Dealing with Malware
- Jia Wen Li
“Malware” is the term used for any software that is remotely, and most times unknowingly, installed on a computer for the purpose of gathering information and sharing it with third parties. It is a big problem for computers running Microsoft Windows.
Types of Malware
Adware: displays ads when you are surfing the web (pop-up windows or banners)
Spyware: software that secretly gathers information and transmits it to interested parties. This information could be websites you visit, browser and system information, or your computer IP address.
Browser hijacking software: advertising software that modifies your browser settings (e.g. default home page, search bars, toolbars), creates desktop shortcuts, and displays intermittent advertising pop-ups. Once a browser is hijacked, the software may also redirect links to other sites that advertise, or sites that collect web usage information.
How Malware is installed
There are several ways that Malware can be unknowingly installed on your computer:
Software bundled with "other software".
Download managers and file sharing applications often come with malware.
You should be wary of downloading any free software.
Software that offers to speed up the Internet will contain adware.
Malicious ActiveX Control
At some web pages you will be prompted to run ActiveX control (Microsoft technology that links desktop technology to the Internet) or other scripts.
You should only click yes if it is a trusted web page. With untrusted web pages you run the risk of getting infected with malware when you run it.
It is important to make sure your Internet browser security settings are not set lower than normal so scripts won't run automatically.
Some websites will tell you that software is needed to view the site.
If you click 'yes' to install the software you have malware.
Concealed HTML attachments
HTML attachments can leave malware on your computer.
You should configure email tools, like Outlook, to render html mail as text.
Some malware provides no uninstall option, and installs itself in unexpected and hidden places (e.g. modifies the operating system, thus making it more difficult to remove).
Malware can be the vehicle used to install a trojan (a program that appears safe, but contains a virus).
Some malware is so severe, it means you have to re-image your computer (re-install the operating system), and there is a risk of losing personal data.
How do you know if you have Malware?
There are many symptoms, some of which include:
poor system performance
computer takes longer to startup
browser closes unexpectedly or stops responding
when performing a search, results are on a different site
clicking on a link does nothing, or goes to an unrelated page
browser homepage changes to a different site and you can't change it back
pop-up advertising windows appear when the browser is not open or over web pages that don't normally have pop-ups
additional toolbars are added to the browser
web pages are automatically added to the list of favourites
desktop icons are automatically added to the desktop
when you are viewing a website, other instances of your browser open to display advertisements
you cannot start a program
Malware culprits
If you would like a list of culprits and descriptions, check out the Malware Encyclopedia maintained by Microsoft.
Removing Malware
Protecting your computer from malware is different from protecting against viruses. Having an up to date anti-virus program is important but will not guard against malware. To do this you must have separate software installed on your computer.
There is no one product currently available that is designed or capable of catching all malware.
Be careful about bogus software that claims to clean malware. Some programs that claim to get rid of malware actually put more on your computer. You should be very hesitant to what programs you download. We recommend using the free version of Malwarebytes.
Malwarebytes
Malwarebytes has a free version which acts well against spyware and malware as a scanner (while the paid version provides real time protection).
You will need to regularly check for updates, initiate a full scan and remove all malicious files that are detected.
Preventative measures
There are some other steps you can take to reduce the risk of installing Malware:
Make sure you check for and install software updates.
Keep your operating system updated and firewall on.
Scan with anti-spyware software on a regular basis and keep it updated.
After you remove spyware, reboot and scan again.
Ensure all Internet browser security settings are set to default.
Block pop-ups through your browser settings.
Configure your email tool to render html as text.
Remove yourself from Power User / Administrator status.
If the above recommendations are not sufficient in protecting your computer or you would like further assistance in removing malware, please contact one of the IST Service Desks.
References
Other reference sites to help keep your computer secure: