Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

preventing IS 2010, how?


  • Please log in to reply
3 replies to this topic

#1 John Good

John Good

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 24 December 2009 - 02:15 PM

Hello again and Merry Christmas!

I'm currently at war with IS 2010. I am a veteren of the AV 2009 war. I found that when a malicious site started AV 2009 on my machine I could prvent intrusion by using
cntrl>alt>delete, and end the process with the task manager. When doing this I could stop the intrusion. When I contracted IS 2010, it immediately disabled cntrl>alt>delete so I could not stop it. Is there some immediate measure one can take when the intrusion is detected? (for future reference).

Thanks again
John

BC AdBot (Login to Remove)

 


#2 xblindx

xblindx

  • Banned
  • 1,923 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:25 AM

Posted 24 December 2009 - 04:46 PM

Basically the only ways to prevent infection is to use a HOSTS file, have a registry change watcher (i.e Spybot's TeaTimer), use a program such as SpywareBlaster, have a strong firewall and anti-virus/spyware program with real time protection, and practice safe surfing habits.

#3 John Good

John Good
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 25 December 2009 - 10:01 AM

Thanks for replying. I use Mcafee and it did notify me of an attempted regs. change. i ticked "do not allow" but the intrusion had begun. Thats what is so befuddling. I shut off my machine with the hardware button but a few minutes later when I returned my machine had turned on itself! Apparently when it did the whole thing installed. This one is nasty. I think I got the intrusion while looking for video conversion software. BTW, Spybot is not compatable with McAfee. I know if I can get past the fake welcome screen I can fix the registry and boot this thing out. Luckily I have everything backed up.

#4 xblindx

xblindx

  • Banned
  • 1,923 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:25 AM

Posted 26 December 2009 - 12:48 PM

Backups are also extremely useful since some types of malware cannot be completely removed using any tools (i.e Virut) and a reinstall of the OS the only way to go.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users