Search the archive:
YaBB - Yet another Bulletin Board
 
   
 
Pages: 1 2 
Send Topic Print
Ugh... My computer contracted a virus... (Read 1546 times)
Aug 5th, 2007 at 7:24pm

ThomasKaira   Offline
Colonel
FS9 still lives.
Where Charlie Don't Surf

Gender: male
Posts: 881
*****
 
Do not worry, it has been fixed for now, but I am open to suggestions for prevention.


Symptoms: Internet Explorer would crash attempting to open a web page, and would also cause my computer to crash
                Windows Explorer would only stay open for about 30 seconds, then crash
                 Shocked ShockedSystem Restore crashed upon attempting to open (this one was a little scary)

Thankfully, my stepfather is pretty good at dealing with computer probelms, but we both came to the same conclusion: the corrupted files would need to be reinstalled.

Thanks to his wizardry, we managed to perform a reinstallation of Windows XP without the hard drive being wiped clean, and the virus seems to have been erased.

Any suggestions on how to prevent this in the future? Any and all suggestions are welcome.

Another side effect of being cured is my computer does run noticably quicker now, sort of proving it was a virus.
 
IP Logged
 
Reply #1 - Aug 5th, 2007 at 7:26pm
john_uk   Ex Member

 
if you want to stop it contracting the virus's dont sign the contract Grin
 
IP Logged
 
Reply #2 - Aug 5th, 2007 at 7:30pm

ThomasKaira   Offline
Colonel
FS9 still lives.
Where Charlie Don't Surf

Gender: male
Posts: 881
*****
 
Quote:
if you want to stop it contracting the virus's dont sign the contract Grin


Grin Cheesy Angry

You've got quite a cheek. Angry
 
IP Logged
 
Reply #3 - Aug 5th, 2007 at 7:46pm

Nick N   Ex Member
I Fly Sim!

*
 



NEVER EVER USE SYSTEM RESTORE TO RECOVER FROM A VIRUS. YOU JUST INFECTED YOURSELF AGAIN AND ALSO INFECTED ALL THE BACKUPS>

ALL SYSTEM RESTORE POINTS MUST BE DELETED

Wiping out and starting over was probably a smart move if you do not know how to clean a system manually. During the wipe it is critical you run a ZERO write to the hard drive. FORMATTING does not delete the data on the drive, it is still there.








I can fix for you so you can go to alll the porn sites you want and never be hacked or bugged again...    Grin


www.eset.com

NOD32

Buy IT... the best protection money can buy,. hands down and never kills resources

Install it on its default settings and if you want to know if a web site is trying to nail you, tell it to inform you of HTTP attempts during the install routine. Otherwise set it for silent operation

reboot and make sure to run the UPDATER once finished, reboot and run a full system scan, let it kill anything it finds.


Then

http://www.safer-networking.org/

Spybots Search and Destroy

or you can get it here:


http://fileforum.betanews.com/download/Spybot_Search_and_Destroy/1043809773/1  click download now

When you install the program, set it to work with Internet Explorer (which it checked by default) but do not enable the Tea Timer It will also ask if you wish to download all updates during the install, select that. Once it is installed it will run a Wizard, do not back up the registry but do have it download and install all updates again. Once the wizard is finished, close the program and reopen it.  

Have it search for updates again. If it finds any, select them all and download/install them

it sometimes takes 2 times to get them all the first time you run the program

Also, if updating hangs, change the server in the server selection drop down at the top in the update window.

Once it is updated, select Immunize and then click the green PLUS sign +   That will install the browser script with the updated scanner files.

Once it is immunized, run a full scan (search and destroy button, then check for problems) and when its finished it will display a list of items. Have it fix everything. If it finds a nasty critter or 2 it may ask for a reboot to finish the job, just follow the instructions.

Make sure to update Spybots MANUALLY once a month or so. It does NOT do it automatically. All it does is protect the browser and does not boot with Windows or use resources

Those 2 are ALL you need along with the Windows XP SP2 or VISTA firewall is enabeld AND there are no OPEN PORTS to programs that have no business to them. Check the EXCEPTIONS LIST.

NOTHING ELSE. Dont buy into zone alarm or any scanner that boots with Windows other than NOD32. They will do nothing but drag the system down, especially for flight sim.



You can now go hang out on the worse porn and hacker sites on the net now and never be bothered.

If you use anything else like Avast, AVG Norton McAfee, the odds are you may be bugged again eventually .

You get what you pay for with NOD32, like you get what you pay for with PC Power and Cooling Power Supplies. The AVs are not created equal. If you want the best protection, NOD32 is your winner




 
IP Logged
 
Reply #4 - Aug 5th, 2007 at 8:44pm

aussiewannabe   Offline
Colonel
Directive!

Posts: 2541
*****
 
Nick N wrote on Aug 5th, 2007 at 7:46pm:
NOD32

Buy IT... the best protection money can buy,. hands down and never kills resources


Now there's something I need - a virus utility that doesn't kill resources. McAfee sure does a number on that Cry

Downloading now.

 

HP Media Center Photosmart m7260n | 3.0GHz Intel Pentium D 830 | 2 GB RAM | 320 GB HD | Sapphire X1950 GT 512MB | Silencer 610 Watt PSU

...
IP Logged
 
Reply #5 - Aug 5th, 2007 at 10:47pm

Nick N   Ex Member
I Fly Sim!

*
 
yes, it will reduce the overhead and not eat critical resources. It has the smallest footprint on the system to all the AV's

You must make sure the old AV has been completely uninstalled and any side services for the old AV are deleted. Norton AntiComputer installs live update and other junk too.. it must all die and go away. Sometime the AV company provides cleaning tools to make sure the application is deleted all the way. Unfortunately Norton is one that doesnt go completely away without wiping out the system or a major manual search and destroy in the registry





any other takers?



I usually get at least 2 or 3 with the 'safe porn' approach




just kidding  Grin
 
IP Logged
 
Reply #6 - Aug 5th, 2007 at 11:31pm

aussiewannabe   Offline
Colonel
Directive!

Posts: 2541
*****
 
Nick N wrote on Aug 5th, 2007 at 10:47pm:
I usually get at least 2 or 3 with the 'safe porn' approach

just kidding  Grin


Well, I didn't fall for the porn bit:Smiley That's not my bag, baby8-)

I've known that McAfee is a resource hog, but now that someone with a good head on their shoulders has recommended something they use and trust, I can get rid of it.

BTW it doesn't take a porn site to get a virus. Malicious code can be implemented on any website - including this one:O
 

HP Media Center Photosmart m7260n | 3.0GHz Intel Pentium D 830 | 2 GB RAM | 320 GB HD | Sapphire X1950 GT 512MB | Silencer 610 Watt PSU

...
IP Logged
 
Reply #7 - Aug 5th, 2007 at 11:39pm

Nick N   Ex Member
I Fly Sim!

*
 
aussiewannabe wrote on Aug 5th, 2007 at 11:31pm:
Nick N wrote on Aug 5th, 2007 at 10:47pm:
I usually get at least 2 or 3 with the 'safe porn' approach

just kidding  Grin


Well, I didn't fall for the porn bit:Smiley That's not my bag, baby8-)

I've known that McAfee is a resource hog, but now that someone with a good head on their shoulders has recommended something they use and trust, I can get rid of it.

BTW it doesn't take a porn site to get a virus. Malicious code can be implemented on any website - including this one:O


Sorry... that was just my opportunistic humor, nothing implied really

You will be much better on NOD32, safer and working faster
 
IP Logged
 
Reply #8 - Aug 6th, 2007 at 12:06am

aussiewannabe   Offline
Colonel
Directive!

Posts: 2541
*****
 
Nick N wrote on Aug 5th, 2007 at 11:39pm:
Sorry... that was just my opportunistic humor, nothing implied really


I know - that's what I like about this forum Cool

Quote:
You will be much better on NOD32, safer and working faster


Working faster? You bet! I just checked the processes running and it's now 34 (down from 44). Start-up is now 7, down from 10.

I have slayed the dragon8-)

Nick, you the man!!!


 

HP Media Center Photosmart m7260n | 3.0GHz Intel Pentium D 830 | 2 GB RAM | 320 GB HD | Sapphire X1950 GT 512MB | Silencer 610 Watt PSU

...
IP Logged
 
Reply #9 - Aug 6th, 2007 at 12:09am

jimdbird   Offline
Colonel
I love YaBB 1G - SP1!
Ruston, La, USA

Posts: 30
*****
 
I'm running Firefox, Nod32, Spybot, and ZoneAlarm.

Should I delete ZoneAlarm, and turn on Windows Firewall, or would I need to make other adjustments, because of Firefox?

Thanks,
Jim
 
IP Logged
 
Reply #10 - Aug 6th, 2007 at 1:27am

Nick N   Ex Member
I Fly Sim!

*
 

I don’t want anyone doing anything unless they want to but I am here to tell you that you don’t need all that junk running if you have the following things in order:

1.      NOD32 installed and properly updated

2.      Spybots Search and Destroy installed, properly updated monthly, and scan run monthly.

3.      The Windows XP SP2 <--- must be SP2 or higher, XP 2003 server SP2 or X64 (any version) or Vista firewall properly turned on and the exclusions are correctly set.

4.      If on high speed internet a HUB or Router such as a Linksys or Netgear unit that has a NAT hardware firewall built into it. Most modern cable or DSL MODEMS also have hardware NAT firewalls in them.

5.             IE7 properly installed and properly UPDATED from Windows Update on the monthly basis



So you have 2 hardware firewalls before it even gets to Windows, the Windows firewall and NOD32 which also installs a FULL BROWSER scanner and will nail even the trickiest JAVA, messenger, macromedia, shockwave, xml or just about any other critter that may try to get past the internet cache.

Hackers dont mess with dial up modems they are too slow and not worth the odds of being tracked. But you still need to be internally protected.

Spybots is the 2nd line of defense just in case NOD32 may miss something in the way of simple adware or browser hijacks


Now, lets talk about that useless trash FIREFOX  (NOTE: It has features which are nice but it is NOT safer)

Go ahead, line up to paddle me, but I am here to tell every single one of you who believes Firefox is safer than IE, you’re either misinformed, or a fool.

Firefox monitors your internet activity just like AOL or any other browser out there. It grew on the heels of the Microsoft haters or the world and the conspiracy nuts who think MS is unsafe and spying on what you do.

I have news for you, LiarFox is no different. As a matter of fact you don’t get on the internet with the Firefox browser, you are using a SHELL that is installed OVER Internet Explorer and using the core elements of IE and the Windows networking system to get online.

If you are using Firefox because you think is it safer… LOL  you bought into the rubbish that MS haters and conspiracy nuts have been posting on the net. You are actually LESS safe on FF because of its relationship and use of the core elements of IE.

Now, the safest browsing is done from a Linx system and NOT because of the browser but because of the OS and its lack of popularity to internet hackers. They go after the Linx systems for high level data, not internet porn.

I am not going to tell anyone what to do, but I use IE7, properly set up and properly secured. I run blazing fast and never, EVER have been nailed ONCE. Not even close.


If you uninstall zone alarm after a reboot, check the following…

Go to:

CONTROL PANEL - ADMINISTRATIVE TOOLS - SERVICES

Scroll down to: Windows Firewall/ICS (Internet Connection Sharring)

1. Double click the service.  

2. STARTUP TYPE: if it is not already ENABLED, change it to ENABLED, click APPLY.  

3. LOGON TAB: HARDWARE PROFILE BOX – Check and make sure it says ENABLED in the hardware profile box. If not, double click your hardware profile and it should change the login under the SERVICE column to ENABLED, click APPLY and OK.

Reboot

Go to

CONTROL PANEL – WINDOWS FIREWALL

Make sure it is set to ON

Click the EXCEPTIONS TAB

Make SURE there are NO PROGRAMS in that list that are getting access which you did not authorize. If you don’t know or are not sure, UNCHECK the item, don’t delete it and see how your system runs. If you discover a legitimate program that is not working anymore it may be because you disabled a name in the exceptions area. If after some weeks you are not having any trouble, delete the list of items. Some will not allow you to delete because they are system items’

UNCHECK REMOTE ASSISTANCE and REMOTE DESKTOP

You ONLY need FILE AND PRINT SHARING enabled if you are on a home NETWORK, otherwise UNCHECK IT

CLICK APPLY if its there and then OK

Reboot

With all of the above in order you can go see Osma Bin Laden on the net and not worry about a single attack.





 
IP Logged
 
Reply #11 - Aug 6th, 2007 at 9:36am

Akula.   Offline
Colonel
o.O
UK

Gender: male
Posts: 943
*****
 
I'm interested in this Nod32 antivirus. My school's had Nod32 for a while, and to be honest it left me with less-than-good impressions. It would take ages to load once windows had loaded, and we still got lots of viruses. Then again, I suppose it was running on a network of 400+ computers used by students who frequently pump them with viruses for fun.

My laptop has been running McAffee for a while now, but my license has run out and I now realise that the chances of me having a virus is extremely high, so I plan to get all critical data onto a backup disk, then purge my disk and reinstall windows. When I do this, I will also be installing new antivirus.

I've been using Avast for a while on a different PC, and so far I havnt had a single problem in months of use.
Quote:
If you use anything else like Avast, AVG Norton McAfee, the odds are you may be bugged again eventually .

Is avast really likely to fail? I dont mind putting down money to Nod32, but only if it's going to provide me with the protection that Avast or AVG wont provide.
 

- Akula
IP Logged
 
Reply #12 - Aug 6th, 2007 at 1:08pm

Nick N   Ex Member
I Fly Sim!

*
 
School computers?


Where every virus known to man has several thousand walking sources accessing it from inside the network?

LOL

School systems are probably the most vulnerable systems out there no matter what protection is being run simply because of the nature of the environment and the people who are using them.

Kids tend to try and circumvent the network security so they can get on myspace, view porn, P2P, web email, etc. They also bring in disks with their music and files.. which can also be infected. You cant use a school as an example. Security in those environments is only as good as the network engineer who desings and monitors the system. Some are simply idiots.  LOL

Slow was more than likely because of something else on or about the computers at a school, not NOD32.

There is nothing wrong with Avast or AVG. You do get what you pay for. I can tell you that NOD32 has and is being used in mission critical systems because of its kill rate, advanced browser scanner and the fact that it has one of, if not the smallest footprint on the system for resource use.

Any computer can get a virus or be attacked if the user is executing things on the local system they should not such as email attachments, etc. Even images that come in email can have code in them that can do everything from tell the person at the other end when and where the email was opened and start a chain of events that can lead to an infection or hijack.

Freeware AV works. But as more advanced and slick techniques are developed freeware tends to be behind where AV such as NOD32 will be updated within hours of a new process or threat being introduced.


If it works for you, that’s fine. I can tell you systems at Boeing are using NOD32 now along with many other high security corporate networks on this planet. I would prefer to stick with what the big guys use.


You get what you pay for... well, thats true if you know what to buy. Sometimes you get ripped of like with Norton products because of the amount of resource killing it does and the amount of spying it does. Or buying a power supply that is rated for 650watts but can only really deliver 480. Experience and education of the products is the best source of being in the know.

I know PC Power and Cooling will sell me a 610watt PSU and I will get 610watts.

I know NOD32 will sell me an AV that will not crush my system resources, spy on me and will provide the best protection for my money.

Thats all I can say


 
IP Logged
 
Reply #13 - Aug 6th, 2007 at 2:53pm
Jayhawk Jake   Ex Member

 
From what you've been saying I wish I could get NOD32, but unfortunately my school requires Sophos
 
IP Logged
 
Reply #14 - Aug 6th, 2007 at 3:50pm

Akula.   Offline
Colonel
o.O
UK

Gender: male
Posts: 943
*****
 
I've weighed up the odds, nick, and I think I'm going to stick with Avast for now, but only because I'm sort of broke right now. When I have a free thirty quid that isnt going to be spent on more RAM or more monitors for my system, I'll look into Nod32 again.

Hopefully Avast will keep me upright for a few months.

And I understand about my school's network being bugged over; I get the feeling I've managed to land a few of them accidentally by giving my classmates the power of getting around filters... oops  Wink
 

- Akula
IP Logged
 
Pages: 1 2 
Send Topic Print