How Do I Get Malware Off My PC Once and for All?

Q. My PC caught a spyware infection that replicates itself even after I've deleted it from the Windows Registry. I've tried all the spyware-removal tools I could find, but I am still unable to get rid of it.

A. If scanning with multiple antispyware programs doesn't remove it, try using Windows' System Restore feature (note that Windows 2000 lacks System Restore). Select Start, Programs (or All Programs), Accessories, System Tools, System Restore. Choose Restore my computer to an earlier time, click Next, pick the earliest Restore Point available on the displayed calendar, and follow the prompts.

Should System Restore fail to solve the problem, your next steps are to reboot your PC and press <F8> before your monitor switches resolution as Windows loads. At the resulting menu, select Safe Mode with a Command Prompt, and then pick your operating system. At the command prompt, type C:\windows\system32\restore\rstrui.exe, press <Enter>, and try running System Restore from there. If your PC is still infected after this, I must make like Dear Abby and recommend that you seek the assistance of a professional. Contact the support desks of your various security software vendors, one of which may have the solution.

For the community approach to support, download the free HijackThisand run it to create a very technical report on your system's suspicious Windows behavior (see FIGURE 1 below). Post this report on one of the many Web forums frequented by people who may be able to make heads or tails of it. Both TechSoup and Spyware Warrior have excellent forums with helpful participants.

FIGURE 1

If all else fails, back up your data folders and get ready to reformat the PC's hard drive and restore your system from a full backup. If you don't have an image backup of your drive, you'll have to reinstall Windows, install and update your malware protection, and restore your data from the backup.

Of course, reformatting and restoring your drive is easiest if you've been using a backup program with good disaster recovery features. Image backup programs such as Acronis's $50 True Image and Symantec's $70 Norton Save & Restore (which replaces the company's venerable Ghost utility) are particularly adept at drive restoration, allowing you to restore the entire drive from a preinfection backup.

If you don't have a good system backup, reinstall Windows using the restore disc or Windows CD that came with your system, selecting an option that will destroy everything on your hard drive (a good idea in this particular case). You'll also have to reset your Internet connection, and reinstall your hardware drivers and applications.

Once you have Windows and your programs back in place, you'll have to update all of your security utilities, and then scan the backup of your data folders with your antivirus program before moving the files back to your hard drive.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Lincoln Spector

PC World (US online)
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?