In reality, there is no 100% surefire way to rid yourself of viruses and other malware. Because new malicious code is being written daily, this is an unfortunate fact of the computing world we live in. The good news is that there are ways to prevent such infections in the first place.
Choosing a Good Anti-virus
First and foremost, choose a good antivirus. And no, just because you pay for it, doesn't mean its the best. Mcafee is a great example. How does one go about choosing a good anti-virus? Well, AV-Comparatives is a great place to start. They are an independent Antivirus testing site and are a great starting point if you are looking for an antivirus program for your computer. Some of the more highly recommended Antivirus programs are:
AVG
Avast!
Avira
Microsoft Security Essentials
These 4 are free, or have free versions available, but there are many more to choose from. You don't have to use these, but they are solid programs.
A good example of a pay for AV is NOD32 it has amazing support and uses almost no resources.
Important notes about using Antivirus programs:
1. Avoid installing more than one. Doing so can cause security issues if both scanners remain active. If you must (or want) to install more than one, be absolutely sure you have disabled the background scanner of one of the programs.
2. ALWAYS update to the latest set of virus definitions before you run a scan.
3. Perform a full system scan at least once or twice a month if you use your computer on a daily basis.
Good Anti-Spyware Tools
Unfortunately there is no group like AV-Comparatives for anti-spyware. However, these 2 programs come highly recommended:
Spybot S&D
Malwarebytes Anti-Malware
As was the case with Antivirus programs, ALWAYS update before you begin a scan. You can also have more than one installed (the 2 examples above are good to have installed on the same computer) at the same time. Be careful not to enable the real-time scanning in antispyware programs though, as they, like multiple antivirus programs, can cause security issues when it comes to which program deals with a particular threat. It is also becoming less and less necessary to run antispyware programs actively, as an overlap exists between antivirus and antispyware programs. Because almost all antivirus applications are now also able to deal with the removal of spyware, they are referred to as anti-malware programs or suites. This makes antispyware programs less and less necessary, however they are still handy to have installed in case you do get infected with something, so don't remove them just yet!
General Computer Care
First and foremost, install the patches that Microsoft releases for Windows, Office and their other products as prompted via Automatic Updates. Microsoft issues patches for their products on the second Tuesday of each month. Postponing these patch installs can lead to a lot of headaches, so if you are prompted to install a set of them at a time when you are busy doing something else on your computer, do not turn the schedule off. Instead, set the schedule to another time during the day, or night, where you are less likely to be using the computer. Generally this is not an issue, as the default time when Automatic Updates is turned on, is 3:00AM local time.
A gradual shift is being seen in what malware is actually targeting now, as malware authors look for easier ways to infect computers. Unfortunately for you, this means that you not only have to worry about keeping Windows itself up to date, but also the applications that you have installed on top of Windows. The shift that was just mentioned can be summed up like this: Malware authors are now beginning to exploit programs like Adobe's Acrobat pdf viewing and editing suites, and Flash player, rather than going directly after Microsoft's products. Part of this shift has to do with the fact that 3rd party software vendors are now seen as easier targets because of how popular their products are, but also in their response time in fixing the various vulnerabilities that exist in their products (and for those wondering, I'm not just picking on Adobe here, though at the time of writing, they do seem to have a large target on their back. They are merely being used as an example.) There are a few different tools out which basically scan your installed applications for file version numbers, then verify that what you have is the latest and most secure version of the product currently available. One that isn't too difficult to use, isSecunia PSI (Personal Software Inspector). If a particular program is found to be out of date, PSI provides a direct download link (most of the time) to the updated version of the software it has identified, rather than simply directing you to the vendor's homepage.
Another avenue malware authors are taking, is through your web browser. Internet Explorer, Firefox, Safari, Opera and Chrome (along with every other web browser out there) are vulnerable to these kinds of attacks, but some common sense, and help from a couple of tools you should keep yourself safe and secure. This next part is going to be rather Firefox specific, but generally applies to overall computing habits, and other web browsers as necessary.
1. As was the case in other sections, keep your browser updated no matter which one you are using. The vendors release updates with good reason.
2. Avoid the darker corners of the Internet. By this, I of course mean warez and hacking sites, and pornographic websites. You're really only asking for trouble by visiting them
3. Install the NoScript and AdBlock Plus addons for Firefox. These 2 addons will block ads (hence the name), and also block JavaScript in the pages you visit. By no means does this make you completely immune to any kind of malware infection through your browser (see number 2 above), but it will significantly reduce your chances of catching something bad without your knowledge.
4. After installing these (and any other plugins you choose), be sure to keep those up to date as well. Mozilla has created a very easy way to do this. Visit their Plugin Check website. It will scan the browser for any plugins you have loaded, and provide a quick and easy way to get the latest versions of any that are out of date.
So what happens if you get a virus on your computer, even though you have all of these tools running?
If you are following this guide to the letter, chances are it won't come to this. But just in case you do get infected with something, there are steps you can take to remove the problem.
If you end up with something obvious, like a Fake-alert application, which presents you with a sometimes very real, very official looking warning dialog box informing you that you are infected with a virus (the ironic part is that this is a true statement) and that you should pay the "vendor" money via your credit card to get the full program and remove the supposed infection, don't do it. If the alert is coming from a program you know is not your antivirus, don't pay them anything, don't even take your card out of your wallet.
If you do end up in this situation, the first thing you should do is consider backing up your data, pulling out your OEM restore, or retail Windows install disk(s) and do a clean install of Windows. If you would like to try removing the infection first, you should remove the network cable (and/or turn off the wireless), reboot the computer and get into safe mode You can do this by pressing F8 repeatedly before you see the Windows splash screen. It will give you a long list of options for changing the way your computer boots up for that session. Near the top of this list on XP, Vista and Windows 7, you should see Safe Mode.
Once you have entered Safe Mode, get on another computer and download the virus definitions for your antivirus program. If you do not have another computer available, call a friend or family member to do this for you, or ask to borrow their computer for awhile if they can spare it. Even if you only have one computer at your house, it is still best to keep the infected machine off of the Internet, since many infections open all of the doors to your computer for (typically) the malware author to use your computer remotely for whatever purposes they so desire. Once the latest virus definitions are installed, run a full scan of your hard drive. Even if you have a lot of files, DO NOT STOP THE SCAN. This can be a very lengthy operation and you're simply going to have to wait it out, because the alternative is not pretty.
When the scan is complete, remove all files reported as infected. Reboot and let Windows boot up normally. Do not plug the network connection back in just yet, as the system has not been verified as clean. Once back under Windows in normal mode, open your antivirus and run another scan. If all goes well, nothing will be detected and you can set everything back up the way it was before and carry on using your system. If further infections are found, you should now begin backing up your data and reinstalling Windows.
What about a firewall?
A firewall is another essential part of computer security and preventing malware infections. Windows XP (with SP2 and higher), Windows Vista and Windows 7 all come with a basic firewall built in and turned on by default, but the method of setting up rules to control the Windows Firewall can be a bit confusing to some people. If you would rather use a third party firewall (I should mention that the Windows Firewall in both Windows Vista and Windows 7 is actually pretty decent), like the selection of Antivirus applications, the selection is pretty good. Two of the more highly recommended choices on THGF are:
Comodo has both a free and a paid version, whereas Outpost is paid only, but both are excellent programs.
The best firewall to use though, is the one inside of your home router. Basically all commercially available routers, such as those from D-Link and Cisco (with their Linksys brand) have built in firewalls, and the best part is, they don't even really have to be configured! Because of the way routers operate, you're protected almost right out of the box, and they are not expensive to purchase.
It's a lot to take in all at once (if you were able to sit and read the entire post), but hopefully you will come away from this with a better understanding of, and appreciation for the field of computer security. If there are any changes you wish to see added to this guide, please PM me with your request.
