Major Computer issue

[214thCavalier]

This looks like a useful tool as well.

http://msdn.microsoft.com/security/securecode/columns/default.aspx?pull=/library/en-us/dncode/html/secure11152004.asp

DropMyRights, basically if your running windows in full admin mode (as most of us do) it gives any viruses or malicious code you encounter full rights to install on your computer.

By running DropMyRights on programs you choose for example your web browser and email program they will then run in a restricted mode. This gives you full functionality but removes the ability for any viruses or malicious code to install on your computer.

Seriously reducing your vulnerability level.

[DoctorYO]

You dont need no stinking beta program...

first thing i would do is manually check your registry..

you can do this the non techie way by going to to start menu and clicking the run command.

a window will appear and you enter

msconfig

click ok...


Then goto the startup tab and check the entries..

every entry should have a path to whatever its is doing..

(my machine on xp has like 3 additional entires froma base install which is no entries..) (commit charge about 110-114 megs)

then using the find command (also under the start menu you can investigate the the various programs via google or other means once you have the executable and the path name...

this option works best under the safe mode and you should do your cleaning there.. (after research of course when you have a net connection, safe mode may fubar this on a temporary status so be advised until you reboot..)

Now after you do your cleaning if you have problems with legitimate programs having problems you can back track thru msconifg and re-check what is needed for your computing needs..

The above will manually remove 90% of all spyware/trojans on your machine..

now viruses are another problem but most these days are not miscreant and ineffective, most only highlighting proof of concept and some cheerleading props to the author..

hopes this helps..


DoctorYo

[Elfie]

LOL Curval.... thats an interesting aproach... Install so many protection softwares, that your computer will become so slow, that non of virus's or spywares will execute untill 5PM

Dont need all of them Lada. I use 4 just because not one of them will find everything, but between them all I stay pretty clean

[Modas]

Thanks for all the great help guys!  Probably will be tackling it tonight.

[Staga]

After new, patched installation of Windows + drivers it could be good idea to take a back-up copy.
If you need to reinstall Windows at some point it's about 15min job from a back-up.

[eagl]

Also remember you might have to be in safe mode to delete some stuff.

[Masherbrum]

Originally posted by Modas
Ok -

Here's the scoop.  My girlfriend gets a letter from her ISP stating her email account has been associated with sending out an ENORMOUS amount of spam.  BTW, she is on dial-up.  Forgot to add she is running XP home SP1 and probably has no updates installed either

So, I go out, get the usual programs (spybot, spyware blaster, trojan hunter, etc) and run them and there are dataminers, tracking things and all sorts of crap on her computer.

I'm trying to install a firewall and anti-virus, but once installed, I cannot run the programs.  On top of that, I cannot bring up task manager to actually see whats running.  I do the CTL-ALT-DEL and it pops up for a second and immediately closes down.  Which is bascially what happens when I try to run the firewall and antivirus.

I've booted up in safemode, and run all the above programs, and found a couple of more problems but at this point, I think I'm over my head as far as being able to clean this up.

Can anyone help me with next steps?  Thanks!

Dial up connections do not need a Firewall.  

Karaya

[Chairboy]

Originally posted by Masherbrum
Dial up connections do not need a Firewall.

(above) (phrase) common misconception - miS-konseptshun

[Vulcan]

Originally posted by Masherbrum
Dial up connections do not need a Firewall.  

Karaya

Hope you have good liability insurance

[Masherbrum]

Originally posted by Vulcan
Hope you have good liability insurance

used dial-up for 1.5 years.  NEVER got a virus or the like.  

I now use ZAP 4 for the DSL connection

Karaya

[flakbait]

No need for a firewall on dial-up is a MAJOR misconception! I've been on DU ever since getting online. Yeah, it can be a pain in the rear at times and it takes an age to download anything. Then again, my connection isn't a 24/7 open line to let some pre-pubescent snotwad have fun with my rig. I've always run ZoneAlarm, always used non-M$ software (NS at first, now Firefox; Eudora for mail) and never have I had a spyware or virus infection. How many threads have I seen on this board regarding M$ crapware getting infected? Countless. How many threads have there been from folks using non-M$ software getting infected? Zilch. Throw ZA into the mix and you're pretty much bulletproof. The list of blocked UDP and TCP packets in ZA after just two hours of being online is utterly horrific.

Considering that some of those source IPs are over-seas, I'd rather have overkill security.



-----------------------
Flakbait [Delta6]

[wrag]

Originally posted by Masherbrum
Dial up connections do not need a Firewall.  

Karaya

Dang sorry SIR but I have to disagree.

Had someone from Brazil trying to pass through my computer during online gaming.

Connect was good for about 3 months with no firewall.  Then started having really bad warps and lag.  Kept checking with pingplotter and everything looked great!

Finally, I figured WTH and reinstalled ZoneAlarm.  Why not, was getting lag and warps anyway.

Bang! Very 1st time I went online was getting hit from a Brazilian address, over and over and over!  Went on for about 3 days after I reported it to all involved.  ISP, and game people.  Was using the 30 day free advanced version at the time and it showed the address of the ping.

It finally stopped and when it did so did the lag and warps!

This all happened while I was using dialup.

To be sure I finally formatted and reinstalled everything.

P.S. some claim that when you use dialup you get a different address each time.  Hmmmmmmm......... depending on your ISP I'm not so sure that's always the case anymore?  Or perhaps, if they do find a way in to your machine once, they deposit something like a bot that tells them when you're online and your current address so they can pass through again later?

IMHO EVERYONE needs a firewall and they need it all the time!  

There are some pretty resourceful people/hackers out there!

[Curval]

Originally posted by lada
LOL Curval.... thats an interesting aproach... Install so many protection softwares, that your computer will become so slow, that non of virus's or spywares will execute untill 5PM

hehe

No...I think he did mean for me to pick and choose from a full list of free stuff.  

I'm not quite THAT paranoid...but almost.