For an initial virus/malware scan, this would be a good start:

http://www.inside-security.de/insert_en.html

If you decide to go with windows tools, such as Spybot, make sure that 
you do the scans from safe mode after updating the definitions.  
Otherwise the culprit may be lurking in memory and can rewrite itself to 
the hard drive.


Anthony Boynes


Alan Dayley wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I have not cleaned a Windows system of malware for some time.  Lucky me!
>  However, as a special favor to my wife's friend, I am now committed to
> help them understand why their computer is flaky.  Lucky me!  ;^)
>
> Hardware/driver/whatever else issues are not yet ruled out since I have
> not yet actually seen the machine.  But, I am assuming that problems
> will be found.
>
> Being out of touch with the need, I am rusty on all the tools and
> techniques for malware cleaning.  Some pointers to documentation and
> tools that actually work well would be nice.  To keep it on topic, I
> immediately thought of using a bootable Linux CD of some kind to get
> started or even do the whole job, if such a thing exists.
>
> What I know so far:
> - - The system is running Windows XP.
> - -- I suspect Home edition, if that matters.
> - -- I don't know what service pack level it is or is not at.
> - - The main system is described as:
> "The system slows and freezes about twice a day, especially when using
> the Internet."
>
> An alternative solution is a for pay cleaning service that I can refer
> them to.  Again, not having needed such a thing in a while, I don't know
> what service source is worth the money.  Any tips on that is very
> welcome also.
>
> I'll have my last Kubuntu CD with me if I find (create?) the opening and
> willingness on their part to try it out.  That would be the best
> solution, if they can handle it.
>
> Alan
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (GNU/Linux)
> Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
>
> iD8DBQFFbRaXDQw/VSQuFZYRAsXdAJ95N7k67mCRzgvQmugPm0uH7WATKQCeIXPc
> JGiilxmhdtl5Kxx9aA8iUog=
> =PCuC
> -----END PGP SIGNATURE-----
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>   

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change  you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss