DPChallenge: A Digital Photography Contest You are not logged in. (log in or register) 
 

DPChallenge Forums >> Hardware and Software >> Computer Gurus - Trojans
Pages:  
Showing posts 26 - 50 of 59, (reverse)
AuthorThread
 06/01/2006 11:38:30 PM · #26
Fotomann are you getting the warning from norton about every 5 minutes?

If so than it might just be that the emails are coming from the inside, the virus could actually have triggered and your system is trying to email out.

abwiz.f aka alanchum virus has been triggered on some and norton has a mechanism that if too many outgoing email messages have been sent that a warning is popped up down on the system tray. The abwiz.f is causing machines that it has been triggered on to alarm about every 5 mics.

Still looking...
 06/01/2006 11:40:09 PM · #27
Since I switched to Avast I have had zero problems. It's free for personal use.
It's much more than just an AV program too:
* Antivirus kernel
* Automatic updates
* Simple User Interface
* Virus Chest
* Resident protection
* System integration
* P2P and IM Shields
* Integrated Virus Cleaner
* Network Shield
* Support for 64-bit Windows
* Web Shield
* Internationalization
 06/01/2006 11:40:09 PM · #28
Originally posted by mad_brewer:
Originally posted by fotomann_forever:
My question really is: Did Netsky leave a hole that is letting these things in. I appreciate that NAV is catching them, but I'd like to stop them at thier source. Never had an issue before netsky.


Have you done a full system scan or just let NAV catch it in real time? Some of these buggers change their name and hide in mysterious places.


Yup weekly. I ran NAV in safemode yesterday and nothing. I'm running the MS Live Security Center now and it has detected a virus... so it looks like NAV let me down.
 06/01/2006 11:44:26 PM · #29
Originally posted by awpollard:
Fotomann are you getting the warning from norton about every 5 minutes?

If so than it might just be that the emails are coming from the inside, the virus could actually have triggered and your system is trying to email out.

abwiz.f aka alanchum virus has been triggered on some and norton has a mechanism that if too many outgoing email messages have been sent that a warning is popped up down on the system tray. The abwiz.f is causing machines that it has been triggered on to alarm about every 5 mics.

Still looking...


I'm getting them about once a day. The latest was caught right before I posted this thread while opening Cs2.

Message edited by author 2006-06-01 23:46:05.
 06/01/2006 11:47:30 PM · #30
ZoneAlarm seems to have gone rotten in the last few years. Try switching to Sygate. Between that and my Norton I have never had a single problem, and I used to have an online job that required me to go fishing around in some rather skeevy places so thats saying quite a lot.
06/01/2006 11:56:38 PM · #31
About NetSky.P

I should also mention that I favor Eudora over Outlook specifically because no one (that I've heard about) ever designs viruses or trojans to take advantage of Eudora, while Outlook has about a million and a half known exploits.

Firefox has been allegedly safer than IE, but it's been out long enough and gained enough popularity that I no longer know that to be true.

Lastly - Spy Sweeper is the best anti-spyware package on the marketand is worth the investment. Spybot and AdAware have really spotty update frequency and often don't catch everything they should.

Message edited by author 2006-06-02 00:00:48.
 06/02/2006 12:05:39 AM · #32
Originally posted by fotomann_forever:
Originally posted by awpollard:
Fotomann are you getting the warning from norton about every 5 minutes?

If so than it might just be that the emails are coming from the inside, the virus could actually have triggered and your system is trying to email out.

abwiz.f aka alanchum virus has been triggered on some and norton has a mechanism that if too many outgoing email messages have been sent that a warning is popped up down on the system tray. The abwiz.f is causing machines that it has been triggered on to alarm about every 5 mics.

Still looking...


I'm getting them about once a day. The latest was caught right before I posted this thread while opening Cs2.


Cool, so they are inbound and the critter hasn't been unleashed.

For fun download the free (1M) Stinger standalone virus McAfee app and run it and see what it finds. I use this with my field users and it has been quite successful.
 06/02/2006 12:09:24 AM · #33
Originally posted by awpollard:

Cool, so they are inbound and the critter hasn't been unleashed.

For fun download the free (1M) Stinger standalone virus McAfee app and run it and see what it finds. I use this with my field users and it has been quite successful.


Thanks, downloaded it. Will run it after MS Live gets done running. I'm throwing everything in. I want this stopped... LOL I hate knowing my puter is infected.

ETA: MS Live has found 2 viruses so far. Don't know what they are yet.

Message edited by author 2006-06-02 00:10:20.
 06/02/2006 12:18:31 AM · #34
Originally posted by karmabreeze:
About NetSky.P

I should also mention that I favor Eudora over Outlook specifically because no one (that I've heard about) ever designs viruses or trojans to take advantage of Eudora, while Outlook has about a million and a half known exploits.

Firefox has been allegedly safer than IE, but it's been out long enough and gained enough popularity that I no longer know that to be true.

Lastly - Spy Sweeper is the best anti-spyware package on the marketand is worth the investment. Spybot and AdAware have really spotty update frequency and often don't catch everything they should.


For reference: Eudora uses SMTP/POP protocols you are no safer from certain viruses. Virus are not written for Outlook they are written for protocols(transports) and vulnerabilities.

Besides Virus' like Netsky.x contain their own SMTP engine. It don't matter what Client you open it with, if you launch it, it will install it's own mailer. Now we are back to Port 25. Note that Netsky is more likely to be passed through a P2P network, most notably was passed around disquised as a Harry potter game not too long ago.

Message edited by author 2006-06-02 00:19:19.
 06/02/2006 12:37:04 AM · #35
If you really have a problem with torjans and NAV isn't giving you a false alarm no amount of scanning while the main operation system is loading will help. You need to perform a boot scan to remove any lingering trojans.
 06/02/2006 01:21:38 AM · #36
MS Live found thiss:

VirTool:WinNT/Smallrk.D

is that a rootkit?

Message edited by author 2006-06-02 01:22:16.
 06/02/2006 01:28:47 AM · #37
Originally posted by fotomann_forever:
MS Live found thiss:

VirTool:WinNT/Smallrk.D

is that a rootkit?


Appears to be... not a well publicised extension (smallrk.d) though.

Edit:
Did it also find TrojanDownloader:Win32/Small.CCS


Message edited by author 2006-06-02 01:33:35.
 06/02/2006 01:37:13 AM · #38
No it didn't. But I'm running the McAfee Stinger program now. MS Live says it got rid of the Smallrk.D
06/02/2006 01:43:25 AM · #39
Leroy, did you disable System Restore before attempting to clean the virus?
 06/02/2006 01:45:10 AM · #40
Originally posted by crayon:
Leroy, did you disable System Restore before attempting to clean the virus?


I don't use system restore... LOL..a waste of space.
 06/02/2006 02:15:27 AM · #41
McAfee Stinger gave me a clean bill of health. Anything else I should do to make sure I'm clean?
 06/02/2006 02:20:29 AM · #42
Originally posted by fotomann_forever:
McAfee Stinger gave me a clean bill of health. Anything else I should do to make sure I'm clean?


Woot!...I think we just sit back and see if norton warns you again.
 06/02/2006 02:22:04 AM · #43
Sounds good to me. I may run NAV in safe mode while I sleep tonight.

Thank you much for your help with this. All of you.

Message edited by author 2006-06-02 02:22:32.
 06/02/2006 02:43:24 AM · #44
Originally posted by buzzrock:
You gotta delete this pic I think--



BTW, that was funny. I was just overwhelmed with trying to get the little monster out of my puter. :-)
 06/02/2006 02:58:58 AM · #45
Originally posted by awpollard:
Originally posted by karmabreeze:
About NetSky.P

I should also mention that I favor Eudora over Outlook specifically because no one (that I've heard about) ever designs viruses or trojans to take advantage of Eudora, while Outlook has about a million and a half known exploits.


For reference: Eudora uses SMTP/POP protocols you are no safer from certain viruses. Virus are not written for Outlook they are written for protocols(transports) and vulnerabilities.


I'm not sure if I'm just not understanding what you wrote, but there is nothing inherent to SMTP or POP [or POP's ``successor'', IMAP] that would make one more susceptible to a virus (or worm). That would be akin to saying that whether you use MicroSoft Word or DOS Edit, you're equally in danger of contracting a Word macro virus because they both store files on floppy diskettes. MicroSoft's Outlook and Outlook Express have traditionally been more problematic because their design didn't take security into consideration. Both contain powerful scripting languages (previously, and presumably still VB Script?) that provide access to the entire computer and operating system, and malicious people are able to get you to run scripts either automatically through bugs in the software, or manually through social engineering. Eudora and other mail clients don't have (as large) a problem with (1), and there isn't anything that can really be done with (2)--you still have this problem if you're using a webmail client (such as yahoo's or google's).

Originally posted by karmabreeze:

Firefox has been allegedly safer than IE, but it's been out long enough and gained enough popularity that I no longer know that to be true.


Firefox has had a few problems lately, but still not on the order of what IE has seen. Of course, it doesn't matter how *many* problems a program has, just what the most egregious, unfixed, error is. According to Secunia, IE has
21 vulnerabilities that have not been fixed yet, including at least one that is highly critical, where as Firefox has 4, the most severe of which is less critical. [Browser number three (four?), Opera, currently has zero outstanding vulnerabilities known.]
06/02/2006 05:22:33 AM · #46
I run AVG free, Zone Alarm, Eudora, and Firefox.. and I have been hit with exactly 0 viruses/trojans/worms in the last 3 years.

But of course, doomsayers will say that "It's only a matter of time!!! OMG!! SWITCH TO MAC!"

Heh.

Never ending really. Well, one day, if Mac ever has the market share that Microsoft has, you can expect countless viruses for that system too. bet on it.

In the meantime, you just do what you can and keep your ears and eyes open for the best combinations of software (and maybe a little common sense), to keep malicious programs off your system. And yes, that means stop going to porn sites and downloading the "latest funny things from your email"
 06/02/2006 05:34:40 AM · #47
Originally posted by Artyste:
one day, if Mac ever has the market share that Microsoft has

Good one! XD
 06/02/2006 07:02:09 AM · #48
Originally posted by MikeJ:
I'm sorry, but any program that is FREE is not going to be as good as one of the main ones. The next time a brand new virus comes out, see who has the blocks for it first... Norton, McAffee, PC'Cillian or one of those free programs.


Actually, in many tests, the best free anti-virus programs do as well as or better than the best paid anti-virus ones. The free programs generally have a (for-commercial-use) paid product sitting behind them.

Certainly, a number of my friends who had paid for Norton and been frustrated with it have been very happy - and virus-free - since I switched them onto AVG.

[quote]You get what you pay for and I'd rather pay for good protection than something is free. Although, if you absolutely don't have the money, then something free is better than nothing. [/quote]

"You get what you pay for" is a common heuristic that is not always grounded in truth - in fact, the wikipedia article on heuristics refers to this as the "price equals quality bias".
06/02/2006 07:23:45 AM · #49
I use avast and have had no trouble, its free, auto updates well and isn't a system hog. I know two people that do PC support - one of the first things they as is "Are you running Norton utilities" it seems to clash with all sorts or things. I wouldn't be surprised if virus writers target NAV because its popular - same idea as targetting windows.

For firewall - if you are on broadband its best to have a hardware router (or a linux box for the true geeks) and have it set up well. I have one, and run zone alarm as a second line of defence - seems good so far. Only virus I ever got was from a floppy disk (remember those?) I used in a public PC. I wasn't running antivirus software back then...
 06/02/2006 07:40:30 AM · #50
What I do to keep my network and pcs secure:

Keep Windows updated
Keep anti-virus updated
Run a firewall
Scan with Spybot/AdAware
Change defaults on wireless network
Don't use P2P
Online email only
Don't open anything I shouldn't, no matter how much money they claim I've won, how pretty the girl looks, etc.

In the nearly 20 years I've used PCs, I had only a vew viruses and they were quickly cleaned.
Pages:  
Current Server Time: 01/02/2026 01:47:23 PM

Please log in or register to post to the forums.


Home - Challenges - Community - League - Photos - Cameras - Lenses - Learn - Help - Terms of Use - Privacy - Top ^
DPChallenge, and website content and design, Copyright © 2001-2026 Challenging Technologies, LLC.
All digital photo copyrights belong to the photographers and may not be used without permission.
Current Server Time: 01/02/2026 01:47:23 PM EST.