Reformat or wipe?

Thanks for the advice and info below - rather than stretch
the thread, I would be even more grateful for some answers
to these questions:

1 Is it PREFERABLE to wipe the HDD or go through malware
removal proceses? I don't care about losing data, I just
want to know whether reformating is relatively quick and
easy and not likely to have any adverse effects on my
system (assuming it's a fairly standard system to save
time). Malware removal appears to be laborious and often
not 100% effective. A reformat would be "the ultimate
weapon", right?

2 What's the best malware protetion for broadband users
(pipex is my isp)? I used Zonealarm before, and liked
it. Is this sufficient to keep spyware, tojans, etc at
bay? Opinions appreciated.

Thanks again.

Dave
Mon Jul 12 10:49:58 CDT 2004

"Alex" <anonymous@discussions.microsoft.com> wrote in message
news:2a9f501c46824$c8e79cb0$a601280a@phx.gbl...
> Thanks for the advice and info below - rather than stretch
> the thread, I would be even more grateful for some answers
> to these questions:
>
> 1 Is it PREFERABLE to wipe the HDD or go through malware
> removal proceses? I don't care about losing data, I just
> want to know whether reformating is relatively quick and
> easy and not likely to have any adverse effects on my
> system (assuming it's a fairly standard system to save
> time). Malware removal appears to be laborious and often
> not 100% effective. A reformat would be "the ultimate
> weapon", right?

reformatting is the sure way to be rid of the malware. if you can easily
copy off data you need and don't have lots of special applications this is
often quicker.

>
> 2 What's the best malware protetion for broadband users
> (pipex is my isp)? I used Zonealarm before, and liked
> it. Is this sufficient to keep spyware, tojans, etc at
> bay? Opinions appreciated.

a firewall alone is not enough protection unless you are very careful with
your surfing and mail. a good frequently updated antivirus program that
scans incoming mail is also a good idea (i prefer to have my isp scan it so
i don't even see the obviously infected ones). i also prefer hardware
firewalls that flat stop all the port scans and non-forwarded ports before
they ever get to a lan side box. for those who insist on surfing to unknown
sites something that also stops installation of adware and spyware is also a
good idea... some new av products are including this, check carefully before
purchasing more than you need.

Sejod
Mon Jul 12 10:53:37 CDT 2004

Question 1. Format would fix it but it will erase
EVERYTHING on the hard drive And you will have to
reinstall Windows. Malware or spyware usally can be
removed using a good tool such as Spybot (free) or Adware
($$$). I have had systems where the only way to fix it was
a reinstall of the OS.
Questiion 2. There is no quick fix. More than one type
of software is required. You need Virus protection and
spyware protection. I use Spybot on all of my users PC's


>-----Original Message-----
>Thanks for the advice and info below - rather than
stretch
>the thread, I would be even more grateful for some
answers
>to these questions:
>
>1 Is it PREFERABLE to wipe the HDD or go through malware
>removal proceses? I don't care about losing data, I just
>want to know whether reformating is relatively quick and
>easy and not likely to have any adverse effects on my
>system (assuming it's a fairly standard system to save
>time). Malware removal appears to be laborious and often
>not 100% effective. A reformat would be "the ultimate
>weapon", right?
>
>2 What's the best malware protetion for broadband users
>(pipex is my isp)? I used Zonealarm before, and liked
>it. Is this sufficient to keep spyware, tojans, etc at
>bay? Opinions appreciated.
>
>Thanks again.
>.
>

Lawrence
Mon Jul 12 10:57:41 CDT 2004

"Alex" <anonymous@discussions.microsoft.com> wrote in message
news:2a9f501c46824$c8e79cb0$a601280a@phx.gbl...
> Thanks for the advice and info below - rather than stretch
> the thread, I would be even more grateful for some answers
> to these questions:
>
> 1 Is it PREFERABLE to wipe the HDD or go through malware
> removal proceses? I don't care about losing data, I just
> want to know whether reformating is relatively quick and
> easy and not likely to have any adverse effects on my
> system (assuming it's a fairly standard system to save
> time). Malware removal appears to be laborious and often
> not 100% effective. A reformat would be "the ultimate
> weapon", right?
>
> 2 What's the best malware protetion for broadband users
> (pipex is my isp)? I used Zonealarm before, and liked
> it. Is this sufficient to keep spyware, tojans, etc at
> bay? Opinions appreciated.
>

Reformatting and reinstalling everything can be a large task. Malware
removal has a good percentage of getting your computer back to normal,
though there are cases where this is not the case and you should be apprised
of that. If you would like to go the malware removal process, let me know
and I will give you steps to get started with.

As for the protection on your machine you should have the following running:

Antivirus that will scan incoming and outgoing emails as well as having
real-time protection.

Firewall with application monitoring - Kerio makes a good product.

Spywareblaster - This will immunize your Internet Explorer so that it can
not run known malware activex controls. You can skip this step and just use
Firefox to avoid these issues. Spywareblaster tutorial can be found here:

http://www.bleepingcomputer.com/forums/index.php?showtutorial=49

Spybot - Search & Destroy : This program should be used weekly as a scanner
for malware. When you install it you should also install the Teatimer app
as this acts as a real time scanner for malware. Tutorial can be found
here:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=43

Ad-Aware - Should be used in conjunction with spybot for scanning your
computer. Tutorial can be found here:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=48

IE-Spyad - THis program will add a long list of known malware sites into
your restricted sites zone. Tutorial can be found here:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=53

Hope this helps.

--
Lawrence Abrams
http://www.bleepingcomputer.com
Source for Original Content, Tutorials, and Support for the beginning
computer user.

Matt
Mon Jul 12 13:47:13 CDT 2004

Alex,
I suggest you read Jesper M. Johansson's article at
http://www.microsoft.com/technet/community/columns/secmgmt/default.mspx .
Then decide which is best given your situation.
--
Matt Clapham
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.

"Alex" <anonymous@discussions.microsoft.com> wrote in message
news:2a9f501c46824$c8e79cb0$a601280a@phx.gbl...
> Thanks for the advice and info below - rather than stretch
> the thread, I would be even more grateful for some answers
> to these questions:
>
> 1 Is it PREFERABLE to wipe the HDD or go through malware
> removal proceses? I don't care about losing data, I just
> want to know whether reformating is relatively quick and
> easy and not likely to have any adverse effects on my
> system (assuming it's a fairly standard system to save
> time). Malware removal appears to be laborious and often
> not 100% effective. A reformat would be "the ultimate
> weapon", right?
>
> 2 What's the best malware protetion for broadband users
> (pipex is my isp)? I used Zonealarm before, and liked
> it. Is this sufficient to keep spyware, tojans, etc at
> bay? Opinions appreciated.
>
> Thanks again.

sgopus
Mon Jul 12 13:56:07 CDT 2004

Of all the responses, I like this one best, as it mentions
reformatting is one way to deal with malware/spyware, and
it also mentions reformatting will not stop you from
getting it again, so If you get a hard one, that just will
not allow itself to be removed, yes reformat.
before you do this, consider the other possibilities and
how to not get the darn thing in the first place.
spyware blaster, stops most of these, from installing, a
hardware firewall along with a software firewall, helps
big time., the rest is safe browsing, and what is that you
ask, well to tell the truth, these days I don't know.
some suggestions are do not browse the internet as admin.
do not use Microsoft IE, until the next patch they say.





>-----Original Message-----
>"Alex" <anonymous@discussions.microsoft.com> wrote in
message
>news:2a9f501c46824$c8e79cb0$a601280a@phx.gbl...
>> Thanks for the advice and info below - rather than
stretch
>> the thread, I would be even more grateful for some
answers
>> to these questions:
>>
>> 1 Is it PREFERABLE to wipe the HDD or go through
malware
>> removal proceses? I don't care about losing data, I
just
>> want to know whether reformating is relatively quick and
>> easy and not likely to have any adverse effects on my
>> system (assuming it's a fairly standard system to save
>> time). Malware removal appears to be laborious and
often
>> not 100% effective. A reformat would be "the ultimate
>> weapon", right?
>
>reformatting is the sure way to be rid of the malware.
if you can easily
>copy off data you need and don't have lots of special
applications this is
>often quicker.
>
>>
>> 2 What's the best malware protetion for broadband users
>> (pipex is my isp)? I used Zonealarm before, and liked
>> it. Is this sufficient to keep spyware, tojans, etc at
>> bay? Opinions appreciated.
>
>a firewall alone is not enough protection unless you are
very careful with
>your surfing and mail. a good frequently updated
antivirus program that
>scans incoming mail is also a good idea (i prefer to have
my isp scan it so
>i don't even see the obviously infected ones). i also
prefer hardware
>firewalls that flat stop all the port scans and non-
forwarded ports before
>they ever get to a lan side box. for those who insist on
surfing to unknown
>sites something that also stops installation of adware
and spyware is also a
>good idea... some new av products are including this,
check carefully before
>purchasing more than you need.
>
>
>.
>

Stan
Mon Jul 12 14:38:09 CDT 2004

Formatting the HDD is easy and quick. The problem is reinstalling everything
especially if you don't have all the software that came with the system.
Printers, scanners, etc. usually have their own software; do you have all
that software? Even if you have all the software you still have to go to all
the websites to get updates/drivers. If the system is old finding the
updates can be a chore.(Been there, done that).

--
Stan
"If it ain't broke don't fix it"
"Alex" <anonymous@discussions.microsoft.com> wrote in message
news:2a9f501c46824$c8e79cb0$a601280a@phx.gbl...
> Thanks for the advice and info below - rather than stretch
> the thread, I would be even more grateful for some answers
> to these questions:
>
> 1 Is it PREFERABLE to wipe the HDD or go through malware
> removal proceses? I don't care about losing data, I just
> want to know whether reformating is relatively quick and
> easy and not likely to have any adverse effects on my
> system (assuming it's a fairly standard system to save
> time). Malware removal appears to be laborious and often
> not 100% effective. A reformat would be "the ultimate
> weapon", right?
>
> 2 What's the best malware protetion for broadband users
> (pipex is my isp)? I used Zonealarm before, and liked
> it. Is this sufficient to keep spyware, tojans, etc at
> bay? Opinions appreciated.
>
> Thanks again.

Robert
Mon Jul 12 14:58:00 CDT 2004

Alex wrote:
> Thanks for the advice and info below - rather than stretch
> the thread, I would be even more grateful for some answers
> to these questions:
>
> 1 Is it PREFERABLE to wipe the HDD or go through malware
> removal proceses? I don't care about losing data, I just
> want to know whether reformating is relatively quick and
> easy and not likely to have any adverse effects on my
> system (assuming it's a fairly standard system to save
> time). Malware removal appears to be laborious and often
> not 100% effective. A reformat would be "the ultimate
> weapon", right?

Wiping and starting again is always the preferred solution because you'll be
100% sure you removed the problem this way. This is often seen as an extreme
measure, and for a home user with a lot to lose and maybe a lack of
experience in setting things up, I'd certainly call it a last resort... but
for all users, at home and at work, sooner or later this option becomes more
"cost effective" than trying to disinfect a machine... where that point
occurs for you is obviously your decision.

(note that depending on the type of virus involved in virus outbreaks,
"wiping" might be more involved than you'd normally think, as well).

However, this doesn't *fix* the problem... the malware might be gone but the
hole it used to infect your machine will more than likely be present once
you rebuild your machine. You need a strategy for keeping your machine
clean, and for assessing any threat that does get past your defences so that
it won't beat you again. This actually means that you might not want to wipe
a system until you know the exact reason why you need to.

> 2 What's the best malware protetion for broadband users
> (pipex is my isp)? I used Zonealarm before, and liked
> it. Is this sufficient to keep spyware, tojans, etc at
> bay? Opinions appreciated.

I'm not a fan of zone alarm myself, but thats a matter of personal taste.
Rather than bash various pieces of software and drag your debate off course,
I'll note that firewalls are good at what they do, but they only protect one
approach road to your computer. There are many others that need protecting.
You should at least be using antivirus software as well, and your most
powerful weapon isn't inside your computer, nor can you ever install it
there; use your brain...

THINK before you install free things that sound too good to be true...

THINK before you open weird emails and/or click on every link you see in
emails and newsgroup postings.

REMEMBER its possible (but not advisable), **if you know enough about how
these things work**, to not use a software firewall or a virus scanner and
still avoid malware. It can be done if you think about what you are doing
all the time. However, if you install a firewall and a virus scanner but
behave irresponsibly and use your computer in an "unsafe" way, then you
*will* become infected again. Hence the most important part of your security
suite is your brain.

I like to use the analogy of comparing virus scanners and firewalls to
seatbelts in cars. Seatbelts save lives in the event of an accident and
everyone should use them (in my opinion).... that doesn't mean seatbelts
make it safe for people to go around having high speed crashes on purpose.

--
--
Rob Moir, Microsoft MVP for servers & security
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html

Kazaa - Software update services for your Viruses and Spyware.

jeff
Mon Jul 12 16:32:46 CDT 2004

On Mon, 12 Jul 2004 08:27:47 -0700, "Alex"
<anonymous@discussions.microsoft.com> wrote:

>Thanks for the advice and info below - rather than stretch
>the thread, I would be even more grateful for some answers
>to these questions:
>
>1 Is it PREFERABLE to wipe the HDD or go through malware
>removal proceses? I don't care about losing data, I just
>want to know whether reformating is relatively quick and
>easy and not likely to have any adverse effects on my
>system (assuming it's a fairly standard system to save
>time). Malware removal appears to be laborious and often
>not 100% effective. A reformat would be "the ultimate
>weapon", right?

Reformatting will destroy everything on your drive. You must
reinstall all software and reconfigure all settings.

>2 What's the best malware protetion for broadband users
>(pipex is my isp)? I used Zonealarm before, and liked
>it. Is this sufficient to keep spyware, tojans, etc at
>bay? Opinions appreciated.

ZoneAlarm is a firewall, not an antivirus and not a spyware removal
tool. You need all three.

Jeff

anonymous
Tue Jul 13 23:48:59 CDT 2004

>-----Original Message-----
> Malware or spyware usally can be
>removed using a good tool such as Spybot (free) or Adware
>[sic] ($$$)

There is a free version of Ad-aware available for personal
use.

anonymous
Tue Jul 13 23:55:53 CDT 2004

>-----Original Message-----
>IE-Spyad - THis program will add a long list of known
>malware sites into your restricted sites zone.

Hate to start "another" thread or subject but...is this
list you speak of available somehow WITHOUT having to
install IE-Spyad?

(I would like to add this list of malware sites to my
Restricted Zone A.S.A.P. I have already added the sites
given at http://www.spywarewarrior.com/rogue_anti-
spyware.htm)

S
Wed Jul 14 04:56:09 CDT 2004

I vote for format. I know some people who only surf from a virtual machine
that regularly gets killed.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"Alex" <anonymous@discussions.microsoft.com> wrote in message
news:2a9f501c46824$c8e79cb0$a601280a@phx.gbl...
> Thanks for the advice and info below - rather than stretch
> the thread, I would be even more grateful for some answers
> to these questions:
>
> 1 Is it PREFERABLE to wipe the HDD or go through malware
> removal proceses? I don't care about losing data, I just
> want to know whether reformating is relatively quick and
> easy and not likely to have any adverse effects on my
> system (assuming it's a fairly standard system to save
> time). Malware removal appears to be laborious and often
> not 100% effective. A reformat would be "the ultimate
> weapon", right?
>
> 2 What's the best malware protetion for broadband users
> (pipex is my isp)? I used Zonealarm before, and liked
> it. Is this sufficient to keep spyware, tojans, etc at
> bay? Opinions appreciated.
>
> Thanks again.

Greg
Wed Jul 14 07:23:03 CDT 2004

Robert Moir Are you that paranoid?

Not all free software is bad & not all weblinks is bad either. I give
weblinks in my post instead of copying the whole article.

Free software
Avg, Avast, Eudora Light 3.06, Aol Press 2.0, Mozilla, Netscape.
Outpost 1.0, E.t.c.

Greg R


>On Mon, 12 Jul 2004 20:58:00 +0100, "Robert Moir" <bofh@mvps.org> wrote:

>THINK before you install free things that sound too good to be true...
>
>THINK before you open weird emails and/or click on every link you see in
>emails and newsgroup postings.

Lawrence
Wed Jul 14 21:35:14 CDT 2004

<anonymous@discussions.microsoft.com> wrote in message
news:2c33c01c4695e$d7a5dbf0$a501280a@phx.gbl...
> >-----Original Message-----
> >IE-Spyad - THis program will add a long list of known
> >malware sites into your restricted sites zone.
>
> Hate to start "another" thread or subject but...is this
> list you speak of available somehow WITHOUT having to
> install IE-Spyad?
>
> (I would like to add this list of malware sites to my
> Restricted Zone A.S.A.P. I have already added the sites
> given at http://www.spywarewarrior.com/rogue_anti-
> spyware.htm)

IE-Spyad is really not a program per se, but rather a large list of malware
sites in a registry file for quick importing into your registry. The
program is essentially one big reg file.

--
Lawrence Abrams
http://www.bleepingcomputer.com
Source for Original Content, Tutorials, and Support for the beginning
computer user.

anonymous
Thu Jul 15 22:56:07 CDT 2004

Ah, I see. I would have to get IE-Spyad then to get
this "list." I'll be looking into that. Thanks for the
info.

>-----Original Message-----
><anonymous@discussions.microsoft.com> wrote in message
>news:2c33c01c4695e$d7a5dbf0$a501280a@phx.gbl...
>> >-----Original Message-----
>> >IE-Spyad - THis program will add a long list of known
>> >malware sites into your restricted sites zone.
>>
>> Hate to start "another" thread or subject but...is this
>> list you speak of available somehow WITHOUT having to
>> install IE-Spyad?
>>
>> (I would like to add this list of malware sites to my
>> Restricted Zone A.S.A.P. I have already added the sites
>> given at http://www.spywarewarrior.com/rogue_anti-
>> spyware.htm)
>
>IE-Spyad is really not a program per se, but rather a
large list of malware
>sites in a registry file for quick importing into your
registry. The
>program is essentially one big reg file.
>
>--
>Lawrence Abrams
>http://www.bleepingcomputer.com
>Source for Original Content, Tutorials, and Support for
the beginning
>computer user.
>
>
>.
>

Robert
Fri Jul 16 08:58:37 CDT 2004

Greg R wrote:
> Robert Moir Are you that paranoid?

Is it still paranoia if its right?

> Not all free software is bad & not all weblinks is bad either. I give
> weblinks in my post instead of copying the whole article.

I never said all free stuff was bad, just that people should think first
before installing things, and that if something is too good to be true, it
probably is.

> Free software
> Avg, Avast, Eudora Light 3.06, Aol Press 2.0, Mozilla, Netscape.
> Outpost 1.0, E.t.c.

and I reccomend people look at 3 of the things in your list, as well as lots
of other stuff.