Showing posts with label Remove. Show all posts
Showing posts with label Remove. Show all posts

Monday, September 03, 2007

AVG Anti-Rootkit Free

Grisoft has developed quite a following with its free (for personal, non-commercial use) security applications, and for good reason.

Now there’s an anti-rootkit utility in AVG’s free software stable, too, and for users seeking a minimum of interaction, AVG Anti-Rootkit Free may very well be the Right Tool for the Job.

Grisoft makes its free AVG Anti-Rootkit application available for download. Users download the avgarkt.exe setup file, which features simple installation.

You may download a free version of AVG Anti-Rootkit here.

In keeping with the goal to make AVG Anti-Rootkit a very simple tool, the file features a simple .exe install file that triggers a setup wizard.

Users can select between a normal interface (which Grisoft recommends and sets as the default) or a low graphics interface (which is optimized for visually impaired users who rely on screen-reading programs).

Users must accept the AVG Anti-Rootkit Free license agreement before they can use the program to check their Windows system for stealth rootkit programs.

Next, users must specify the location of the AVG Anti-Rootkit Free installation files.

As with most software programs, users must specify the name of the Start Menu Folder. This is the name the AVG Anti-Rootkit application receives on the user’s Start menu.

Once users have specified all setup information, the free anti-rootkit utility installs itself.

Due to the way most anti-rootkit applications operate, it’s necessary to reboot Windows to enable proper operation. AVG’s free anti-rootkit application is no different. AVG’s setup utility gives users the option of rebooting immediately automatically or manually rebooting later.

AVG purposefully keeps its anti-rootkit interface simple. There are very few options for users to choose, thereby helping simplify the already confusing and complex world of rootkits.

AVG includes concise educational information aimed at helping regular (non-IT professionals) better understand the threat stealth rootkit programs present.

The Learn More tab lists information on what rootkits are and how users can protect their PCs from the stealth threats. There’s also a link to Grisoft’s site where additional computer security information is made available.

Users can check for AVG Anti-Rootkit Free updates using the third tab (About & Update). Clicking the About & Update tab also reveals the current version users have installed.

An interesting note, Grisoft informs users on this third tab why the AVG Anti-Rootkit uses random window titles. The reason is that AVG’s programmers wanted intentionally to change the name of the window the free anti-rootkit application uses to help thwart detection efforts rootkit hackers might program into their malware.

If users click the Check For New Version button found on the third About & Update tab, they are directed to Grisoft’s Web site. Here users will see whether the version they are using is current or whether updates must be downloaded.

The Search For Rootkits tab is the meat of the program and the reason users will download it in the first place.

Clicking the Search For Rootkits button triggers a search of stealth rootkit programs. The free AVG application tracks its progress in the progress bar at the menu’s bottom.

By default, the Search For Rootkits button only searches critical Windows directories on the root drive.

When no rootkits are found, AVG presents a congratulations window.

When rootkits are found, AVG displays those that are found (with information on the rootkit path and type). Users can then highlight the rootkit items in question and click the Remove Selected Items button to eliminate the offending files from their Windows systems.

With the In-Depth Search, however, AVG Anti-Rootkit searches for stealth rootkit files on all the hard drives and partitions within a system.

Just as with the simple rootkit search, the AVG Anti-Rootkit Free application tracks its progress as it works. Should users wish, they can terminate the search using the provided Stop button.

These are all the options a user can select when working with AVG’s free anti-rootkit program. By purposefully keeping the application easy to use, AVG engineers have created a free malware detection utility that’s the Right Tool for regular (personal) users seeking to check their systems for unwanted stealth software.

Download your copy here

Monday, June 18, 2007

Zone Alarm Install Guide - Updated & In-Depth

The following instructions only apply if you are installing
Zone Alarm for the very first time. These instructions are
NOT for the people who already have Zone Alarm installed on
their computers, and are upgrading to the latest version.

1. Create a New Folder on your desktop and Rename it to
Downloads. By doing this you will have one central
location for all programs that you download. When you
download any program DO NOT select ‘Run’, select ‘Save’ and
when you have saved it scan it with an anti-virus program.
I recommend the use of AVG AntiVirus which I have covered
in another post.

2. Go to the following thread
http://www.zonelabs.com/zadownload and select ‘I only want
basic ZoneAlarm protection’ and then proceed to download
ZoneAlarm. Download it into the folder named Downloads, BUT
DO NOT install it until you have followed the instructions
below.

3. Once you have downloaded your version of ZoneAlarm to
your Desktop Folder, disconnect from the Internet. If you
use Cable or DSL Modem, disconnect it and close any other
running programs apart from your basic programs to run
Windows. This includes the Windows Firewall. To find out
what Applications are running go to Task Manager
(Control+Alt+Delete). Look for Applications, make sure there
are NO Applications running. If they are, use the End Task
Button. To disable the Windows Firewall go to your Control
Panel, switch it to Classic View then double click on
Windows Firewall and then click the ‘Off’ button.

4. Go into your Control Panel, on top of the screen you
will see Tools, click on it, then another tab will show up
and click on Folder Options, in the new panel that opens
click on View. Scroll down to where it says Hidden Files
and Folders, put a dot or check-mark in the box that says,
“Show hidden files and folders”, then REMOVE the check mark
from the next two boxes that say the following,” Hide
Extensions for known file types” and “Hide protected
operating system files (Recommended)”. Drop down to bottom
of panel and click Apply. Now go to the top of the panel
and click on “Apply to All Folders”, click Yes in new
window then click OK in Folder Options panel. This way all
your folders will show the change. Close the control Panel.

5. Make sure you have completely removed any other
vendor’s firewall product you were currently using ie:
Norton, McAfee etc. Now for those of you who are installing
the Zone Alarm Security Suite or Zone Alarm Anti-Virus, the
very same applies, make sure you have completely removed
any other anti-virus product you were currently using. If
you are using AVG Anti-Virus and/or Spybot Search & Destroy
you can safely ignore them. If the program has an Uninstall
feature please use that, if not go to your Control Panel
and select Add/Remove Programs and select each item
individually and select Remove. Do NOT reboot if prompted
to.

You then need to ensure that there are no Registry keys
or Files left behind. Click on Start, then Search or Find,
and select Files. Make sure that the location box is set to
search your local hard drive (usually C or All Local
Drives. XP users: set Advanced search options to search ALL
files and folders! Type in Norton or Symantec etc. then
wait for search to complete. If any items show up simply
right click and Delete. Then double click MY COMPUTER,
double click on C (if that is your main drive) and you will
have a window of Folders open. Locate the Program Files
folder and double click to open it and you will then have a
list of all of your Program Files. Look for any folder that
has your old Firewall or Anti-Virus name on it, right click
on the folder and select Delete. Once you have done this,
click the Back button at the top locate and and double
click on the Windows folder. This will open a panel of all
of you Windows Files, scroll down to find the one named
Prefetch. Double click it to open then go to the Edit Tab
at the top and click on it, scroll down to Select All, left
click on it and all of the files will be highlighted. Then
go to File (beside Edit) click on it scroll down and select
Delete. You will get a pop-up message ‘Are you sure you
want to send these XXXX items to the Recycle Bin’. Click
Yes, this will remove the items out of the Prefetch Folder.
Now close the window to return to your desktop. Go to your
Recycle Bin, right click and select Empty Recycle Bin.

Now, I will try to explain to you how to find any stray
Registry Keys in your Registry. First of all backup your
Registry. Go to Start, Run and type in regedit click on OK
and the Registry Editor will then open. Go to the top Tabs
and click on File, scroll down until you see Export, left
click it and this will open Export Registry File window.
Save this file to your desktop and in the File Name box
enter Registry Backup File. Click on Save and it should now
be on your desktop. Verify the file is a good copy, in the
Registry Editor window click on File, select Import, in new
panel where it says ‘Look in’ select desktop and then click
on your saved file then click ‘Open’. Once it says it has
been read in successfully, you have a good backup.

Now to edit the Registry go to the Edit Tab at the top
left click it, scroll down until you see Find, left click
it, another panel will pop up, it will ask you Find What,
type in Norton, Symantec, Mcafee or whatever Firewall or
Anti-Virus vendor you were using before installing
ZoneAlarm. After you have typed the name, make sure that
there are checkmarks in all of the boxes - Should be 4
blocks, Keys, Values, Data, and Match Whole String Only -
then go back to where you typed in Norton, Symantec, etc
then click on ‘Find Next’. The search will locate Folders
in the left panel and strings in the right pane. Ignore the
right pane strings and keys values, look for the
highlighted Folder in the left pane, right click on it and
select ‘Delete’, click ‘Yes’ on pop-up window then hit your
F3 keyboard button and it will continue to search the
Registry, delete any Folders it finds in the left pane and
continue until a pop-up says Finished searching through the
registry. Exit the Registry Editor.

6. Now go back to your desktop to where you have
downloaded and saved your copy of ZoneAlarm and install it.

7. Let ZoneAlarm configure your Program Settings. The
reason for this is that there is a very good possibility
that when you manually install the Program Settings,
something may not get properly installed, which may cause
major problems with your installation of ZoneAlarm. Later
if you decide you do not want a specific program in your
Programs Control Panel, then remove it. If it is required,
you will get a balloon alert about it allowing or
disallowing it. That’s your decision. I have always done
this, never had a problem by letting Zone Alarm configure
my settings.

8. When the installation is complete, reboot your system
and connect back on to the Internet, making sure all your
other programs are activated this includes ZoneAlarm and
the ones that you had disabled, especially your Cable or
DSL Modems. These should all automatically restart after
rebooting.

9. Final step..go back to Start > Control Panel and if
necessary switch it to Classic View. Locate the folder
named ‘Folder Options’ and double click it. In the ‘View’
tab go to Hidden files and folders and click the radio
button ‘Do not show hidden files and folders’ and place
ticks in the following two boxes, ‘Hide extensions for
known file types’ and ‘Hide protected operating
systemfiles(Recommended)’.

For additional in-depth information click on the following
link:
http://download.zonelabs.com/bin/media/pdf/zaclient70_user__
manual.pdf

I will upload a ZoneAlarm tutorial on the full
installation in a few days.
ZoneAlarm will walk you through the setup when you install
it.

If you have any questions please leave a comment and I will
get back to you asap.