Novice user and spyware/adware

[tranceFusion]

I built a PC for a relative and within a few days it was totally filled up with malware.. Shopperz, PC Cleaner PRO, BubbleDock, and 20 more such things. The uninstallers for these applications seemed to just install more of them..

I'm wondering..
1) Is there some resource (article or video) that can help teach a novice user how to identify legitimate update notifications (windows update, adobe updater, etc) from illegitimate in-browser?

2) Is there some combination of anti-malware or browser-level protection that I should install to help guard against this? I had installed Microsoft Security Essentials but it didn't seem to catch any of this stuff.. Even scanning after it was all installed, MSE reported that there was no malware on the system.

 

[sincreator]

Run Malwarebytes and Spybot in safe mode to get rid of the spam/malware.

Malwarebytes: https/www.malwarebytes.org/mwb-download/ get the free download

Spybot Search and destroy: http/www.safer-networking.org/dl/ get the free version of this one also

 

[tranceFusion]

I was hoping to prevent the spyware in the future..

 

[sincreator]

I was hoping to prevent the spyware in the future..

Well only click on trusted content. The ads on the sides are almost always spam. When you install a program, use the custom install option. Sometimes the recommended install can include a whole bunch of bloatware that can lead to malware as well.

Once you have ran the two programs I suggested in safe mode, I would recommend running them once a week to stay clean.

 

[tranceFusion]

This is for another person. I can't control what they click. I want to provide them with the best resources possible for identifying malicious websites and automate, as much as possible, BLOCKING/scanning/removing threats. "Trusted content" means nothing to them as they have no experience with computers or using the internet or the companies operating on it.

 

[eatmypie]

I think what you are asking for is something with real time protection as well as malicious website protection. For this like extensions in web browsers I would get Web of trust, it goes by what other users have reported from the site so if their system got infected by malware or if their AV went off when they visited the website they will give it a negative rating which will pop up in the middle of the screen when the other user with the extension visits the website. It uses a real simple system it shows a little circle next to the links, if it is green it means users have reported the website as being good,legitimate and safe if it is yellow sometimes that just means the website itself is good but maybe it just has to much spam, or sometimes political point of views will also put it as a yellow. Red is like I said before normally something like malware or a scam has accrued on the site. It also blocks the website from running if WOT database has it lots of bad reports on the website, so the user needs to click yes if they want to go to the website or not after the warning.

The other thing to add are simple things like Adblock which is meant to prevent ads, but I also think it helps the average use because they won't have quite so many ads to click on allowing them to get redirected all over the internet.

The next thing would be this https/www.malwarebytes.org/antiexploit/ I've been trying it out a lot lately and it works great, hardens the web browser.

The next thing you would want to install is http/www.foolishit.com/vb6-projects/cryptoprevent/ set it to set it and forget it setting that it offers. It protects against things like the newer ransom malware that has been encrypting user files and asking for money in exchange for the key because it blocks the encryption half of the virus from happening.

As far as Antivirus with real time protection my top 3 are

https/www.f-secure.com/

www.kaspersky.com

https/www.emsisoft.com/en/

My personal favorite out of the 3 is probably F-Secure I know some of the people who work there and they have some of the best set of rules like rare.exe detection which will block say a virus if the name ends in .exe .jar .cab and a lot more, it has a database of stuff most people u usually install so this blocking unless the user agrees to it is a lot more effective then even heuristic scanner that most AV's shove down peoples throat. It also monitors your host file looking for changes and blocking/asking for permission for the program/app to do so. heuristic scanner's really aren't all that had to bypass anymore most viruses just set themselves up so they have a 2-3min delay so they can avoid the heuristic scanner.

I also really don't support Malwarebytes and bitdefender. They both failed all of my tests, websites might rank them nicely but most of the stuff they toss at it isn't really all that amazing.

 

[rgd1101]

install an ad blocker extension.