Saturday, April 23, 2011

how do i...remove malware

This was my attempt at a simplistic malware removal guide for someone who isn't technical, but is willing to roll up their sleves and give removal a shot before having to take more drastic measures (pay someone) -- it worked. My guess is that it will work for 50% of malware infections and can take 20 minutes to an hour.


Removing Malware



*You may want to print this before beginning. You may not. Who am I to say.

Run this first:



(1) http://download.bleepingcomputer.com/grinler/rkill.com
(save to desktop, then run)


…then, download, install (allow updates) and run a ‘quick scan’ with this:

(2) http://www.malwarebytes.org/mbam.php
(download and install free version)


…if it finds infections, show results >> remove selected (make sure they are selected – right-click > select all if they aren’t). Reboot if prompted.

…if it doesn’t work, you might be able to boot into safe mode…(reboot computer, tap ‘f8’ every two seconds…when prompted, select ‘safe mode with networking)…run (1), then download and run the following:

(3) http://www.bleepingcomputer.com/download/anti-virus/combofix
(save to desktop, then run, accept all defaults. Ignore if prompted to disable av software, unless you want to right-click on your av software and attempt to disable temporarily. Allow recovery console to be installed)


If that doesn’t work, you’ll have to get professional help, probably. See my site to run the remote help request, where I can remotely verify the infection...and, if necessary, attempt removal.
(http://chapmanit.com/computerwork/remotehelp/)

If you are rid of popups, but no longer have internet access, you can go to control panel >> internet options >> connections (tab) >> lan settings >> remove check from “use a proxy server…” (assuming you have Windows XP. the location will be similar, but maybe slightly different for Vista or Windows 7 -- search for 'internet options' from the start menu search bar)

Almost done...but


When you think you are done, you should probably re-download (the original download may be corrupted or comprimised since you were infected) (1), reinstall and update, then run a 'quick scan' again. Hopefully, you are clear or it is just cleaning up traces.

Additional Preparation Steps


To speed up the scan process, and as general recommended practice, run disk cleanup, ccleaner, or glary utilities prior to scanning for noticeably faster scan times.

Am I infected?


If you are reading this, probably so. The symptoms are too varied to be sure, but if you are getting popups from (what looks like) an antivirus program that wasn't on your computer a month ago...that wants you to pay for help, you are probably infected. Additional symptoms can be browser redirects (you click on a google search result and end up on a non-related page that wants money), or program malfunctions (fake system messages saying your program can't run...your disk is corrupt...your momma eats twizlers, etc.). Good luck at playing MD and making the diagnosis. General cleaning programs can be found above (additional prep steps)...and are recommended to clean a slow, but non infected, computer.

Friday, April 8, 2011

You are not backing your data up!

Data backup: Examining common perception

20140109 Update: Added notice about Google Photo backup to bottom.


Hopefully I'm wrong, and you are backing up your data. However, I was recently trying to recover some data from a failed hard drive (hdd) for a client. Browsing some forums, I was surprised at how many people had misconceptions about what backing up data actually meant. I thought I'd go over the basics in hopes that I can inform people to the end of saving important data from the dark recesses of oblivion.

I think it important to dispel the misconception that storing your data on an external hard drive is the same thing as backing up your data. While it may be true, it is not implicitly correct: an external hard drive is only being used as a backup repository if the information held there is ALSO stored elsewhere, such as a laptop or desktop computer. To state it another way, if the information is located only on an external drive, it is not backed up. It is simply stored on an external hard drive. This is important because external hard drives are just as likely to fail (arguably, more likely) as internal drives.

Have a look a this professional infographic which demonstrates my point:

As I'm sure you gathered, information must exist simultaneously on some two devices, at least, to be qualified as a data backup. Ideally, three devices will contain the information or the information will be synchronized on update or some other fancy device. But that is beyond the scope of this article.

Recap


Storing your data only on an external hard drive is not backing it up. It must exist in two locations to be backed up.


What do I use to backup my data?


To state the obvious, backing up your data is a pain. There are some ways to make it more of an automatic process...but they cost money or take some reasonable initial effort. Unless you don't value your data, either option is worth it.

(1) You can buy an external usb powered and attached hdd. It will probably hold as much as your internal or more and if you are backing up the essentials (not the pirated movies), you can probably even get fancy and have 'incremental' backups. Just make a folder for each month...and copy over your Desktop, Documents, and Favorites. That covers 95% of average user stuff. Your emails are probably stored with yahoo or google or someone...and unless you use old or fancy programs, they store your data in those places. The primary drawbacks to backing up this way are: [1] It must be performed manually, or some software must be set to perform periodically. Don't forget to do this every couple of weeks (or, more frequently if warranted); [2] In the event of a local disaster or something, you could lose both copies of your data. For instance, a fire may consume both data copies...hopefully you were more lucky. Backing up to CDs or DVDs have the same drawbacks.

(2) You can purchase a backup software subscription such as carbonite or mozy. These programs are roughly $50/yr and include software which runs on your computer. They will attempt to backup common data (Desktop, Favorites, and Documents) by default...but also allow configuration so that other folders can be backed up as well. The good thing about these programs is that they perform their task constantly...you update a file on your desktop, and it relatively quickly gets backed up by the software on your computer. Sweet. The downside of this software is that it must be properly configured...it only backs up what you tell it to, and sometimes backing up information like family videos takes special precaution (see note about carbonite and videos below).

_quick carbonite vs mozy comparison_
carbonite's advantage seems to be 'unlimited' data. mozy's is that it allows video. depending on what you are backing up, and how much data you have, either could be a better choice. i can say that carbonite's 'restore' process is pretty easy.

---

Some common backup comments (and my preemptive responses)



oh no...when i put my information on the cloud, the government will have access to it!!!
if you are worried about this...take the extra step which is good practice anyway: store your files in an encrypted truecrypt file. back that up.

carbonite doesn't backup video
this annoys me. not as much that they don't do it, but that they don't make it explicitly known prior to sign-up. to circumvent this, however, append a non-standard file extension to your video files. for instance...rename homevideo_20110407.mkv to homevideo_20110407.mkv.myvid. obviously this will require a little time and the extra renaming step...but if you remember to do it just after importing from your camera, it will become habit and won't be that bad. additionally, you can tell your computer to 'always open' with your default video viewer and the non-standard extension shouldn't inconvenience you too much.

just backup to an external hdd
i certainly understand the logic here...and think that external hdd backup is very important, but as a supplemental backup...not a sole backup. the reason is that, in case of localized catastrophe, such as home fire or home robbery, your data could all be unavailable at once -- including your backup.

Update

20140109

Google is now backing up your pictures (and videos?). You can back up everything (unlimited # photos) at ~3 megapixels (likely, your photos will be downsized) or as many as you can fit at whatever resolution on 15 GB -- pay for more space or switch to ~3 megapixel resizes if you fill it up.

I'm using it as another backup. I'd rather have all my stuff backed up at lower resolution and still have SOMETHING if my primary copy and backup copies somehow both disappear simultaneously.

For people who have less than 5,000 (6 megapixel) pictures and or don't see themselves taking more than that, the 15 GB version is probably better since you get full quality. You can print reasonable 8"x10" photos from a 6 megapixel shot, so you can probably do a 5"x7" with 3 MP.

You'll have to have a google account, probably update to G+ (public profile), and potentially install Picasa to use this.