Virus & Spyware Removal Checklist

Information Systems Technology

Item Entry/Notes

Your Logo Here

CONTACT Contact Name Contact Telephone Number SYSTEM INFORMATION Computer Model Computer Make PASSWORD INFORMATION System Boot/Biometric Password Administrative Username Administrative Password User Account Username User Account Password DISK IMAGING Create/Test System Image Backup Remove All Windows System Restore Points ANTIVIRUS Antivirus Efficacy Check Confirm Application Is Most Current Available Confirm Application Is Operating Properly (Not Corrupted) Uninstall Outdated/Corrupted Application (If Necessary) Install Current Antivirus Application (If Necessary) Install Antivirus Signature Updates ANTISPYWARE Antispyware Efficacy Check Confirm Application Is Most Current Available Confirm Application Is Operating Properly (Not Corrupted) Uninstall Outdated/Corrupted Application (If Necessary) Install Current Antispyware Application (If Necessary) Install Antispyware Signature Updates ANTIROOTKIT Antirootkit Efficacy Check Confirm Application Is Most Current Available Confirm Application Is Operating Properly (Not Corrupted) Uninstall Outdated/Corrupted Application (If Necessary) Install Current Antirootkit Application (If Necessary) Install Antirootkit Signature Updates NATIVE DISINFECTION Perform Full Antirootkit Scan Remove All Found Infections Perform Full Antivirus Scan Remove All Found Infections Perform Full Antispyware Scan Remove All Found Infections Install Periform Ccleaner Remove All Temporary Files Install sUBs CombFix Run sUBs ComboFix Review Add/Remove Programs Applet Uninstall Unnecessary Programs Remove Unnecessary Entries From Windows Startup Folder SYSTEM FILE CHECK Install Microsoft Autoruns For Windows Disable Unnecessary/Rogue Entries Run Trend Micro Hijack This: Remove Unnecessary Programs: Performance Check Confirm Error-Free Boot Operation: Confirm Proper Network Operation: Confirm Proper Web Browser Operation: Confirm Proper Microsoft Office Operation: Create New Windows System Restore Point SLAVED/PBE DISINFECTION Remove Drive/Boot Using PE Utilities Perform Full Antirootkit Scan Remove All Found Infections Perform Full Antivirus Scan Remove All Found Infections Perform Full Antispyware Scan Remove All Found Infections Registry Editing Manually search/edit/clean Registry Performance Check Confirm Error-Free Boot Operation Confirm Proper Network Operation Confirm Proper Web Browser Operation Confirm Proper Microsoft Office Operation Create New Windows System Restore Point

Necessary for repair/testing proper operation.

Provides restoration capacity if malware removal efforts prevent system operation. Eliminates possibility malware infection will be re-introduced. If these steps fail, hard disk removal/PE boot disk may be required.

If these steps fail, hard disk removal/PE boot disk may be required.

If these steps fail, hard disk removal/PE boot disk may be required.

If these steps fail, hard disk removal/PE boot disk may be required.

Runs on 32-bit versions of Windows 2000, XP and Vista. Disable antivirus/antispyware software before running ComboFix.

If these steps fail, hard disk removal/PE boot disk may be required.

If errors occur within these steps fail, hard disk removal/PE boot disk may be required.

If system now tests clean and functions properly, work is complete. If infections remain, slave disk to test system or use boot disk to continue disinfection.

Seek offending applications antimalware programs may have identified.

If system fails to return to proper operation, reinstallation may be required.