15 Tips very crucial on what to do after you’ve been hacked

If your computer has been compromised and infected with a virus or other malware you need to take action to keep your files from being destroyed and also to prevent your computer from being used to attack other computers.

Here are the basic steps you need to perform to get back to normal after you've been hacked.

1. Change your password

The two most commonly sought pieces of information by hackers are your email address and password. Since most people use the same two details across myriad websites, the same two lines of text can unlock several different accounts. If you change your password, the value of your email address is significantly lessened. 

3. Notify your friends you’ve been hacked

If your friends or family have ever been hacked, you’ll have likely discovered this via a poorly written mass email featuring a phishing link. To make sure no one succumbs to such nefarious behavior, email everyone in your contact list to let them know you’ve been hacked. In the case of a Facebook or Twitter account, a status update should suffice.

4. Keep an eye on your bank account

In the worst case scenario, a hacker will use your email address and password to access the credit card details of those accounts they’re linked to. Any of their purchases will show up on your bank statements, so be sure to notify the relevant parties if anything suspicious does turn up.

5. Scan your computer for malware

Assuming your email has been breached, it’s safe to assume your computer might be infected with malware too. To eradicate this problem, use your pre-installed software or a free alternative like AVG or Avast. This should also pick up any keystroke software installed on your computer to discern any extra passwords you may use.

6. Isolate Your Computer

In order to cut the connection that the hacker is using to "pull the strings" on your computer, you need to isolate it so that it can't communicate on a network. Isolation will prevent it from being used to attack other computers as well as preventing the hacker from continuing to be able to obtain files and other information. 

7. Shutdown and remove the hard drive and connect it to another computer as a non-bootable drive

If your computer is compromised you need to shut it down to prevent further damage to your files.

After you have powered it down, you will need to pull the hard drive out and connect it to another computer as a secondary non-bootable drive. Make sure the other computer has up-to-date anti-virus and anti-spyware. You should probably also download a free rootkit detection scanner from a reputable source like Sophos.

To make things a little easier, consider purchasing a USB drive caddy to put your hard drive into make it easier to connect to another PC. If you don't use a USB caddy and opt to connect the drive internally instead, make sure the dip switches on the back of your drive are set as a secondary "slave" drive. If it is set to "master" it may try to boot the other PC to your operating system and all hell could break loose again.

If you don't feel comfortable removing a hard drive yourself or you don't have a spare computer then you may want to take your computer to a reputable local PC repair shop.

8. Scan your drive for infection and malware

Use the other host PC's anti-virus , anti-spyware, and anti-rootkit scanners to ensure detection and removal of any infection from the file system on your hard drive.

9. Backup your important files from the previously infected drive

You'll want to get all your personal data off of the previously infected drive. Copy your photos, documents, media, and other personal files to DVD, CD, or another clean hard drive.

10. Move your drive back to your PC

Once you have verified that your file backup has succeeded, you can move the drive back to your old PC and prepare for the next part of the recovery process.

Set your drive's dip switches back to "Master" as well.

11. Completely wipe your old hard drive (repartition, and format)

Even if virus and spyware scanning reveals that the threat is gone, you should still not trust that your PC is malware free. The only way to ensure that the drive is completely clean is to use a hard drive wipe utility to completely blank the drive and then reload your operating system from trusted media.

After you have backed up all your data and put the hard drive back in your computer, use a secure disk erase utility to completely wipe the drive. There are many free and commercial disk erase utilities available.

The disk wipe utilities may take several hours to completely wipe a drive because they overwrite every sector of the hard drive, even the empty ones, and they often make several passes to ensure they didn't miss anything. It may seem time-consuming but it ensures that no stone is left unturned and it's the only way to be sure that you have eliminated the threat.

12. Reload the operating system from trusted media and install updates

Use your original OS disks that you purchased or that came with your computer, do not use any that were copied from somewhere else or are of unknown origin. Using trusted media helps to ensure that a virus present on tainted operating system disks doesn't reinfect your PC.

Make sure to download all updates and patches for your operating system before installing anything else.

13. Reinstall anti-virus, anti-spyware, and other security software prior to any other programs.

Before loading any other applications, you should load and patch all your security related software. You need to ensure your anti-virus software is up-to-date prior to loading other applications in case those apps are harboring malware that might go undetected if your virus signatures aren't current

14. Scan your data backup disks for viruses before your copy them back to your computer

Even though you are fairly certain that everything is clean, always scan your data files prior to reintroducing them back into your system.

15. Make a complete backup of your system

Once everything is in pristine condition you should do a complete backup so that if this ever happens again you won't spend as much time reloading your system. Using a backup tool that creates a bootable hard drive image as a backup will help speed up future recoveries immensely.