Re: Anyone Have This Problem?
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Anyone Have This Problem?

From: <pokee@shaw.ca>
Date: Thu May 26 2005 - 07:53:24 CEST

I am running Windows XP on a DELL inspiron notebook (2 years old). I
use the Windows CD Rom that came with my PC to re-format my harddrive
and re-install windows. The last time I did a re-format, I had no such
problems. I think this time, I ran into trouble because I had my
firewall turned off (when I was connected to the net to get Norton
Internet Security/Anti-virus updates). Just a guess.

I've just run adaware and spybot, re-scanned my PC for viruses, and the
problem still exists.

I have a feeling I am just going to have to re-format again - for the
millionth time. Dell tells me that this could reduce the life of my
hard drive. This is getting really frustrating.

Is there a methodology I should be using after
re-fromatting/re-installing windows that will protect me better? The
first thing I do is install anti-virus software - but that requires
connecting to the internet for updates. It's kind of a catch-22...what
should I do?

Thanks for your advice everyone!
Paula

Juan Valdez wrote:
> pokee@shaw.ca wrote in
> news:1117077546.356382.263580@g14g2000cwa.googlegroups.com:
>
> > BUT - now when I start up my PC, after my wireless network connection
> > is established, my internet explorer starts up and tries to connect to
> > this website (with no luck I might add):
> >
> >
> > http://www.freewebs.com/jodaaa%ad/happy.html
> ^^^
>
> CAUTION: DO NOT CONNECT TO THE FOLLOWING LINK:
> http://www. freewebs.com/jodaaa/happy.html redirects to
>
> http://static.windupdates.com/prompts/<stuff>/<more stuff>.js
>
> which contains the bridge-x malware installer.
>
> <RANT> Malware has been on windupdates.com on peer-1 for damn close to a
> year and I find it incredible that they have not removed it.</RANT>
>
> It sounds like you have a com server installed on your PC. Some malware is
> trying to get more malware installed on your machine. If it is making an
> unsolicited attempt to get to the site you mentioned (without you clicking
> on a web site of some sort), then you have malware activating at startup
> time. A lot of malware is symbiotic - i.e., it needs other files to operate
> properly. A lot of malware just loads other stand alone malware. Either or
> both may be the case.
>
> > Can anyone guess what may be happening here? It's not affecting
> > anything on my PC, so I am not too worried. It's just pissing me off!
>
> You do NOT know that. Malware can send out spam, try to crack other boxes
> and if installed, a keylogger can report your banking transactions back to
> some 14 year old kid who "ownz" your box and needs the money to buy Playboy
> and Noxema. A firewall which blocks all incoming ports and all except the
> essential outgoing ports will minimize the damage. However, the latest
> malware is good at tricking the user into cooperating with it. Some malware
> changes your hosts file, which connects you to spoofed sites (like banks)
> rather than the real thing.
>
> If you do not know how to look for and destroy the malware (few people do)
> then it is best to get some qualified help to make another clean install
> and fully patch the system before reconnecting to the net. You do not
> mention which flavour of windows you are using, so I assume that it is XP.
> Have the qualified person make sure that you are fully patched (SP1 and
> SP2), have a current antivirus (and ideally one or two anti spyware
> detectors) running and then set up your firewall per your needs. Install
> Firefox and Thunderbird. Avoid Internet Explorer and Outlook except where
> absolutely necessary (windowsupdates comes to mind among others).
>
> Also, make sure that your Microsoft Operating System is genuine. There are
> a few pirated copies from the Orient floating around which have some
> unwelcome additions.
>
> Anti-spyware was unimportant only two years ago. Now it is almost as vital
> as antivirus. Perhaps more so.
>
> Unfortunately, this isn't the old internet any more. It has been estimated
> that well over half the PC's have either unwelcome adware, spyware, worms
> or viruses installed.
Received on Thu Sep 29 19:52:59 2005