Adaware, Spybot, cws shredder and hijack this for spyware and such.
Clamwin for virus protection.0
ZoneAlarm or cheap router for firewall.
Here is how you remove as much spyware as possible:
1. install and update adaware, spybot and clamwin, turn off system restore and reboot into safemode, after unplugging network adapter.
2. delete all temp files and temporary internet files and cookies. this must be done for all users who have a login on the computer.
3. run adaware, spybot and cws shredder. run clamwin. do this for each account.
4. go to trendmicros free online scan and let it remove or fix anything that is found.
After all this crap you should be good to go! Contact off list if you need more help.
On Aug 24, 2004, at 10:57 AM, Lyvim Xaphir wrote:
--- Kaj Haulrich <[EMAIL PROTECTED]> wrote:
Dear list...
I am sorry for bothering you with this, but knowing that some of you have Windows on your box, I rely on your forgiveness :
A week ago I had to buy a new PC for one of my daughters (14 years old). She absolutely needed Windows in order to run some special, school-related apps. The PC came with WinXP pre-installed.
The first thing I did was to install Mozilla, OpenOffice and some sort of firewall, called ZoneAlarm. Now, I thought it was safe....
Hi, Kaj. Good to hear from you. The thing is that if you applied XP
update patches online *before* you installed Zonealarm, that is not good.
Because of the weaknesses in XP it is possible for XP to get infected
just by sitting on the network. M$ messenger has a security hole that
allows trojans to get in unless it is updated or killed.
Zonealarm is the best as far as I am concerned, I think you made a good decision there.
Suddenly, when she tries to send an e-mail (from within Mozilla, of course, I'm not THAT stupid), up pops a message from our ISP saying that the box is compromized, accordingly the smtp-server won't accept the mail. In fact, her IP was blacklisted.
Some on-line security scans, revealed no less than 159 trojans, worms and viruses !
This seems like an unholy lot IF you didn't perform online updates. If
you did then maybe not. What I'm thinking is that it's possible it might
have arrived with the infestation. Depends on how much work you did
online before you installed the firewall.
Usually infestations occur when the user installs XP while online and/or
peforms online service updates. (NOT a good idea) However your machine
came with XP preinstalled, so....
After heavy googling around, I purchased a spyware/trojan scanner called XoftSpy, which cleaned most of the shit. But nevertheless, a spyware trojan keeps coming in (SAHAgent). No matter what I do. (The bugger doesn't show up in ControlPanel --> Remove software).
I had a friend yesterday purchase one of these before I could stop him. There is a spyware scanner called Ad-aware that is free and will do an excellent job of cleaning your box --
http://www.lavasoftusa.com/software/adaware/
Well, I know next to nothing about Windows, but before I subscribe to a windows-list (which I would hate, really), I would like to ask if you can recommend :
1. A good, reliable firewall for Windows (preferably OSS and free) ?
Zonealarm is good
2. A spyware/trojan/worm cleaner capable of removing all malware ?
Ad-aware has won numerous awards and doesn't cost you a dime for the standard version. I think it's the best
3. Shutting down the whole kaboodle and wait for SP2 ?
When you do updates, the only thing I can recommend is what I do for
customers. Generally I download the network version of sp1a service pack
so that the XP box does not do any updating over the web.
http://www.microsoft.com/windowsxp/downloads/updates/sp1/network.mspx
After that, don't do any more updating. SP2 will hose your box. I did
try a suggestion by Bryan Phinney that is out there on the web for free
called Autopatcher, but so far I haven't been able to get an Autopatcher
installation in place that's not hosed. That may be because of the
particular release of XP I happen to have, I don't know. I look forward
to when either I or they can get it working because Autopatcher is a good
idea.
Anyways, my personal advice is to use the standard sp1a service pack and
then stop right there. You should also go to sourceforge and download
the virus scanner darling of the Linux world --
http://sourceforge.net/projects/clamwin/
ClamAV. IMO this scanner is better than Symantec's scanner, without the
bloat. It's lightweight, fast, does one thing and does it well; exactly
what a virus scanner should be. Linux Journal just gave it an Editor's
Choice award.
Don't be confused, this is a native Linux project that's been cross-compiled for the win32 world. So yes you will see a larger Linux project entry for ClamAV on Sourceforge.
Look forward to hearing how it goes -- take care
LX
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
____________________________________________________ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com ____________________________________________________
____________________________________________________ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com ____________________________________________________
