Help - Search - Members - Calendar
Full Version: How did I get infected?
BleepingComputer.com > Security > AntiVirus, Firewall and Privacy Products and Protection Methods
   
Grinler
One of the most common questions found when cleaning Spyware or other Malware is "how did my machine get infected?". There are a variety of reasons, but the most common ones are that you are going to sites that you are not practicing Safe Internet, you are not running the proper security software, and that your computer's security settings are set too low.

Below I have outlined a series of categories that outline how you can increase the security of your computer so that you will not be infected again in the future.


Practice Safe Internet

One of the main reasons people get infected in the first place is that they are not practicing Safe Internet. You practice Safe Internet when you educate yourself on how to properly use the Internet through the use of security tools and good practice. Knowing how you can get infected and what types of files and sites to avoid will be the most crucial step in keeping your computer malware free. The reality is that the majority of people who are infected with malware are ones who click on things they shouldn't be clicking on. Whether these things are files or sites it doesn't really matter. If something is out to get you, and you click on it, it most likely will. Below are a list of simple precautions to take to keep your computer clean and running securely:
  1. If you receive an attachment from someone you do not know, DO NOT OPEN IT! Simple as that. Opening attachments from people you do not know is a very common method for viruses or worms to infect your computer.

  2. If you receive an attachment and it ends with a .exe, .com, .bat, or .pif do not open the attachment unless you know for a fact that it is clean. For the casual computer user, you will almost never receive a valid attachment of this type.

  3. If you receive an attachment from someone you know, and it looks suspicious, then it probably is. The email could be from someone you know infected with a malware that is trying to infect everyone in their address book.

  4. If you are browsing the Internet and a popup appears saying that you are infected, ignore it!. These are, as far as I am concerned, scams that are being used to scare you into purchasing a piece of software. For an example of these types of popups, or Foistware, you should read this article: Foistware, And how to avoid it.

    There are also programs that disguise themselves as Anti-Spyware or security products but are instead scams. For a list of these types of programs we recommend you visit this link: Rogue/Suspect Anti-Spyware Products & Web Sites

  5. Another tactic to fool you on the web is when a site displays a popup that looks like a normal Windows message or alert. When you click on them, though, they instead bring you to another site that is trying to push a product on you. We suggest that you close these windows by clicking on the X instead of the OK button. Alternatively, you can check to see if it's a real alert by right-clicking on the window. If there is a menu that comes up saying Add to Favorites... you know it's a fake.

  6. Do not go to adult sites. I know this may bother some of you, but the fact is that a large amount of malware is pushed through these types of sites. I am not saying all adult sites do this, but a lot do.

  7. When using an Instant Messaging program be cautious about clicking on links people send to you. It is not uncommon for infections to send a message to everyone in the infected person's contact list that contains a link to an infection. Instead when you receive a message that contains a link, message back to the person asking if it is legit before you click on it.

  8. Stay away from Warez and Crack sites! In addition to the obvious copyright issues, the downloads from these sites are typically overrun with infections.

  9. Be careful of what you download off of web sites and Peer-2-Peer networks. Some sites disguise malware as legitimate software to trick you into installing them and Peer-2-Peer networks are crawling with it. If you want to download a piece of software a from a site, and are not sure if they are legitimate, you can use McAfee Siteadvisor to look up info on the site.

  10. DO NOT INSTALL any software without first reading the End User License Agreement, otherwise known as the EULA. A tactic that some developers use is to offer their software for free, but have spyware and other programs you do not want bundled with it. This is where they make their money. By reading the agreement there is a good chance you can spot this and not install the software.
Visit Microsoft's Windows Update Site Frequently

It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.


Make Internet Explorer 6 and below more secure
  1. From within Internet Explorer click on the Tools menu and then click on Options.

  2. Click once on the Security tab

  3. Click once on the Internet icon so it becomes highlighted.

  4. Click once on the Custom Level button.

    1. Change the Download signed ActiveX controls to Prompt

    2. Change the Download unsigned ActiveX controls to Disable

    3. Change the Initialize and script ActiveX controls not marked as safe to Disable

    4. Change the Installation of desktop items to Prompt

    5. Change the Launching programs and files in an IFRAME to Prompt

    6. Change the Navigate sub-frames across different domains to Prompt

    7. When all these settings have been made, click on the OK button.

    8. If it prompts you as to whether or not you want to save the settings, press the Yes button.
  5. Next press the Apply button and then the OK to exit the Internet Properties page.
Use an AntiVirus Software

It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future.

See this link for a listing of some online & their stand-alone antivirus programs:

Virus, Spyware, and Malware Protection and Removal Resources


Update your AntiVirus Software

It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out. If you use a commercial antivirus program you must make sure you keep renewing your subscription. Otherwise, once your subscription runs out, you may not be able to update the programs virus definitions.


Make sure your applications have all of their updates

It is also possible for other programs on your computer to have security vulnerability that can allow malware to infect you. Therefore, it is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.


Use a Firewall

I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly.

For a tutorial on Firewalls and a listing of some available ones see the link below:

Understanding and Using Firewalls


Install an AntiSpyware Program

Recommended, and free, AntiSpyware programs are Malwarebytes Anti-Malware, SuperAntiSpyware, Spybot - Search and Destroy, and Ad-Aware Personal.

Installing these programs will provide spyware & hijacker protection on your computer alongside your virus protection. You should scan your computer with an AntiSpyware program on a regular basis just as you would an antivirus software.

Tutorials on using these programs can be found below:

Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers

Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer


Install SpywareBlaster

SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware


Update all these programs regularly
Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.
sopcannon
ok not knowcking the suggestions but wont that slow down the performance of many pc`s and/or slow down internet ?
Animal
So what do you see specifically in the above recommendations that would lead you to think, "wont that slow down the performance of many pc`s and/or slow down internet ?

Then maybe we can address your specific concerns as to the cause of why you may think that.
littlephoenix
QUOTE(sopcannon @ Mar 13 2007, 09:10 PM) *
ok not knowcking the suggestions but wont that slow down the performance of many pc`s and/or slow down internet ?


yes in fact these will slow down your PC , apps such as spyware bot installs a real time scanner called teatimer and SD resident which run in the background, also your virus scanner and firewall will slow down your PC, but you know what, its better to have a 15% slower PC then to be at a risk of infection.
There are some things that will really slow down your PC such as the new adaware 2007 adwatch, that will take a good chunk of your resource and really slow things down so i would not suggest that at all, maybe run the app itself to find any spyware or MRU's cookies etc.
also i recommend for everyone to have at least 2MB of ram, that will help you a great deal ;)
Email me if you have any questions, will be glad to answer.

much luck thumbup.gif
Animal
QUOTE(littlephoenix @ Jun 28 2007, 11:02 AM) *
Email me if you have any questions, will be glad to answer.

Thank You for your consideration. However we would prefer that all questions be asked in the forums, not privately via email. That way everyone benefits from the information provided. That is the whole purpose of the forums in the first place, after all.

Animal,
Forum Moderator
marsha123
I read the suggestions for protecting my computer. I have my ISP providing Anti-Virus, Anti-spyware, popup blocker & firewall. I still get viruses. I don't know what the problem is. Could it be the programs I have that might allow viruses in like you said in your description? I am ready to quit this security system because it doesn't work. I have had 4 viruses since February. What should I do? I had the security tell me I had a virus (and it named it). I closed the box and ran a virus scan which produced nothing. I called my ISP and they said that when the box came up, the security disinfected it. What happens when I run a scan & the infected file is essential--I'm in big trouble then. I can't go on like this. Any suggetions? One lady said they should reinstall the security. Would that help?
auntna
QUOTE(littlephoenix @ Jun 28 2007, 02:02 PM) *
QUOTE(sopcannon @ Mar 13 2007, 09:10 PM) *
ok not knowcking the suggestions but wont that slow down the performance of many pc`s and/or slow down internet ?


yes in fact these will slow down your PC , apps such as spyware bot installs a real time scanner called teatimer and SD resident which run in the background, also your virus scanner and firewall will slow down your PC, but you know what, its better to have a 15% slower PC then to be at a risk of infection.
There are some things that will really slow down your PC such as the new adaware 2007 adwatch, that will take a good chunk of your resource and really slow things down so i would not suggest that at all, maybe run the app itself to find any spyware or MRU's cookies etc.
also i recommend for everyone to have at least 2MB of ram, that will help you a great deal ;)
Email me if you have any questions, will be glad to answer.

much luck thumbup.gif


I too have found that having all these programs installed really slowed down the internet surfing on my 80 GB - 512 MB Ram computer on dial-up. My solution was that since I have the Enterra Download Manager add on for IE I just uninstalled everything except my Sygate Personal Firewall and AVG Free. The Manager stores the other programs for me until I want to run a scan. I just reinstall for that purpose and then uninstall again. The Manager is helpful because you don't have to go through the, sometimes, hours of downloading the program from the internet again.

I suppose that you can probably save these programs to a disk also? I don't currently have a burner so the Download Manager is what I use.
LionsMike
QUOTE(marsha123 @ Jun 29 2007, 01:57 AM) *
I read the suggestions for protecting my computer. I have my ISP providing Anti-Virus, Anti-spyware, popup blocker & firewall. I still get viruses. I don't know what the problem is. Could it be the programs I have that might allow viruses in like you said in your description? I am ready to quit this security system because it doesn't work. I have had 4 viruses since February. What should I do? I had the security tell me I had a virus (and it named it). I closed the box and ran a virus scan which produced nothing. I called my ISP and they said that when the box came up, the security disinfected it. What happens when I run a scan & the infected file is essential--I'm in big trouble then. I can't go on like this. Any suggetions? One lady said they should reinstall the security. Would that help?


WOW HERE WE GO MARSHA
I used to hear this all the time when I moderated the AntiVirus chats on AOL.

Your ISP provides you programs that you can download and install in your computer for FREE. they do not protect you through your internet connection. Most do scan E-mails for known malicious attachments and block them. That is not anywhere near good enough. If you get an infection in the first few days that it is circulating , your only hope is to catch it with updated definitions when you run your Antivirus scan this week or next week. You only want one AV program installed and running. AdWare and SpyWare are just not going to be effectivley caotured by your ISP YOU MUST INSTALL UPDATE AND RUN THOSE PROGRAMS AS WELL AS YOUR AntuVirus program Once a week is good, More often is better. I have worked with people who thought that they were safe and wondered why their computer ran so slow. They had 450 spyware programs (95 of them activley sending out information at the time) on their computer. there were over 100 Adware programs on that machine also. You can install several Anti-SpyWare and Anti-AdWare programs just don't run scans with them at the same time.
hennessy
hey guys i know im terribly stupid, ima just stop downloading crap.

aight hers my problem, i went to this site speedyshare. it was a green site according to mcaffe site advisor, but when i downloaded the program, it came to be a virus, i have now antivira antivirus, and it picked the virus up, and i clicked delete, are there any chances that im still infected??


{Mod Edit:Removed dangerous link~~boopme}
LionsMike
I am not one of the staff or Moderators, I probably have no bussiness sending you a reply, But you directed a message to me, and it is Christmas Eve. I can tell you that the way this help site works it is better to not have many replies on record. A reply may indicate to members of the staff that you are being helped by one of the staff.

I consider myself to be pretty good at malware. I ran the malware help site on AOL on Friday nights. I came here for a problem that I could not take care of myself. This group will help you with detailed instructions and links to tools which wiill determine what if any infections or results of infections you have. People remove a virus and think that the issue is resolved, but very often the virus has caused some damage which needs to be adressed. These people will help you address such problems.

Be patient; they are volunteers. You will communicate via E-mail with links to answers and to more questions with instructions. Take their advice and follow their instructions, and when you are finished you will have learned some new tricks you will be happy with your computer.

GOOD LUCK and MERRY CHRISTMAS
Eyesee
Hennessy

Yep. There is still a very good chance that you are still infected
I recommend that you start your own thread so that we can all look at and adress your issues without getting confused with anyone else's post

And Merry Christmas too!
There are still plenty of people here, willing to address you issue
Even on Christma eve!
ruby1
QUOTE(Grinler @ Sep 9 2004, 05:45 PM) *
Below I have outlined a series of categories that outline how you can increase the security of your computer so that you will not be infected again in the future.

[*] Another tactic to fool you on the web is when a site displays a popup that looks like a normal Windows message or alert. When you click on them, though, they instead bring you to another site that is trying to push a product on you. We suggest that you close these windows by clicking on the [b]X[/b] instead of the OK button.
Alternatively, you can check to see if it's a real alert by right-clicking on the window. If there is a menu that comes up saying Add to Favorites... you know it's a fake.


due to the habit of nasties hiding IN those X's, is it not now considered as unsafe practice to close the window via the X ; but rather to go to task manager and close the window via that route?

am I also correct in assuming that if one has a hardware firewall , then a software firewall is NOT necessarily needed or required?
Animal
QUOTE(ruby1 @ Jan 19 2008, 04:43 AM) *
am I also correct in assuming that if one has a hardware firewall , then a software firewall is NOT necessarily needed or required?

http://blogs.chron.com/helpline/archives/networking/
Third post down "Hardware vs. software firewall" the reply captures my feelings exactly. I'm not saying it's correct. Just my personal perception.
boopme
I am in agreement with One software firewall behind my Router. I feel thar is the most secure.
Nevi
Hi guys..
I would like to get an opinion from you.I use Kaspersky KIS 7 1.321,and I feel I´m well protected.But its Spyware I think about.At the moment I have installed BO clean,as I think its a great AS app.but is it really necesarry when I use KIS?I also have Superantispyw.free ed. to on demand scans,but it never find anything.I keep it tho,I think the consensus is,that its one of the best to catch AS if it has gone into the machine.
I know the opinions about this subject is very different,but maybe some of you real oldtimers that have tried most off what there is?
Thanks in advance for the help. thumbup2.gif
ruby1
any comments about the possible unsafe practice of closing the 'nasty' windows via the X, which may 'hide' a 'malicious intent' sad.gif
Stheno
QUOTE(ruby1 @ Jan 20 2008, 09:32 AM) *
any comments about the possible unsafe practice of closing the 'nasty' windows via the X, which may 'hide' a 'malicious intent' sad.gif


If you click the "X" it tells the program to quit. It sends a "exit" command to the program.

This exit is processed by the program and malicious coders can have code execute upon the receipt of the "exit" command.
Programs for the most part close themselves with this, so relying on a suspicious program to exit nicely without doing harm is much in the same as asking a home intruder to leave without stealing or breaking something.

By closing it via task manager (or google a very nifty thing called process explorer) it in effect bypasses the reliance on the program to play nice.
Basically windows is then forcing an exit. Thereby reducing the possibility of a threat.

I know there are far more technical terms to use in my description, and there might be more to it, but it seems this has rang fairly true in my experiences.

Now, if you get a browser popup with that "X" you will need to kill your browser in the task manager. I know that it is annoying to retrace your steps on what page you might have opened, but its far better than retracing an entire windows reinstall, or going through the removal of viruses.

Anyway, the net is one person safer each time ANY security help is read and listened to, so have a good one be safe.
grap6b
Thanks for the suggestion sir. When I was using internet explorer two years earlier, I got infected once. But now I am using mozilla firebox as a browser. What are the security suggestion for this browser?
ruby1
having found this

http://www.geekgirls.com/security_spyware_prevention.htm

if you scroll down to browsers
QUOTE
Close pop-ups using the X in the top right-hand corner


this I for one do NOT advocate as the X is known to be a route to harbour nasty critters

I have also located another which suggests to use the X to close the window

I thought it was well known that the X can harbour a nasty just waiting to infect your computer
Rocco5955
QUOTE(ruby1 @ Jan 19 2008, 08:43 AM) *
am I also correct in assuming that if one has a hardware firewall , then a software firewall is NOT necessarily needed or required?


A hardware firewall will prevent 'ET' from phoning in, but if he is already in, he CAN phone home. A software firewall not only prevents 'ET' from phoning in, but prevents him from phoning home. This is what I tell people.

Also, I do not use the 'X' to close a pop-up. When I see one, which is rarely, I close the browser from within the task manager. I tend to kill processes there anyway, it's just so much more convenient for me.
TulShulty
wow i didnt know about the X thing. Knowledge is a wonderful thing :-) ty Is there a kill program out there or just use task manager?
Revenwyn
QUOTE(littlephoenix @ Jun 28 2007, 01:02 PM) *
QUOTE(sopcannon @ Mar 13 2007, 09:10 PM) *
ok not knowcking the suggestions but wont that slow down the performance of many pc`s and/or slow down internet ?


yes in fact these will slow down your PC , apps such as spyware bot installs a real time scanner called teatimer and SD resident which run in the background, also your virus scanner and firewall will slow down your PC, but you know what, its better to have a 15% slower PC then to be at a risk of infection.
There are some things that will really slow down your PC such as the new adaware 2007 adwatch, that will take a good chunk of your resource and really slow things down so i would not suggest that at all, maybe run the app itself to find any spyware or MRU's cookies etc.
also i recommend for everyone to have at least 2MB of ram, that will help you a great deal ;)
Email me if you have any questions, will be glad to answer.

much luck thumbup.gif



Okay, so I live in a little pocket of land with no form of high speed internet. Internet use is PAINFULLY slow. I don't want to have it 15% slower!

Oh yes, don't you mean 2 GB of RAM?

saint satin stain
Okay, I confess, I didn't read all of the responses, but did a fast scan after the first 5 or 6. I did get the direction of the comments. I went in a new direction for defense, no, let's call it real: WAR. This guy Gizmo sez, don't get infected.

The ideas are not all mine; actually few are mine. If you see one of your ideas without attribution, forgive me, and speak out, claim it. Beginning with a fresh install of XP Professional behind a router I don't have to download SP2 and SP3; I have them on disc. I install antivirus and software firewall (with HIPS feature) and leave a default settings. I harden the system. I begin by using Local Security Policy and applying a template that you can get from Microsoft IP Security Policies on Local Computer: I use the IPrules For Home Use but with one exception, I uncheck Deny All UDP Traffic. You do this if you want to update your computer clock with a time server on the internet; if you don't leave it checked. You can make these settings yourself, but a template makes it easier. You still have to check the settings.
QUOTE
These are basic IP rules that give the home user only what they need to browse the web, get files and email. Other than that, all other ports are locked down. .
Disable all unneeded, unnecessary Services; Uninstall Telnet. Turn of Simple File sharing.

Two sites that can offer suggestions, but think about them, which ones will apply to your situation: http://labmice.techtarget.com/articles/win...tychecklist.htm and http://home.comcast.net/~SupportCD/OptimizeXP.html. Other resources: http://www.lbl.gov/ITSD/Security/systems/w...-checklist.html and for free support software Nirsoft and Windows Sysinternals.

Lock down XP Pro with local settings, harden it, and keep all software updated. For your core security use a router with SPI firewall in it, use an effective antivirus with antispyware that is light on resources, use a software firewall light on resources, use a sandbox program, and SpywareBlaster. You don't need a separate realtime antispyware. My selections for these are

Linksys WRT54G2 V1 but helpful guide: http://www.firewallguide.com/wireless.htm

Eset's NOD32 Antivirus
Online Armor (paid, also has a free version and a version with antivirus: Kaspersky)
Sandboxie (free and paid versions. I have paid.)
SpywareBlaster (venerable veteran of the internet wars)

TallEmu (Online Armor) and Sandboxie have their own forums; the Eset forum is hosted by WildersSecurity Forum.

Go to their sites and read their guides.
To check antiviruses go to AV-Comparatives
To check firewalls go to Matousec

For everything Home PC Firewall Guide
Spyware Warrior
Nonags
Black Viper

Use Mozilla Firefox or Opera; although IE7is more secure than previous versions.
I use several, all Gecko browsers: Firefox (default), Flock (for social sites), and K-Meleon and K-Ninja. I use Firefox portable and Iron version of Google browser on usb drives; portable Thunderbird.
Basic security extensions for Firefox and Flock (if the Flock extension site doesn't have it use the Firefox extension (Flock is Seamonkey under the hood): NoScript, CSLite or Permit Cookies, KeyScrambler, McAfee SiteAdvisor, NetCraft AntiPhishing Toolbar, and RefControl. I run all browsers and email clients sandboxed. I have to explicitly allow malicious software to write to my system. The antivirus still works to read malware.

I use the mail clients Mozilla Thunderbird (default) and Windows Live Mail to download to my desktop email from twelve of my fourteen email addresses; two I check with my mobile. Reason I have so many, I have internet accounts in the City and the Rural. When I am in the City I get 12 and the same in the Rural.
Extensions for Thunderbird: Allow HTML Temp, the only one you need; set Thunderbird to receive all email Plain Text and you can allow html if you think it is safe for each. All email clients are run sandboxed.

There are details I forgot or left for you to find on the research sites given. The last security app is hardwired, no software and is superior to any computer, security app hardware or software, and if used properly you, with the help of the apps I use, will probably avoid infection. Your brain. The brain of an imbecile or moron is superior to any computer. The computer to simulate human walking weighs too much to put in the robot. Imbeciles and moron walk with ease, some get elected to the congress. Use your brain!

Some ondemand scanners and diagnostic programs I use (other than the NirSoft and Sysinternals ones) for defense:
GMER(and catchme), IceSword, Rootkit Unhooker, ewido anti-spyware microscanner, Malwarebyte's Anti-Malware, SUPERantispyware (free), Trojan Remover (only one not free. I have had this a long time; you pay once and get all new updates forever, or until you die. You may use it as ondemand or schedule it to scan on boot.)

I also use PGP Desktop and even though I and family and friends only encrypt about 11% of our emails (last year) it is a necessity for me, especially since the revelations about the NSA spying of the Bush administration. The NSA can't break this encryption. I don't use wireless networking, only wired. You don't need to take your laptop into the backyard. Get a life. Cook steaks, cavort with wife and kids, mow the lawn with a push mower, and do other life things.

Don't do banking on a mobile! Use wired networks! Learn hacking so you know how those miscreants think and the possible attack vectors. You don't have to become an expert.

Don't get infected!
http://www.techsupportalert.com/how-to-secure-your-pc.php
If you use Sandboxie, you can use the Windows Firewall or any of the top recommended firewalls at Matousec, router, any of top 3 free antiviruses or top three or four at AV-Comparatives, and a few ondemand scanners.

I have XP Professional ver.2002, SP3, AMD Athlon 1.19 GHz, 768 MB of RAM and with Online Armor, NOD32, PGP, and Sandboxie (when browsing and emailing), Weather Watcher, Copernic Desktop Search, MozyHome Backup, and PGP I don't perceive any slowdown or drain on my system. Firefox and Thunderbird are open now too, so is Say The Time and a few small apps(in assembly) and the RAM free 263 MB, Commit charge about 30% a little more or less, If you use the Windows Firewall, don't use PGP, a desktop search, or desktop weather the values will be lower. I upped my original 512 MB and, though the tech said that upping it to a grand would give just a little more juice and might not be worth it (I'm poor), I may up it to a grand.

Don't use suites, too heavy. Use Sandboxie as the core and work around it.

I have finished my rant. Come on take it apart, sift, measure, and tell me my damn fool measures won't work. Add details that my feeble brain missed. Tell me about safe and reliable sources of freeware, objective tests.
Jcc3258
Does this issue effect windows vista home basic if it does Let Me Know

All my xp mechines are up to date with this patch.

Thanks Jason user Jcc3258
yenzies
Didn't know about the "x" thing... Completely enlightened. :D Thanks!
TSalarek
QUOTE(Jcc3258 @ Oct 26 2008, 12:08 PM) *
Does this issue effect windows vista home basic if it does Let Me Know

All my xp mechines are up to date with this patch.

Thanks Jason user Jcc3258


All virus issues affect all computers, some more than others. Contrairy to popular belief Apple is not immune and Linux, etc can be hacked (it's just a lot harder)

As far as slowing down the system: No single anti-malware product will get all that might be trying to get you. It is RECOMMENDED to install multiple AV products. HOWEVER only ONE should be running in REAL TIME (the others should be manual scan)

The different programs may conflict and may compete for system resources so make sure only one is set to run in the background. that one will (hopefully) catch the nasties on the inbound and block them. Periodically though,you'll want to disable that one and manual scan it with the other programs to make sure it didn't get corrupted; as the active program it becomes the bait for the malware while your manual scan AV are waiting in ambush. and MAKE SURE all the AV programs are kept updated; open them and hit Update at least once a week.

It can not be said enough: YOU ONLY NEED ONE FIREWALL. More than that and you get the same system issues as above, plus you may negatively affect surf-ability. Just make sure that it is on and actively protecting and make sure you have all updates from the manufacturer. Though having one system wall and one router wall (like in a home network with multiple computers), provided the settings are balanced, does not seem to cause problems.

The people that make viruses and other nasties want to get in and take over as quickly and as quietly as possible. The harder you make it for them to get in, the less likely you are to get bit.

**think of it like bronchitis. Firewalls and innoculators (like in Spybot S+D) and practicing Safe Internet are the prevention; hopefully if you do these you wont get sick. If you do catch something, AntiVirus, AntiAdware, and AntiSpyware are the antibiotics that will help cure you.
tokatee
"If you receive an attachment and it ends with a .exe, .com, .bat, or .pif do not open the attachment unless you know for a fact that it is clean. For the casual computer user, you will almost never receive a valid attachment of this type."

I do download a lot of crappola from the Internet, so one would think that I would be a "high-risk" user. And I am. I have been bitten more than once by BadDogz. Over the past few years, I have implemented a more stringent approach for downloading files. I now scan all files, with my AV, MBAM, several DOS-based AV apps, and finally several ARKs. I do this in batches, otherwise I would be spending a lot time just scanning. I never execute (double-click) on a file until after I have gone through these procedures.

About six months ago one of my ARKs turned up a file that was not what it was supposed to be. It was supposed to be a .xxx file (not one of those ones listed above), and it was categorized as 'hidden." I labored over this problem and tried to determine its real format by trying to examine its properties. Right-click>Properties. Nothing! By accident I examined the file with WinRAR, and it turned out to be something very different than what I expected. Let's just say that it was not Gladys Knight singing "I Heard It Through the Grapevine." It was a program loaded with several .dlls and other .rar/zipped files. It was immediately deleted and never executed.

The moral of this story is that file extensions can be altered to fool someone. And that it is usually the user who is the cause of most computer infections by ignoring some very basis practices.
Lassar
cool.gif

FireFox + NosScript is alot more safe then Internet Explorer.

I advise to put the internet security zone in IE to high. And then just add only trusted sties like microsoft to it.

I think that FireFox + NosScript is immune to malicous sites. Unless you have a extension that is malware.
saint satin stain
QUOTE(Lassar @ Mar 21 2009, 01:48 PM) *
cool.gif

FireFox + NosScript is alot more safe then Internet Explorer.

I advise to put the internet security zone in IE to high. And then just add only trusted sties like microsoft to it.

I think that FireFox + NosScript is immune to malicous sites. Unless you have a extension that is malware.



Firefox plus, NoScript, CS Lite, RefControl, and WOT. Sandboxie too.
rcmck
Nice Tips, I just wish you would have suggested people replace internet explorer altogether and not how to make IE6 safer. As a web designer, the sooner that "browser" just goes away and dies, the sooner I can live a happy life.
Animal
It's not the browser per se. It's market share and allure to malware writers bang for buck potential. On the flip side it's how the browser is used as well. Safe surfing habits make virtually any browser a low risk proposition with the same type of privacy and protection modules in place.
ComputerNutjob
I would like to add something to 2. : NO .ZIP!!! One time I was st-st-st-st-STUUUUUUPID ENOUGH to download a .zip file. Five seconds later, my command prompt was up, deleting files and wreaking HAVOC on my system. To go along with that, a countdown box. How did I survive? THANK YOU ROLLBACK RX!!! I told the bleep who sent it to me on a link ( not email, in a chat) to go...... HIMSELF, after that I promptly blocked him.
ComputerNutjob
QUOTE(Grinler @ Sep 9 2004, 01:45 PM) *
[*] Do not go to adult sites. I know this may bother some of you, but the fact is that a large amount of __________ is pushed through ________



Fill in the blanks!
kamerlet
In post #1 it was recommended to install SpywareBlaster. Is this still a valuable recommendation?
nizzy
I would say get spywareblaster, I DL it a few weeks ago as a compliment to spybots hosts.
It cant hurt to have too many blocked bad sites smile.gif
boopme
I still have it on both my XP and Vista systems.
mac_the_fork
Very good advice, from a very good site, cheers you guys.

I notice that you advise keeping Windows Updates up to date and i can well understand why, considering IE being full of vulnerabilities etc.

But may i ask if anyone else has the same complaint as me? Namely:

Whenever i download a Windows update for SECURITY reasons, i find windows has updated loads of other aspects THAT I DO NOT WANT! -most noticable are the ICONS for desktop and folders, but plenty of other irritating little changes too, sneaked in under cover of URGENT SECURITY UPDATE No. 9million+2.

WHY?? It seems to be a case of 'change for change sake' - a common problem in an industry where so many jobs are dependent on constantly re-inventing the wheel. Why can they not at least give one the option of changing or not?

Or am i imagining the whole phenomena?
pyr8t
QUOTE(Grinler @ Sep 9 2004, 11:45 AM) *
[5] Another tactic to fool you on the web is when a site displays a popup that looks like a normal Windows message or alert. When you click on them, though, they instead bring you to another site that is trying to push a product on you. We suggest that you close these windows by clicking on the X instead of the OK button. Alternatively, you can check to see if it's a real alert by right-clicking on the window. If there is a menu that comes up saying Add to Favorites... you know it's a fake.


I would like to add the " ALT + F4 " key combination to this. Specifically, I have come across other popups where the "red X" WAS part of the linked image, and the only "Close" on it was a discreet link on it. I wouldn't trust the red X 100% of the time. I haven't personally seen it, but there isn't anything that says you can't have a similar border-less popup with a single unlabeled pixel serving as the "close" function.
Emily Gomes
One use Trend Micro anivirus software. It is a cool antivirus software which easily detects virus. It has a huge databse stack. The database is also very active of it. One can be fruitful using it. Trend Micro doesnt hamper other OS file while it delet and detects virus files.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.