habit of ignoring all virus warning messages, leaving them especially vulnerable to the next real, and truly destructive, virus.
Fortunately, Avert tracks virus hoaxes as well as genuine viruses. The next time you receive an urgent virus warning message, check it against the list of known virus hoaxes below. If it's a hoax, chances are you'll find it in our database. And if it's a real virus, we'll probably know about it already, and you'll find it in the McAfee Virus Information Library.
Don't let your guard down! Remember: Never open an email attachment unless you know what it is--even if it comes from someone you know and trust.
Be aware that the people who create viruses can use known hoaxes to their advantage. A good example is the AOL4FREE hoax. This began as a hoax warning about a nonexistent virus. Once it was known that this was a hoax, somebody began to distribute a destructive trojan horse (a trojan horse differs from a virus in that it does not reproduce itself) in a file named AOL4FREE, attached to the original hoax virus warning!
The lessons are clear:
Always remain vigilant Never open a suspicious attachment
