What to do if your computer is infected with a virus or spyware

by Joseph Liau

"Warning! Virus detected!" Ok, now what? The good news is that you probably have anti-virus software installed already, which is why you would have any chance of knowing that a virus was on your computer in the first place. If you don't have anti-virus software installed, and you sixth sense kicked in, then the removal process is similar.

Spyware, which is often mistaken for a virus, should be dealt with before virus removal. This will ensure that your computer is running well enough to deal with the virus. Spyware removal is often much easier and less time consuming that virus removal. However, in most cases the spyware scan must be run manually in order for something to be detected.

Below is a detailed guide for removing threats from your Windows PC.

1. If you have anti-virus software that detected a threat. Open the software ane look for the "virus vault" ("quarantine"). In most cases, these infected files can be "healed" or deleted. But, to ensure that you computer is rid of all infections, we will need to continue.
2. Save your work and back it up if necessary. (If at any point you detect an infected file that you backed up, you should replace the file on back up with the clean version).
3. Using a spyware removal program (Spybot SD, and Adaware are FREE recommendations) run the scans and remove any threats that are detected.
4. Reboot your computer and see if things are back to "normal."

If you suspect that a virus is still present, then a more aggressive approach may be necessary.

5. Open the RUN command (Windows Key+ R), type in "msconfig" and press enter. This should open a configuration utility.
6. Go to the "Startup" tab. Using http://sysinfo.org/ , see if there are any invalid startup entries in your computer. Uncheck the items that you want to remove. If you are unsure, then it is best not to touch anything.
7. Next, perform a full virus scan. In order to do this properly, you will have to disable System Restore (This sounds counter-intuitive but sometimes viruses can infect restore files so that they also are restored again!). To disable system restore, find "My Computer," right click on it, and the got to properties. Click on the System Protection tab. Then uncheck the boxes for you hard drives and click OK.
8. Now using your anti-virus program, update the detection database, then run a full system scan, and remove any infections that are found. If you don't have an anti-virus program then try http://housecall.trendmicro.com (a free online scanner that detects viruses AND spyware!).
9. Reboot your PC again and if everything seems fine, turn System Restore back on. (Windows may notify you that startup items have changed. Just click OK).

If you are unable to scan or something still is not right, then you will need to perform the scans in Safe Mode.

10. Open msconfig again, and go to the BOOT tab. Down near the bottom you should see check boxes. Check off "/SAFEBOOT" AND click the NETWORK radio dial so that you have Internet access in safe mode. Click OK. Then reboot the computer.
11. Your computer will automatically boot into SAFEMODE, which is an "uglier" version of your windows system with minimal programs running (ie viruses not active).
12. Log in as Administrator if given the option
13. Perform your full virus scans again, either with your antivirus software (if you can) or http://housecall.trendmicro.com
14. Remove any threats that appear.
15. Before rebooting, open msconfig again and UNCHECK the /SAFEMODE box in the boot tab. Now reboot.
16. You should be back into your normal windows environment. Don't forget to turn system restore back on.

If things are still not working, then try one or all of the following:

1. Search for specific removal instructions if you have the name of the virus.
2. Ask a tech-savvy friend for help.
3. Back up your important data, format your computer, and reinstall Windows (and ensure that you uses better Internet practice and protection).
4. Back up your important data, and install a safer operating system (eg An east-to-use Linux distribution http://www.ubuntu.com)

If that sounds like a lengthy process, then that is because it is. They say that prevention is the best medicine, and the same is true for computers. Be sure that you are browsing safely, and invest in the right protection software, and it should help you to avoid any tedious articles on how to remove viruses and spyware.