From ee03a19e3a538c33e2294a8292635dc88f27d9c8 Mon Sep 17 00:00:00 2001
From: Ben Sanders <ben@sanders.life>
Date: Sat, 29 Nov 2025 15:58:18 -0500
Subject: published article on removing malware and edited the README file

---
 _site/GEMFILE                                      |  15 +++
 _site/README.md                                    |   4 +
 .../images/pexels-shkrabaanthony-5475752.jpg       | Bin 0 -> 817283 bytes
 _site/blog/index.html                              |  12 +++
 _site/deploy-site.sh                               |  16 +++
 _site/feed.xml                                     |  71 ++++++++++++-
 _site/index.html                                   |  12 +++
 _site/malware-removal-guide/index.html             | 111 +++++++++++++++++++++
 _site/sitemap.xml                                  |   4 +
 9 files changed, 244 insertions(+), 1 deletion(-)
 create mode 100644 _site/GEMFILE
 create mode 100644 _site/assets/images/pexels-shkrabaanthony-5475752.jpg
 create mode 100644 _site/deploy-site.sh
 create mode 100644 _site/malware-removal-guide/index.html

(limited to '_site')

diff --git a/_site/GEMFILE b/_site/GEMFILE
new file mode 100644
index 0000000..5d0a841
--- /dev/null
+++ b/_site/GEMFILE
@@ -0,0 +1,15 @@
+source "https://rubygems.org"
+
+# Specify Jekyll version (latest stable as of mid-2025 is ~4.3.x)
+gem "jekyll", "~> 4.3"
+
+# Plugins
+gem "jekyll-seo-tag"
+gem "jekyll-sitemap"
+gem "jekyll-feed"
+
+# If you are developing a custom theme locally, add:
+# gem "my-theme", path: "./my-theme"
+
+# For deployment on GitHub Pages (if using it), replace the above with:
+# gem "github-pages", group: :jekyll_plugins
diff --git a/_site/README.md b/_site/README.md
index e69de29..0dccc0b 100644
--- a/_site/README.md
+++ b/_site/README.md
@@ -0,0 +1,4 @@
+# Welcome
+
+This is the git repo for my business for Sanders Technology Group, LLC.
+If you found this and need computer help please [visit](https://sanderstg.com).
\ No newline at end of file
diff --git a/_site/assets/images/pexels-shkrabaanthony-5475752.jpg b/_site/assets/images/pexels-shkrabaanthony-5475752.jpg
new file mode 100644
index 0000000..ce437f3
Binary files /dev/null and b/_site/assets/images/pexels-shkrabaanthony-5475752.jpg differ
diff --git a/_site/blog/index.html b/_site/blog/index.html
index 27b1bea..a46fb7a 100644
--- a/_site/blog/index.html
+++ b/_site/blog/index.html
@@ -27,6 +27,18 @@
       <h2>Blog</h2>
       <ul>
         
+          <li>
+            <a href="/malware-removal-guide/">
+              
+                <img src="/assets/images/pexels-shkrabaanthony-5475752.jpg">
+              
+              <h3>Malware Removal Guide 2025</h3>
+              <p><p>This guide will not work if the computer will not boot.
+Complete any OS upgrades AFTER removing malware.</p>
+</p>
+            </a>
+          </li>
+        
           <li>
             <a href="/happy-4th-july/">
               
diff --git a/_site/deploy-site.sh b/_site/deploy-site.sh
new file mode 100644
index 0000000..d039515
--- /dev/null
+++ b/_site/deploy-site.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+
+JEKYLL_DIR="/_site"
+DEPLOY_USER="sanderstggrp"
+DEPLOY_HOST="64.42.181.202"
+DEPLOY_PORT="22"
+DEPLOY_PATH="/home/sanderstggrp/web/sanderstechnologygroup.com/public_html"
+
+# cd "$JEKYLL_DIR"
+# bundle exec jekyll build
+
+rsync -avz --delete -e "ssh -p $DEPLOY_PORT" \
+  _site/ \
+  $DEPLOY_USER@$DEPLOY_HOST:$DEPLOY_PATH
+
+echo "Deployment complete."
\ No newline at end of file
diff --git a/_site/feed.xml b/_site/feed.xml
index 91bf32c..70c9bae 100644
--- a/_site/feed.xml
+++ b/_site/feed.xml
@@ -1,4 +1,73 @@
-<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="4.4.1">Jekyll</generator><link href="http://localhost:4000/feed.xml" rel="self" type="application/atom+xml" /><link href="http://localhost:4000/" rel="alternate" type="text/html" /><updated>2025-10-16T17:47:35-04:00</updated><id>http://localhost:4000/feed.xml</id><title type="html">Sanders Technology Group</title><subtitle>Web design and technology agency serving Northeast Georgia with beautiful, effective websites and technology solutions.</subtitle><author><name>Sanders Technology Group</name><email>sales@sanderstg.com</email></author><entry><title type="html">Happy Fourth of July</title><link href="http://localhost:4000/happy-4th-july/" rel="alternate" type="text/html" title="Happy Fourth of July" /><published>2025-07-04T00:00:00-04:00</published><updated>2025-07-04T00:00:00-04:00</updated><id>http://localhost:4000/happy-4th-july</id><content type="html" xml:base="http://localhost:4000/happy-4th-july/"><![CDATA[<p>Happy Fourth of July from Your Friendly Neighborhood IT Shop!</p>
+<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="4.4.1">Jekyll</generator><link href="http://localhost:4000/feed.xml" rel="self" type="application/atom+xml" /><link href="http://localhost:4000/" rel="alternate" type="text/html" /><updated>2025-11-29T15:57:25-05:00</updated><id>http://localhost:4000/feed.xml</id><title type="html">Sanders Technology Group</title><subtitle>Web design and technology agency serving Northeast Georgia with beautiful, effective websites and technology solutions.</subtitle><author><name>Sanders Technology Group</name><email>sales@sanderstg.com</email></author><entry><title type="html">Malware Removal Guide 2025</title><link href="http://localhost:4000/malware-removal-guide/" rel="alternate" type="text/html" title="Malware Removal Guide 2025" /><published>2025-11-29T00:00:00-05:00</published><updated>2025-11-29T00:00:00-05:00</updated><id>http://localhost:4000/malware-removal-guide</id><content type="html" xml:base="http://localhost:4000/malware-removal-guide/"><![CDATA[<p>This guide will not work if the computer will not boot.
+Complete any OS upgrades AFTER removing malware.</p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>1. Remove all suspicious items from your browser’s extensions and settings/default search provideders
+2. Run rkill which can sometimes take a few minutes to complete and do NOT reboot when complete
+    1. Kills running malicious processes
+    2. Removes policies in the registry that prevent normal OS operation
+    3. Repairs file extension hijacks
+3. Download an updated copy of Malwarebytes and turn on “scan for Rootkits” option then run a “scan”
+4. Run Malwarebytes ADWCleaner using the “Scan Now” button
+    1. Removes majority of adware, PuPs, Toolbars, and Browser hijacks
+    2. Scans for bloatware &amp; pre-installed software and lets you quarantine any or all of it
+    3. Fixes proxy settings changed by malware
+    4. Removes certain non-default browser settings
+</code></pre></div></div>
+
+<p><strong>Links to tools mentioned:</strong></p>
+<ul>
+  <li><a href="https://www.bleepingcomputer.com/download/rkill/">rkill</a></li>
+  <li><a href="https://www.malwarebytes.com/mwb-download/thankyou/">Malwarebytes</a></li>
+  <li><a href="https://www.malwarebytes.com/adwcleaner">Malwarebytes ADWCleaner</a></li>
+</ul>
+
+<p><strong>Optional step but…</strong></p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>1. Run Sophos HitmanPro
+</code></pre></div></div>
+
+<p>HitmanPro is a phenomenal “second-opinion” malware scanner. I recommend clicking “Settings” and uncheck “Scan for tracking cookies” before starting the scan. This will drastically reduce scan times. This tool can only be run ONCE for free. Use it wisely.</p>
+
+<p><strong>Please note:</strong> If malware has prohibited you from browsing the web or downloading files, you can try running the NetAdapter Repair Tool with all options checked which will attempt to restore your internet connection &amp; default browser settings. You may have to download these tools on another computer and move them to a flash drive that you can plug into the infected machine.</p>
+
+<p>If you have run all of the above tools successfully, you should be malware-free. Should you still be having issues then please don’t hesitate to call us at 877-481-1205 and we’ll be happy to take a look further.</p>
+
+<p><strong>Follow-up Steps (highly recommended):</strong></p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>• Using a computer that has not been infected, change passwords to all your online accounts. 
+
+• Consider enabling two-factor authentication on all accounts! 
+
+• Install a better anti-virus. See recommendations below. 
+</code></pre></div></div>
+
+<h2 id="what-is-malware">What is malware?</h2>
+
+<p>Malware is an umbrella term used to refer to a variety of forms of hostile or intrusive software, including computer viruses, worms, trojan horses, ransomware, spyware, adware, scareware, and other malicious programs. It can take the form of executable code, scripts, active content, and other software. [Source: Wikipedia.com]</p>
+
+<h2 id="how-did-i-get-infected">How did I get infected?</h2>
+
+<p>It is difficult to track down the source of an infection. Most infections are actually given permission to run unknowingly by the user. It is recommended to keep User Account Control turned on and never give access to something you do not trust or did not open. Many other infections come via exploits in your browser or browser plug-ins on websites you visit. Always be very careful what you install. Make sure you trust the source implicitly. When downloading programs, always use the publisher’s website directly.</p>
+
+<h2 id="how-to-prevent-future-infections">How to prevent future infections:</h2>
+
+<p>Be very careful what you download and install. Keep your software up-to-date. Using Ninite for installing/updating software is very easy &amp; safe and uses official installers without adding extra software to your PC during installation. Make sure Windows is kept up-to-date as well, including Windows 10 feature updates. Many Windows updates patch exploits and vulnerabilities in your operating system. Most infections are active because the user has unknowingly given it Administrative permission to install and run. The first line of defense starts with you.</p>
+
+<h2 id="the-following-tools-will-aide-you-in-keeping-your-computer-clean">The following tools will aide you in keeping your computer clean:</h2>
+
+<p><strong>Free Anti-Virus Suggestions:</strong></p>
+
+<p>• Malwarebytes (free version must be run manually)
+• <a href="https://www.bitdefender.com/en-us/consumer/free-antivirus">BitDefender</a>
+• <a href="https://www.eset.com/us/home/online-scanner/">ESET Free Online Scanner</a></p>
+
+<p>Free anti-viruses will only get you so far. I would highly recommend purchasing the AV of your choice to get better protection. Companies who offer products for free are usually making money of you one way or another. This has been <a href="https://www.cnet.com/news/privacy/antivirus-firm-avast-is-reportedly-selling-users-web-browsing-data/">proven again recently with Avast</a>. Don’t use Avast!</p>
+
+<p>One more helpful tool is <a href="https://ublockorigin.com/">uBlock Origin</a> which is more useful paired with <a href="https://www.firefox.com/en-US/">Firefox</a> or a <a href="https://www.reddit.com/r/browsers/comments/1j0p156/list_of_firefoxbased_browsers/">Firefox-based browser</a> since <a href="https://blog.chromium.org/2024/05/manifest-v2-phase-out-begins.html">Google began phasing out v2 support</a>.</p>
+
+<p>Article <a href="https://www.reddit.com/r/techsupport/comments/33evdi/suggested_reading_official_malware_removal_guide/">source</a></p>
+
+<p>Photo by Antoni Shkraba Studio: https://www.pexels.com/photo/person-using-black-laptop-computer-5475752/</p>]]></content><author><name>Sanders Technology Group</name></author><summary type="html"><![CDATA[This guide will not work if the computer will not boot. Complete any OS upgrades AFTER removing malware.]]></summary><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="http://localhost:4000/assets/images/pexels-shkrabaanthony-5475752.jpg" /><media:content medium="image" url="http://localhost:4000/assets/images/pexels-shkrabaanthony-5475752.jpg" xmlns:media="http://search.yahoo.com/mrss/" /></entry><entry><title type="html">Happy Fourth of July</title><link href="http://localhost:4000/happy-4th-july/" rel="alternate" type="text/html" title="Happy Fourth of July" /><published>2025-07-04T00:00:00-04:00</published><updated>2025-07-04T00:00:00-04:00</updated><id>http://localhost:4000/happy-4th-july</id><content type="html" xml:base="http://localhost:4000/happy-4th-july/"><![CDATA[<p>Happy Fourth of July from Your Friendly Neighborhood IT Shop!</p>
 
 <p>This post marks a special occasion for us – not just because it’s Independence Day, but also because it’s the launch of our newly designed website! We’re excited to welcome you to this fresh online space that we’ve built with speed, ease of use, and clarity in mind.</p>
 
diff --git a/_site/index.html b/_site/index.html
index d122ca9..e677d49 100644
--- a/_site/index.html
+++ b/_site/index.html
@@ -47,6 +47,18 @@
     <h2>Blog</h2>
     <ul>
       
+        <li>
+          <a href="/malware-removal-guide/">
+            
+              <img src="/assets/images/pexels-shkrabaanthony-5475752.jpg">
+            
+            <h3>Malware Removal Guide 2025</h3>
+            <p><p>This guide will not work if the computer will not boot.
+Complete any OS upgrades AFTER removing malware.</p>
+</p>
+          </a>
+        </li>
+      
         <li>
           <a href="/happy-4th-july/">
             
diff --git a/_site/malware-removal-guide/index.html b/_site/malware-removal-guide/index.html
new file mode 100644
index 0000000..b31e85e
--- /dev/null
+++ b/_site/malware-removal-guide/index.html
@@ -0,0 +1,111 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Malware Removal Guide 2025 - Sanders Technology Group</title>
+  <link rel="stylesheet" href="/assets/css/main.css">
+</head>
+<body>
+  <div id="Main">
+    <div class="navBar">
+    <div class="hamburger">&#9776;</div>
+    <ul>
+      <li><a href="/">Home</a></li>
+      <li><a href="/#about/">About</a></li>
+      <li><a href="/blog/">Blog</a></li>
+      <li><img class="logo" src="/assets/images/STG-logo-v1.png"></li>
+      <li><a href="/#solutions/">Solutions</a></li>
+      <li><a href="/#our-work/">Our Work</a></li>
+      <li><a href="/#contact/">Contact</a></li>
+    </ul>
+  </div>
+  
+    <div id="Blog">
+    <article class="post">
+        
+            <img src="/assets/images/pexels-shkrabaanthony-5475752.jpg" class="featured-image">
+        
+            <h1>Malware Removal Guide 2025</h1>
+            <small><p class="post-date">Published Date: November 29, 2025</p></small>
+        <p>This guide will not work if the computer will not boot.
+Complete any OS upgrades AFTER removing malware.</p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>1. Remove all suspicious items from your browser’s extensions and settings/default search provideders
+2. Run rkill which can sometimes take a few minutes to complete and do NOT reboot when complete
+    1. Kills running malicious processes
+    2. Removes policies in the registry that prevent normal OS operation
+    3. Repairs file extension hijacks
+3. Download an updated copy of Malwarebytes and turn on “scan for Rootkits” option then run a “scan”
+4. Run Malwarebytes ADWCleaner using the “Scan Now” button
+    1. Removes majority of adware, PuPs, Toolbars, and Browser hijacks
+    2. Scans for bloatware &amp; pre-installed software and lets you quarantine any or all of it
+    3. Fixes proxy settings changed by malware
+    4. Removes certain non-default browser settings
+</code></pre></div></div>
+
+<p><strong>Links to tools mentioned:</strong></p>
+<ul>
+  <li><a href="https://www.bleepingcomputer.com/download/rkill/">rkill</a></li>
+  <li><a href="https://www.malwarebytes.com/mwb-download/thankyou/">Malwarebytes</a></li>
+  <li><a href="https://www.malwarebytes.com/adwcleaner">Malwarebytes ADWCleaner</a></li>
+</ul>
+
+<p><strong>Optional step but…</strong></p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>1. Run Sophos HitmanPro
+</code></pre></div></div>
+
+<p>HitmanPro is a phenomenal “second-opinion” malware scanner. I recommend clicking “Settings” and uncheck “Scan for tracking cookies” before starting the scan. This will drastically reduce scan times. This tool can only be run ONCE for free. Use it wisely.</p>
+
+<p><strong>Please note:</strong> If malware has prohibited you from browsing the web or downloading files, you can try running the NetAdapter Repair Tool with all options checked which will attempt to restore your internet connection &amp; default browser settings. You may have to download these tools on another computer and move them to a flash drive that you can plug into the infected machine.</p>
+
+<p>If you have run all of the above tools successfully, you should be malware-free. Should you still be having issues then please don’t hesitate to call us at 877-481-1205 and we’ll be happy to take a look further.</p>
+
+<p><strong>Follow-up Steps (highly recommended):</strong></p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>• Using a computer that has not been infected, change passwords to all your online accounts. 
+
+• Consider enabling two-factor authentication on all accounts! 
+
+• Install a better anti-virus. See recommendations below. 
+</code></pre></div></div>
+
+<h2 id="what-is-malware">What is malware?</h2>
+
+<p>Malware is an umbrella term used to refer to a variety of forms of hostile or intrusive software, including computer viruses, worms, trojan horses, ransomware, spyware, adware, scareware, and other malicious programs. It can take the form of executable code, scripts, active content, and other software. [Source: Wikipedia.com]</p>
+
+<h2 id="how-did-i-get-infected">How did I get infected?</h2>
+
+<p>It is difficult to track down the source of an infection. Most infections are actually given permission to run unknowingly by the user. It is recommended to keep User Account Control turned on and never give access to something you do not trust or did not open. Many other infections come via exploits in your browser or browser plug-ins on websites you visit. Always be very careful what you install. Make sure you trust the source implicitly. When downloading programs, always use the publisher’s website directly.</p>
+
+<h2 id="how-to-prevent-future-infections">How to prevent future infections:</h2>
+
+<p>Be very careful what you download and install. Keep your software up-to-date. Using Ninite for installing/updating software is very easy &amp; safe and uses official installers without adding extra software to your PC during installation. Make sure Windows is kept up-to-date as well, including Windows 10 feature updates. Many Windows updates patch exploits and vulnerabilities in your operating system. Most infections are active because the user has unknowingly given it Administrative permission to install and run. The first line of defense starts with you.</p>
+
+<h2 id="the-following-tools-will-aide-you-in-keeping-your-computer-clean">The following tools will aide you in keeping your computer clean:</h2>
+
+<p><strong>Free Anti-Virus Suggestions:</strong></p>
+
+<p>• Malwarebytes (free version must be run manually)
+• <a href="https://www.bitdefender.com/en-us/consumer/free-antivirus">BitDefender</a>
+• <a href="https://www.eset.com/us/home/online-scanner/">ESET Free Online Scanner</a></p>
+
+<p>Free anti-viruses will only get you so far. I would highly recommend purchasing the AV of your choice to get better protection. Companies who offer products for free are usually making money of you one way or another. This has been <a href="https://www.cnet.com/news/privacy/antivirus-firm-avast-is-reportedly-selling-users-web-browsing-data/">proven again recently with Avast</a>. Don’t use Avast!</p>
+
+<p>One more helpful tool is <a href="https://ublockorigin.com/">uBlock Origin</a> which is more useful paired with <a href="https://www.firefox.com/en-US/">Firefox</a> or a <a href="https://www.reddit.com/r/browsers/comments/1j0p156/list_of_firefoxbased_browsers/">Firefox-based browser</a> since <a href="https://blog.chromium.org/2024/05/manifest-v2-phase-out-begins.html">Google began phasing out v2 support</a>.</p>
+
+<p>Article <a href="https://www.reddit.com/r/techsupport/comments/33evdi/suggested_reading_official_malware_removal_guide/">source</a></p>
+
+<p>Photo by Antoni Shkraba Studio: https://www.pexels.com/photo/person-using-black-laptop-computer-5475752/</p>
+
+    </article>
+</div>
+    <footer id="footer">
+    <small>&copy; Sanders Technology Group, LLC Designed by <a href="https://ben.sanders.life/">Ben Sanders</a></small>
+  </footer>
+  
+  </div>
+  <script src="/assets/js/main.js"></script>
+</body>
+</html>
diff --git a/_site/sitemap.xml b/_site/sitemap.xml
index 9564109..80f6187 100644
--- a/_site/sitemap.xml
+++ b/_site/sitemap.xml
@@ -5,6 +5,10 @@
 <lastmod>2025-07-04T00:00:00-04:00</lastmod>
 </url>
 <url>
+<loc>http://localhost:4000/malware-removal-guide/</loc>
+<lastmod>2025-11-29T00:00:00-05:00</lastmod>
+</url>
+<url>
 <loc>http://localhost:4000/blog/</loc>
 </url>
 <url>
-- 
cgit v1.2.3