How do you get infected?

[fLYtRap]

Well it did cost me the cost of a blank Cd. How much closer to free do you want?

I didn't see that there was a download available

[isogonic]

its possible not to use AV, if you practice safe hex.
you are either lucky or you know how malware etc can get on your computer and avoid those things, which is the key to the whole thing.
most people just pile on more software and continue to make bad decsions when the software prompts them for a response. no amount of anti-this or anti-that will help you because the software cant think for you.

a firewall will not protect you from downloading malware etc to your computer, only alert you to outbound connection request, in which case its already on your computer, and firewalls are useless for alot people because they dont configure them right of dont understand them and make more bad decsions: trojans fetch more trojans

[fLYtRap]

its possible not to use AV, if you practice safe hex.
you are either lucky or you know how malware etc can get on your computer and avoid those things, which is the key to the whole thing.
most people just pile on more software and continue to make bad decsions when the software prompts them for a response. no amount of anti-this or anti-that will help you because the software cant think for you.

a firewall will not protect you from downloading malware etc to your computer, only alert you to outbound connection request, in which case its already on your computer, and firewalls are useless for alot people because they dont configure them right of dont understand them and make more bad decsions: trojans fetch more trojans

I see your point; so how to block Trojans and other similar malware from installing on a machine? All you can do is to remove them? There must be something to stop them...

[Delerious]

I see someone mentioned the Ultimate Boot CD. You can also use
a Linux Live CD.

[isogonic]

I see your point; so how to block Trojans and other similar malware from installing on a machine? All you can do is to remove them? There must be something to stop them...

you dont have to block them, its not like they are attacking you. malware gets on your computer because of things people do or dont do. the best thing to do is learn ways malware might get on your computer, then avoid those things or at least think twice before you act. you are still in charge, not the software. i have some info on my website:

http://security-central.us/SafeHex/prevention.htm

[Taterbug]

Prevex isn't foolproof of course. But what is. It is just another layer of protection. If a program attempts to install itself or make any changes to the registry and you haven't already given permission in prevex for that program to update or make changes then a window pops up and asks if you want to deny or give permission for this program to make changes. It does show where the attempted install or registry change is originating from in the directory. I have had it a while so I don't even remember anymore whether it was trialware or not. Presently I'm in the process of switching over to gmail instead of using Outlook. I should have done it a long time ago.

[fLYtRap]

Presently I'm in the process of switching over to gmail instead of using Outlook. I should have done it a long time ago.

Yes Outlook sucks because it is opening attachments automatically. I remember I got virus like this a long time ago before I switched to Hotmail. I don't know why they haven't fix that yet...

[fLYtRap]

I see your point; so how to block Trojans and other similar malware from installing on a machine? All you can do is to remove them? There must be something to stop them...

you dont have to block them, its not like they are attacking you. malware gets on your computer because of things people do or dont do. the best thing to do is learn ways malware might get on your computer, then avoid those things or at least think twice before you act. you are still in charge, not the software. i have some info on my website:

http://security-central.us/SafeHex/prevention.htm

I am viewing your site right now, but I can't open any of those videos here:

http://security-central.us/SafeHex/trojan%20video.htm

It is telling me that the page cannot be displayed...

[Seeker47]

There are also those people who think that Macs are safe and don't need firewalls and Anti-virus software. They keep saying that there are hardly any virus out there for the Mac, and that all authors write for PC and Windows. That may be true, but one day someone could unleash a major virus for Mac.

This greatly lower risk was likely true, maybe somewhat less true now that they have gone over to the Intel CPUs, and have been adding much improved Windows compatibility options. If it remains true, it would be because the Mac still has -- what ? -- a less than 5% market share. The size of the target on your back is directly proportional to the commonality of what you use. The more obscure the better, as it is not worth the hackers' time or effort to go after it.

so how to block Trojans and other similar malware from installing on a machine? All you can do is to remove them? There must be something to stop them...

Of course if you really want to be protected from virsuses and spyware, just run GNU/Linux...

Or, even better, eComstation, the successor to OS/2. All of that malware crap is totally null and void within that environment. It is more than capable for basic internet stuff and email, it is (arguably) more accessible than Linux, and you can still run FireFox (plus various extensions) for that platform. But it's not dumbed down like Windows and not free . . . .

I like to wander around the 'dark alleys' of the internet on occasion.

Wander around all you like, anywhere that you wish, running eCS. No worries. (Well, a nice hardware firewall -- properly configured -- wouldn't hurt either, if you don't much care for the idea of some jerk trying to poke his nose in through your ports . . . . )

Among the free solutions, the Live CD boot with hard drives disconnected is not a bad idea.

[Seeker47]

That is kinda intresting How do you create a bootable CD with XP on it?

Bart PE.
http://www.nu2.nu/pebuilder/
There are many applications plugins available for it. There are even guides for setting it up, although this is not exactly a novice-level project.

Otherwise, you are looking at things like Knoppix or UBCD, which have some Windows-related tools on them, but are built around Linux.

[TBoneit]

BTW I know Outlook Express can be set to not open Attachments or messages automatically by disabling the preview pane. Outlook ??

[buttzilla]

Their are a lot of people who think they have not been infected but are. If you are downloading videos or music and software files on torrent sites or other p2p you defintley have something if your not running antivirus or spyware. Having a firewall does not prevent virusis, trojans or spyware if you are the one who gave it access to your computer by clicking on something your unsure of.

[isogonic]

fLYtRap wrote:

I am viewing your site right now, but I can't open any of those videos here:

not sure why, i downloaded and played them ok.

[fLYtRap]

Right now I am using several free software to find whatever I can. I just scanned my system with AVG Anti-Spyware 7.5 which found 'Downloader.VB.ayr', which is threat level high and it is described as a malicious software that install backdoors.
I am a little bit confused about this particular file since belongs to a program that I am using regularly. I am wondering if this detection by AVG is a mistake or what?

[isogonic]

its always possible to have a false positive, you can always do a online scan for another opinion, or use a second malware scanner.
thats a legit copy of the program, right?

[fLYtRap]

its always possible to have a false positive, you can always do a online scan for another opinion, or use a second malware scanner.
thats a legit copy of the program, right?

Yes, this is a web page based software called AUCTIVA, its a image hosting site for eBay listings.

[isogonic]

ok, its very possible for software to have other payloads mainly if gotten from what could be a malicious website or p2p. since yours is legit a second opinion is always good, either by way of a second malware scanner or a online scan. try one of these:

http://www.pandasoftware.com/products/activescan.htm

http://www.bitdefender.com/scan/licence.php

http://support.f-secure.com/enu/home/ols.shtml

[NiteLite]

There must be something to stop them...

Two free programs:
Spywareblaster
Spybot S&D
They work together and do an excellent job of stoping malware before it can lodge on the computer. They run in the background so they dont show in starup.
Wouldn't leave home without them...along with Zonealarm 2.6.88 and antivirus. (Avast at the moment.)
All freeware.
Regards,
NL

[budz]

Two free programs:
Spywareblaster
Spybot S&D
They work together and do an excellent job of stoping malware before it can lodge on the computer. They run in the background so they dont show in starup.
Wouldn't leave home without them...along with Zonealarm 2.6.88 and antivirus. (Avast at the moment.)
All freeware.
Regards,
NL

I use those same freeware programs and I also use AD-AWARE SE & AVG antivirus.

[TBoneit]

Not to mention SpySweeper, AVG Antispyware (Formerly Ewido), HijackThis, A oldie called Kazaa Begone that still works, CWSherdder, HostsFileReader.exe and Windows Defender along with others.

[raffie]

Antivirus software is an absolute milking cow aimed at those for wich a computer is nothing more than a internet browser. In the 8 years i've surfed the web, i've caught a virus twice. Once surfing a porn site and once surfing astalavista, or actually, one of its subsites. Both times using IE6, incidently the biggest piece of crap ever coded.
A firewall, the use of a browser hackers arent targeting when surfing the 'darker allies' of the web and you're pretty much good to go.

[fLYtRap]

Antivirus software is an absolute milking cow aimed at those for wich a computer is nothing more than a internet browser. In the 8 years i've surfed the web, i've caught a virus twice. Once surfing a porn site and once surfing astalavista, or actually, one of its subsites. Both times using IE6, incidently the biggest piece of crap ever coded.
A firewall, the use of a browser hackers arent targeting when surfing the 'darker allies' of the web and you're pretty much good to go.

Yeah you right about that...I am staying away from porn sites and from Astalavista as well. I also cought a virus there a couple of times looking for something. I didn't even d/l anything, I just clicked on one of those search engines and that was it.

[TBoneit]

And using Antivirus and Antispyware I've ended up catching nothing more malevolent than cookies.

Prevention beats having to cure, IMHO of course.

[fLYtRap]

http://security-central.us/SafeHex/prevention.htm

There is some good stuff on your site and I finally got the video to work. One thing that I don't like is the way those browser test sites want you to configure your browser for maximum security. I have followed those instruction here:

http://www.heise-security.co.uk/services/browsercheck/adapt/ie60/02.shtml

and after I've done it I couldn't pretty much do none of the stuff that I usually do. I don't know who supposed to use those settings?

[TBoneit]

Another way to get infected is open attachments, even when they come from a friend.

If a friend's computer gets infected it will send the virus on to everybody in the address book of the infected computer. It wall send itself as if it were your friend sending it.

I've been seeing 4 or 5 messages a day on my oldest e-mail account that have as attachments .pdf files.

They could be viruses or they could just be a different way to try and trick the recipient into opening them to see the spam. Titles such as Unpaid-sduhfo.pdf or Magazineedc.pdf or bill - oiqhsdoq.pdf and Re: notice.pdf seem to be common types. If you really want to see who sent them, do not open. right click and choose properties, then Details, message source

[rothrand]

Ive been on broadband internet for about 3.5 years now, behind a wired router with a built-in firewall, and using sygate as a software firewall. Using XP Pro SP2 with the XP firewall turned off. I don't use any antivirus, spybot, adaware, or any other software like that.

I use Firefox as my browser, and Outlook Express as my email program (Turned off preview and automatic opening of attachments.) I surf the internet a lot, and go places that I probably shouldn't.
I also regularly update my system HOSTS file from this site:
http://www.mvps.org/winhelp2002/hosts.htm
(keeps me from accidentally going to some places, and keeps the system from contacting those sites without my knowledge.)

I do have antivirus programs, and all the above anti-malware stuff. Occasionaly, I install them and check for trojans, rootkits, etc. I have never found any or had any such problems.

But, I do make a ghost image of my system once a week and store it on a rewritable
DVD. If something did infect my system, all I have to do is restore from the disk. Takes about 5 minutes and I'm back up and running. I keep the last 7 backups, and overwrite the older one when I make a new one.


I see no need to take the performance hit of running antivirus, antimalware, etc. programs if one just exercises a little caution and takes some minor precautions.

[lacywest]

good stuff ... thanks

[lacywest]

Another way to get infected is open attachments, even when they come from a friend.

If a friend's computer gets infected it will send the virus on to everybody in the address book of the infected computer. It wall send itself as if it were your friend sending it.

I've been seeing 4 or 5 messages a day on my oldest e-mail account that have as attachments .pdf files.

They could be viruses or they could just be a different way to try and trick the recipient into opening them to see the spam. Titles such as Unpaid-sduhfo.pdf or Magazineedc.pdf or bill - oiqhsdoq.pdf and Re: notice.pdf seem to be common types. If you really want to see who sent them, do not open. right click and choose properties, then Details, message source

When I learned this can happen ... I also learned to include your own email address in your email contacts folder ... when you start getting email from your self .... you know you've been infected.

[lacywest]

To my knowledge I've never had anything other than spyware. Besides antivirus, firewalls, spybot etc, another program is a one that stops the installation of anything and stops any changes in the registry. The program that I use is Prevex.

Spy Doctor ... works well too .... I do go to dark places too ... and I got that stupid infection that keeps telling me I have been infected with spyware and I need this program to remove it ... which actually is "there" program to remove "there" infection.

Spy Doctor took awhile to search my Dell 5150 laptop but it finally found all traces of the adware infection and actually got rid of it. I really didn't want to re-install windows on my laptop. This was a few months ago.

Here is some info on Prevex ... http://www.stiefel.ca/en/about_skin/prevex.html

Okay ... here are some real links ...

http://www.prevx.com

http://www.dslreports.com/forum/remark,15532595

[TBoneit]

Good one, I hadn't thought about including myself in the address book.

Thanks