| Author |
Message |
| Ghost Post |
Posted: Sat Feb 21, 2004 7:12 am Post subject: 1 |
|
Without any updates, Spybot comes with just enough to fix DNS redirection, so you can get the other updates.
Of coures, I did mention updating Spybot before using it on the first page of this thread *shrugs*
HijackThis! is very effective, especially in fixing broken host files, dead menus (you unistalled mysearchbar but the checkbox is still there for it)
Oh, but for HijackThis! you actually have to know what you're doing =/. It doens't have any "automatic fix" options
If you need a copy, AIM me at Strickler22OnMac
[This message has been edited by Merc's Boyfriend (edited 02-21-2004 02:13 AM).] |
|
 |
| extropalopakettle |
Posted: Sat Feb 21, 2004 6:31 am Post subject: 0 |
|
You may be right - I did an update of SpyBot, and it's catching something it didn't catch before.
HijackThis is supposed to be pretty good, but there's a DDOS attack against the more popular sites that host it right now. |
|
 |
| extropalopakettle |
Posted: Sat Feb 21, 2004 6:24 am Post subject: -1 |
|
| I have it. And AdAware. Latest versions available. There are things they both don't fix, coolwebsearch being a notable example. Google: http://www.google.com/search?q=coolwebsearch |
|
 |
| Neo |
Posted: Sat Feb 21, 2004 5:48 am Post subject: -2 |
|
SpyBot Seach&Destroy 1.2.
Download, update it, and you'll be happy. |
|
 |
| extropalopakettle |
Posted: Sat Feb 21, 2004 5:31 am Post subject: -3 |
|
This really sucks.
Anybody have cwshredder.exe or hijackthis.exe?
I used to get these from www.merijn.org and www.spywareinfo.com, but both seem to be unreachable right now. I suspect under they're under attack (I'm pretty sure the problem is not on my side). |
|
 |
| mudbuck |
Posted: Sun Feb 15, 2004 11:34 pm Post subject: -4 |
|
Virus Annihilated!
Thanks! |
|
 |
| Samadhi |
Posted: Sun Feb 15, 2004 9:27 pm Post subject: -5 |
|
| I didn't really have problems, but I don't want that crap on my computer. It found a lot of stuff, thanks. |
|
 |
| Huey |
Posted: Sun Feb 15, 2004 9:08 pm Post subject: -6 |
|
| To those who got the reg info from me, lemme know if Spyhunter fixes your problem. Thanks. |
|
 |
| Chuck |
Posted: Sun Feb 15, 2004 12:38 am Post subject: -7 |
|
| Obviously a browser that did nothing but display text and pictures would be secure because nothing it encountered could tell it to do anything to your computer except display stuff on your screen. At least it would need help to trash your system. I suppose it could put a big image on the screen that says "C:\Command.Com has been corrupted. To continue, delete it and then press your reset button." But it couldn't do anything to you by itself. |
|
 |
| Huey |
Posted: Sat Feb 14, 2004 7:50 pm Post subject: -8 |
|
SpyHunter is a decent program. I had to pay for this ting, so I'll milk it for all it's worth, by giving it to everybody.
http://mason.gmu.edu/~hly/temp/spyhunterFULL.zip
Gimme an email address and I'll send you the email/password required. |
|
 |
| Ghost Post |
Posted: Sat Feb 14, 2004 7:33 pm Post subject: -9 |
|
| Chuck didn't say anything about secure, he said pictures and text =p |
|
 |
| Antrax |
Posted: Sat Feb 14, 2004 10:16 am Post subject: -10 |
|
Explorer 3 or 4 are anything BUT secure. If you want that, Chuck, go get Lynx  Antrax
------------------ "Look, that's why there's rules, understand? So that you think before you break 'em" - Lu-Tze, Thief of Time |
|
 |
| DP |
Posted: Sat Feb 14, 2004 7:40 am Post subject: -11 |
|
| I have disabled the porn link, as apparently a warning in bold is not enough for some click-happy members. |
|
 |
| Ghost Post |
Posted: Sat Feb 14, 2004 4:58 am Post subject: -12 |
|
I'm sure if you went putting around oldversion.com you could find yourself a nice version of IE 3 or 4 =]
Then again, I don't think it supports xml, asp, or java...
So... you'd be really limited
I think Mozilla/Firefox is the best you can go with |
|
 |
| Chuck |
Posted: Sat Feb 14, 2004 4:53 am Post subject: -13 |
|
| Someone should invent a browser that does nothing but display text and pictures. It would be hard to exploit software that doesn't know how to do anything. |
|
 |
| Ghost Post |
Posted: Sat Feb 14, 2004 4:52 am Post subject: -14 |
|
I have a Mac, a very sweet PowerBook, but I still have a PC, therefore must protect myself.
On the other hand, I don't like a lot of programs on my PC and since you can't uninstall IE (being that it's engine is what powers windows explorer) I just make it nice and secure.
Although FireFox is very now (I use it on my Mac, since it seems to support a lot more than Safari) |
|
 |
| MatthewV |
Posted: Sat Feb 14, 2004 4:41 am Post subject: -15 |
|
| This looks like a problem that is solved by using a Mac. Or maybe just a less used broswer that has twice as many holes in it but nobody wants to find them. |
|
 |
| Beartalon |
Posted: Sat Feb 14, 2004 4:32 am Post subject: -16 |
|
RPC = Remote Procedure Call (as stated) DCOM = Distributed Common Object Model (to complete Antrax)
|
|
 |
| Ghost Post |
Posted: Sat Feb 14, 2004 3:46 am Post subject: -17 |
|
RPC is actions that remote admins or users can do...
You can't disable RPC, but you can disable Remote Registry (RPC) etc etc etc...
Anything that ends in (RPC)
And don't just turn it off, stop it and disable it |
|
 |
| Martin_levi3935 |
Posted: Sat Feb 14, 2004 3:00 am Post subject: -18 |
|
| Hmm I found out that if you are easy going life goes better for ya. And I'm living proof. So maybe become more easy going and maybe your computer will be easy going with no problems. That also goes for cheese of baby back ribs of the council of Teletubies. |
|
 |
| Samadhi |
Posted: Sat Feb 14, 2004 2:29 am Post subject: -19 |
|
RPC - "Essential service" It won't let me stop that.
|
|
 |
| Vinny |
Posted: Sat Feb 14, 2004 12:59 am Post subject: -20 |
|
Extro, you need an adwares killer program. The good one out there is Adaware and SpyHunter.
Huey purchased a valid licensed SpyHunter program. Seems to work pretty well in eliminating all the adwares on our computers. I'll get him to lend you a copy in a little bit.
|
|
 |
| mudbuck |
Posted: Sat Feb 14, 2004 12:19 am Post subject: -21 |
|
Bah. In accordance my one time clicking on links before I even read the text, I got the nasties on the computer. 
Extro, please unlink that link. |
|
 |
| Antrax |
Posted: Fri Feb 13, 2004 9:34 pm Post subject: -22 |
|
RPC is "remote procedure call". I'm not quite sure what its real purpose is, but worms love it because it lets them execute instructions on remote machines. DCOM is Distributed Common something something. It's meant to let you view, say, Word documents on my computer, even if you don't have Word but I do, by querying your computer. It's very object-oriented, and also very loved by worms, who again can execute code. Messanger is meant to send messages between computers in a network. It's also used to send annoying pop-up spam. You can view your services in one of two ways: Under control panel, "Administrative Tools", services. Or Start->Run. Type "msconfig". Look under the "services" tab. Since windows has many components, you might not know what's legit and what's not, or what's dangerous and what isn't. There are two solutions. Firstly, in msconfig you can check the box that says "hide Microsoft services" and see what's left over. This will help you recognise spyware that disguises itself like a legitimate service (some just add a service called "haha screwed you" or something similar), and just services you don't need. The other way is slower, but much more informative and reliable -- you can just google for the service name (and on many cases, the executable name). If it's a virus, you'll probably get Symantec.com explaining what virus it is. If it's a legit Windows service, you'll get a site like lilutils.com explaining what the service is and what it does. If it's neither, you'll just know what it does by the name (like I have ATI Display control, etc). Antrax
------------------ "Look, that's why there's rules, understand? So that you think before you break 'em" - Lu-Tze, Thief of Time |
|
 |
| Samadhi |
Posted: Fri Feb 13, 2004 8:19 pm Post subject: -23 |
|
| Quote: |
| I'm talking especially about things like the RPC service, DCOM, Messanger and the such. |
I've heard that before, where is that? And what exactly do they do? |
|
 |
| Chuck |
|
 |
| KingPin |
|
 |
| Mercuria |
Posted: Wed Feb 11, 2004 10:27 pm Post subject: -26 |
|
oh, and,
| Quote: |
| If you have Windows XP, there's a system setting that allows "messages" to be sent to your computer. So even when you're not web surfing, you get popup ads. Nearly drove me nuts until someone shut the messaging off for me. |
it's not just xp... i'm rather upset at having to turn it off because i used to use that service to get in touch with people (after phone call hours) if aim went down ('cause hey, everybody on campus has aim). |
|
 |
| Antrax |
Posted: Wed Feb 11, 2004 10:27 pm Post subject: -27 |
|
Other than installing all these fine programs (Ad-Aware and Spybot I know and recommend of, and it's no secret I've been using Mozilla ever since it came out, more or less), I strongly advise to disable windows services if you don't need them. I'm talking especially about things like the RPC service, DCOM, Messanger and the such. Antrax
------------------ "Look, that's why there's rules, understand? So that you think before you break 'em" - Lu-Tze, Thief of Time |
|
 |
| Mercuria |
Posted: Wed Feb 11, 2004 10:20 pm Post subject: -28 |
|
| Quote: |
| Mercuria, clicking "no" or "cancel" doesn't protect you that simply. Those can be mapped to anything commands the programmer wants. |
not to the site dialogue--to the microsoft warning box (do you really want to install blah blah certified by blah blah)... which is why i said you needed to be updated.
direct connect also has ads that want to install gator. and popups... and popups that want to install gator =/ |
|
 |
| Ghost Post |
Posted: Wed Feb 11, 2004 10:20 pm Post subject: -29 |
|
You can go through and disable all the stuff you don't agree with in ActiveX settings, but, if you use Spybot S&D and the immunize option, it automatically sets all these settings to a custom method.
Those settings have never interfered with my browsing and I'm crap free. |
|
 |
| Beartalon |
Posted: Wed Feb 11, 2004 9:54 pm Post subject: -30 |
|
extro - I've downloaded all the MS Security patches, unless there are ones Windows Update doesn't give me.
Samadhi - that might be my issue. |
|
 |
| Samadhi |
Posted: Wed Feb 11, 2004 7:56 pm Post subject: -31 |
|
Also, most crap comes in through DirectX. I disable mine everywhere except a few trusted sites.
I recommend EVERYONE does this. If you don't know how: Blocking Tools-->Internet Options-->Security Highlight Internet. Medium is usually good enough. Still allows activeX that you've OK'd, like from Microsoft or something, prompts you for permission to run signed activeX and disables any unsigned activeX.
Allowing Highlight Trusted Sites. Choose low. Be really sure you can depend on this site to not abuse you, because they can if they're on the list. Click the sites button. Type in the url you want to give an open door to and click add. If they aren't HTTPS you'll need to uncheck the box at the bottom.
Also, I remember that WhenUSaveNow crap. Installed by driveby ActiveX and initiated my education about this mierda. You can see it in your processes and can end it and even delete it. But it hides a registry key that reinstalls it at start up. At the time, adaware and spyware did not remove it. They do now.
If you ever run into something that won't go away, this is a pretty good site for manual removal of most parasites. |
|
 |
| extropalopakettle |
|
 |
| Bo |
Posted: Wed Feb 11, 2004 3:18 pm Post subject: -33 |
|
Also, it's much better to learn where and how a virus can run on your PC than to depend solely on all these anti-virus or anti-ad/spyware programs. There's only so many ways to hide and execute these programs.
For instance, a lot of them hide executables and .dll files in your C:\WINDOWS\Fonts directory since even if you have all hidden and system files displayed, they won't show up in explorer. You have to right click on the folder and do a search for *.* Test it out and you'll see that the folder has twice as many files in it than explorer normally shows you since it is a system font folder. If you see any dll files or exe files in there delete them right away. There should only be ttf and fon files there. |
|
 |
| Bo |
Posted: Wed Feb 11, 2004 3:05 pm Post subject: -34 |
|
Here's a good tool to run to see everything that is starting up when your computer boots. The result will help you track down where programs are starting from.
http://www.merijn.org/files/StartupList.exe |
|
 |
| Beartalon |
Posted: Wed Feb 11, 2004 3:04 pm Post subject: -35 |
|
Mercuria, clicking "no" or "cancel" doesn't protect you that simply. Those can be mapped to anything commands the programmer wants.
Speaking of such, something that really bothers me is looking in my IE history and seeing pages that I know I never surfed AND never saw the address in the address bar. It's these hidden popups or browser redirects that happen so fast you don't notice.
Last night, while surfing, my computer was suddenly taken over by ginst_001_1234_4201.exe and ran my CPU to 100%, disabusing my access to whatever I was running. ZoneAlarm didn't ask if it could run. It was the Internet install of Gator software (a whole suite of annoyware) and I never explicitly said "yes" to any download nor visited a site with explicitly labelled downloads on it. In order to get control, I had to reboot, use ZoneAlarm to refuse it Internet access and it tried 53 times in a few seconds before it stopped trying. I found the program in my IE Temp folder, which means some page I went to placed the file there. When it ran, it had put itself into the start-up files as a process. I stopped the service, removed it from msconfig, rebooted and deleted the folder and files after uninstalling what it tried to add to my system.
As much as they do well in protecting, these spam and spy killing software just don't work in every situation.
[This message has been edited by Beartalon (edited 02-11-2004 10:04 AM).] |
|
 |
| Werebear |
Posted: Wed Feb 11, 2004 3:02 pm Post subject: -36 |
|
| If you have Windows XP, there's a system setting that allows "messages" to be sent to your computer. So even when you're not web surfing, you get popup ads. Nearly drove me nuts until someone shut the messaging off for me. |
|
 |
| extropalopakettle |
Posted: Wed Feb 11, 2004 2:56 pm Post subject: -37 |
|
| yeah, yeah. There have been linux worms and viruses though. Not that microsoft products aren't crap, security-wise especially, but due to their prevelance (and the fact that l33t h4x0rs and script kiddies alike hate them) they are targeted far more often. |
|
 |
| HappyMutant |
Posted: Wed Feb 11, 2004 2:35 pm Post subject: -38 |
|
*Enters, leaves a stack of Linux CDs on a prominent table, walks away* ^^^
|
|
 |