1. RE: [OT] I think I have a virus

> Another effective solution:
> 1. format C:
> 2. Reload Windows
> 3. install a real firewall.
> 4. Connect to internet.
> 5. Get all Windows updates.

I would have, but I lost my XP Pro CD. I need to 'find' another one. 
Once I do I'll format at the drop of a hat.
 
> Or, better yet, 
> 1. Insert Mandrake Linux setup disk. 
> 2. Hit reset.
> 3. Follow instructions :)

Actually I have Fedora Core 2 on another hard drive, thank you very 
much. I unfortunately do most of my programming on Windows, so I need 
XP.

~Greg

new topic     » topic index » view message » categorize

2. RE: [OT] I think I have a virus

Greg Haberek wrote:
> 
> > Another effective solution:
> > 1. format C:
> > 2. Reload Windows
> > 3. install a real firewall.
> > 4. Connect to internet.
> > 5. Get all Windows updates.
> 
> I would have, but I lost my XP Pro CD. I need to 'find' another one. 
> Once I do I'll format at the drop of a hat.

Sorry, I didn't know it was XP.
In that case, I personally would skip steps 1 thru 5 :)

(Been there, done that)

Irv

new topic     » goto parent     » topic index » view message » categorize

3. RE: [OT] I think I have a virus

Greg Haberek wrote:
> 
> 
> - Notepad closes randomly (actually I think its after a specific 
> interval)
> - Internet Explorer takes forever to start
> - my start page has been set to some "Home Search" crap
> - my memory almost maxes out right after windows starts (i use MaxMem by
> AnalogX)
> 
> I ran Ad-aware, Anti-Vir, and Bazooka Spyware scanner, and stripped down 
> my
> boot with msconfig. I'm pretty sure its a virus or a worm or something.
> Anyone have any ideas or suggestions?
> 
> ~Greg
> 

When I suspect something odd going on I check taskmgr for unusual 
processes.  I also check the registry for unusual things in
HKCU\Software\Microsoft\Windows\CurrentVersion\Run and in
HKLM\Software\Microsoft\Windows\CurrentVersion\Run.

If I find something odd I delete the reg entry and remove the binary 
from my hard drive.  Check everything because sometimes they'll use 
names that don't appear suspicious.

-- Brian

new topic     » goto parent     » topic index » view message » categorize

4. RE: [OT] I think I have a virus

Brian Broker wrote:
> 
> Greg Haberek wrote:
> > 
> > 
> > - Notepad closes randomly (actually I think its after a specific 
> > interval)
> > - Internet Explorer takes forever to start
> > - my start page has been set to some "Home Search" crap
> > - my memory almost maxes out right after windows starts (i use MaxMem by
> > AnalogX)
> > 
> > I ran Ad-aware, Anti-Vir, and Bazooka Spyware scanner, and stripped down 
> > my
> > boot with msconfig. I'm pretty sure its a virus or a worm or something.
> > Anyone have any ideas or suggestions?
> > 
> > ~Greg
> > 
> 
> When I suspect something odd going on I check taskmgr for unusual 
> processes.  I also check the registry for unusual things in
> HKCU\Software\Microsoft\Windows\CurrentVersion\Run and in
> HKLM\Software\Microsoft\Windows\CurrentVersion\Run.
> 
> If I find something odd I delete the reg entry and remove the binary 
> from my hard drive.  Check everything because sometimes they'll use 
> names that don't appear suspicious.
> 
> -- Brian
> 
> 

Also check HKCR\exefile\shell\open\command, so that no program is
'associated' with .exe's on your system. Viruses occasionally do that
to avoid always running in background, so they are harder to detect.
Some even disable you from using certain programs, like regedit.

Regards, Alexander Toresson

Shhh! Be vewy quiet! I'm hunting wuntime ewwows!

new topic     » goto parent     » topic index » view message » categorize

5. RE: [OT] I think I have a virus

> As far as the group policy helping with virus and
> spyware removal, its much improved since Windows 2000.
>   You can tell Windows to include file types other than
> just .exe.  Some of the spyware sets the security so
> tight, you can't even view the security tab while it
> is running, much less delete it.  To get to the
> software retrictions, run MMC.  Go to File, Add/Remove
> Snap In.  Then click the Add button.  Select Group
> Policy, click Add, Finish, Close, and OK.  Open Local
> Computer Policy, Computer Configuration, Windows
> Settings, Security Settings, Software Restrictions.
> Double click Enforcement to bring up the options.
> Select All Software Files, and All Users and click ok.
>   Then, open up the Security Levels folder, Right click
> on Disallowed, and click set as default.  Then we want
> to open the Additional Rules folder.  Right click in a
> blank spot for the rules and select New Hash Rule.
> Click the browse button and point it to
> C:\Windows\System32\iets32.exe.  It should
> automatically set it to Disallowed, wich is what we
> want.  We also want to create a new hash rule for
> C:\WINDOWS\System32\msdxm.ocx,
> C:\WINDOWS\system32\rundll32.vbe.

Ok, I totally foobar-ed my computer. I did what was mentioned above, and 
when I restarted and logged on, Windows logged me right off. I tried 
logging in as Administrator, same thing. So I booted into Safe Mode and 
removed all the settings, restarted, same problem. I'm posting this from 
my laptop. (mmmmm.... Fedora :) If it weren't for the homework I need to 
do in VB, and the programs people want me to write *in Windows* I'd 
strip down that hard drive and install Fedora Core 2.

Grrrr.... Stupid Spyware....
~Greg

new topic     » goto parent     » topic index » view message » categorize

6. RE: [OT] I think I have a virus

Greg Haberek wrote:

new topic     » goto parent     » topic index » view message » categorize

7. RE: [OT] I think I have a virus

irv mullins wrote:
> 
> Greg Haberek wrote:
> 


That's odd. I quoted several lines from Greg, plus added about 
10 of my own. No html markup or anything. Wonder where they went?

Irv

new topic     » goto parent     » topic index » view message » categorize

8. RE: [OT] I think I have a virus

Greg Haberek wrote:
> 
> Ok, I totally foobar-ed my computer. I did what was mentioned above, and 
> when I restarted and logged on, Windows logged me right off. I tried 
> logging in as Administrator, same thing. So I booted into Safe Mode and 
> removed all the settings, restarted, same problem. I'm posting this from 
> my laptop. (mmmmm.... Fedora :) If it weren't for the homework I need to 
> do in VB, and the programs people want me to write *in Windows* I'd 
> strip down that hard drive and install Fedora Core 2.
> 
> Grrrr.... Stupid Spyware....

There's an article on Slashdot.org about that right now.
Essentially, it says that after you format your disk and re-install 
Windows, you have an average of 20 seconds online before you are hit with 
some kind of exploit. Since it takes way longer than 20 seconds to 
get and install all the Microsoft updates which are supposed to protect you 
from such things, it seems like a lost cause. 
Maybe order SP2 on CD from Microsoft?

Irv

new topic     » goto parent     » topic index » view message » categorize

9. RE: [OT] I think I have a virus

Greg Haberek wrote:
> 
> > As far as the group policy helping with virus and
> > spyware removal, its much improved since Windows 2000.
> >   You can tell Windows to include file types other than
> > just .exe.  Some of the spyware sets the security so
> > tight, you can't even view the security tab while it
> > is running, much less delete it.  To get to the
> > software retrictions, run MMC.  Go to File, Add/Remove
> > Snap In.  Then click the Add button.  Select Group
> > Policy, click Add, Finish, Close, and OK.  Open Local
> > Computer Policy, Computer Configuration, Windows
> > Settings, Security Settings, Software Restrictions.
> > Double click Enforcement to bring up the options.
> > Select All Software Files, and All Users and click ok.
> >   Then, open up the Security Levels folder, Right click
> > on Disallowed, and click set as default.  Then we want
> > to open the Additional Rules folder.  Right click in a
> > blank spot for the rules and select New Hash Rule.
> > Click the browse button and point it to
> > C:\Windows\System32\iets32.exe.  It should
> > automatically set it to Disallowed, wich is what we
> > want.  We also want to create a new hash rule for
> > C:\WINDOWS\System32\msdxm.ocx,
> > C:\WINDOWS\system32\rundll32.vbe.
Sounds like the time my computer got a horible active-X super-virus.
It got past
2 firewalls mutiple spyware removers and my virus scanner. This was
the reason I
had to reformat and reinstall; no mater what it would reinstall
itself!
It was downloaded by a popup ad, in a URL containing the word
"nitrious" (what I call the virus).
It will install large numbers of spy, keylogging, spam-sending,
password collecting programs.
There is vitrtually no way to remove it, since it is constantly
reinstalling itself (it had used 7GB of space 

on my computer).
It is not detected by any program I know of.
Try reformatting and re-installing windows and do not use internet
explorer
(when using other browsers,it simply crashes the computer, but does
no other damage)

"(previous post)
- Notepad closes randomly (actually I think its after a specific interval)
Nitrious will do that...(dunno why)
- Internet Explorer takes forever to start
Nitrious will do that...(it takes time to load 100+ hijackers)
- my start page has been set to some "Home Search"
Nitrious will do that...(actually a hijackker it installs)
- my memory almost maxes out right after windows starts (i use MaxMem by
AnalogX)
Nitrious will do that...(it loads itself many times, along with many other
spy programs)

"

> 
> Ok, I totally foobar-ed my computer. I did what was mentioned above, and 
> when I restarted and logged on, Windows logged me right off. I tried 
Nitrious will do that...

> logging in as Administrator, same thing. So I booted into Safe Mode and 
> removed all the settings, restarted, same problem. I'm posting this from 
> my laptop. (mmmmm.... Fedora :) If it weren't for the homework I need to 
> do in VB, and the programs people want me to write *in Windows* I'd 
> strip down that hard drive and install Fedora Core 2.
> 
> Grrrr.... Stupid Spyware....
> ~Greg
> 
>

new topic     » goto parent     » topic index » view message » categorize

10. RE: [OT] I think I have a virus

irv mullins wrote:
> 
> irv mullins wrote:
> > 
> > Greg Haberek wrote:
> > 
> 
> That's odd. I quoted several lines from Greg, plus added about 
> 10 of my own. No html markup or anything. Wonder where they went?

You had a line consisting of just a single '.' character.
sendmail treats that as EOF in a message body.
(EUforum messages are e-mailed from one id on 
ListFilter to another).

Anyway, I put your message through again.

In future I'll check for a single dot line.

Regards,
   Rob Craig
   Rapid Deployment Software
   http://www.RapidEuphoria.com

new topic     » goto parent     » topic index » view message » categorize

11. RE: [OT] I think I have a virus

One more entry I found that just kinda skipped over,
spoolcrv.cpl.  Sorry, its got almost the same name as
the print server.  Its a virus called Inspir.11.  If
you run Hijack this again, tell it to fix all the
entries with that file name.  The original log you
sent me had it listed under RunServices for HKLM and
HKCU.

As far as windows logging off as soon as the desktop
loads, that's just strange.  Never had that happen to
me before.  Couple of things to check.  Load
GroupPolicy Editor again and bring up the software
restrictions.  Since it sounds like you told it to
disable the policies, Right click on Local Computer
Policy, and clear both the checks at the bottom and
click OK.  First, go to Computer Config, Windows
Settings, Security Settings,  Software Restrictions.
Open up Enforcement, make sure it is set to All Files
and All Users.  Next, go to security levels.  Open
Unrestricted, and set it to default.  Then we want to
go to Additional Rules.  Bring up the properties on
each of the HKEY_LOCAL_MACHINE (first four) path
rules.  Make sure they are all set to unrestriced on
the security level.  Then, lets go ahead and delete
all the hash rules we made.

Next, we want to delete several registry keys.  BE
VERY CAREFUL.
1.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\iets32.exe

2.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\system
service and Windows Security Server, make sure its the
ones with the values of spoolcrv.cpl and rundll32.vbe.
  They are probably the only entries under RunServices.

3.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices\system
service.  Again, make sure its got a value of
spoolcrv.cpl.

After this, reboot.  Let me know what happens.  I'll
be up for quite a while yet, so feel free to send an
email tonight.  I'll try to respond as quickly as
possible.

Chris

--- Greg Haberek <ghaberek at wowway.com> wrote:



> As far as the group policy helping with virus and
> spyware removal, its much improved since Windows
2000.
>   You can tell Windows to include file types other
than
> just .exe.  Some of the spyware sets the security
so
> tight, you can't even view the security tab while
it
> is running, much less delete it.  To get to the
> software retrictions, run MMC.  Go to File,
Add/Remove
> Snap In.  Then click the Add button.  Select Group
> Policy, click Add, Finish, Close, and OK.  Open
Local
> Computer Policy, Computer Configuration, Windows
> Settings, Security Settings, Software
Restrictions.
> Double click Enforcement to bring up the options.
> Select All Software Files, and All Users and click
ok.
>   Then, open up the Security Levels folder, Right
click
> on Disallowed, and click set as default.  Then we
want
> to open the Additional Rules folder.  Right click
in a
> blank spot for the rules and select New Hash Rule.
> Click the browse button and point it to
> C:\Windows\System32\iets32.exe.  It should
> automatically set it to Disallowed, wich is what
we
> want.  We also want to create a new hash rule for
> C:\WINDOWS\System32\msdxm.ocx,
> C:\WINDOWS\system32\rundll32.vbe.

Ok, I totally foobar-ed my computer. I did what was
mentioned above, and 
when I restarted and logged on, Windows logged me
right off. I tried 
logging in as Administrator, same thing. So I booted
into Safe Mode and 
removed all the settings, restarted, same problem.
I'm posting this from 
my laptop. (mmmmm.... Fedora :) If it weren't for
the homework I need to 
do in VB, and the programs people want me to write
*in Windows* I'd 
strip down that hard drive and install Fedora Core
2.

Grrrr.... Stupid Spyware....
~Greg




For Topica's complete suite of email marketing
solutions visit:
http://www.topica.com/?p=TEXFOOTER

new topic     » goto parent     » topic index » view message » categorize

12. RE: [OT] I think I have a virus

Hi, Irv.
Problem is that MS updates install themselves automatically. You (or at
least I) can't download them first, save to disk, and then manually install
them one by one.
So, I never installed any of them. Instead, when I had to re-install Windows
(usually because some minor problem arose when installing fair but buggy
software), I did so from the CD, then installed AVG antivirus (an updated
version downloaded through another PC) and other protecting software, and
everything was virus-free for a while.
Regards.
----- Original Message -----
From: irv mullins <guest at RapidEuphoria.com>
To: <EUforum at topica.com>
Sent: Wednesday, August 18, 2004 12:06 AM
Subject: RE: [OT] I think I have a virus


>
>
> posted by: irv mullins <irvm at ellijay.com>
>
> Greg Haberek wrote:
> >
> > Ok, I totally foobar-ed my computer. I did what was mentioned above, and
> > when I restarted and logged on, Windows logged me right off. I tried
> > logging in as Administrator, same thing. So I booted into Safe Mode and
> > removed all the settings, restarted, same problem. I'm posting this from
> > my laptop. (mmmmm.... Fedora :) If it weren't for the homework I need to
> > do in VB, and the programs people want me to write *in Windows* I'd
> > strip down that hard drive and install Fedora Core 2.
> >
> > Grrrr.... Stupid Spyware....
>
> There's an article on Slashdot.org about that right now.
> Essentially, it says that after you format your disk and re-install
> Windows, you have an average of 20 seconds online before you are hit with
> some kind of exploit. Since it takes way longer than 20 seconds to
> get and install all the Microsoft updates which are supposed to protect
you
> from such things, it seems like a lost cause.
> Maybe order SP2 on CD from Microsoft?
>
> Irv
>
>
>
>

new topic     » goto parent     » topic index » view message » categorize

13. RE: [OT] I think I have a virus

I'm just giving up on Windows for a while. I can't format my hard drive yet, I
 have way, way, way, waaaaaaaaaaay too much stuff on there to risk losing. I
have my whole C:\EUPHORIA\ directory. There must be thousands of files and
dozens of little projects that I need to back up. And not to mention a few
gigs of mp3s (all mine, thank you) and 3 years worth of e-mails from EUforum
and MMON.org (Michigan Merkur Owners Network - my car club).

<rant type=ethical>
It really is too bad that Windows is so aweful and full of holes that I have
to give up on it. I can only image what kind of viri or worms other, 'normal'
users get. I'm a programmer, a network admin, a penguin hugger, a windows user
since 3.0, an i-can-fix-anything-with-buttons guru, and a car mechanic (and
guru). So why do I, who uses anti-virus software, a *hardware* firewall and
regular spyware checks (S&D and Ad-Aware), get stuck with irreprible (sp?)
damage? Linux isn't to the point where I can develop applications that people
I know can use, which is my current development market. Heck, I've practically
memorized Win32Lib, I've been using it since David Cuny was developing it.
wxEuphoria and EuGTK are similar, but I wish Llama was still alive and kicking
    <thought> considering next big project </thought>.
</rant>

On Tue, 17 Aug 2004 20:06:37 -0700, irv mullins wrote
> 
> posted by: irv mullins <irvm at ellijay.com>
> 
> Greg Haberek wrote:
> > 
> > Ok, I totally foobar-ed my computer. I did what was mentioned above, and 
> > when I restarted and logged on, Windows logged me right off. I tried 
> > logging in as Administrator, same thing. So I booted into Safe Mode and 
> > removed all the settings, restarted, same problem. I'm posting this from 
> > my laptop. (mmmmm.... Fedora :) If it weren't for the homework I need to 
> > do in VB, and the programs people want me to write *in Windows* I'd 
> > strip down that hard drive and install Fedora Core 2.
> > 
> > Grrrr.... Stupid Spyware....
> 
> There's an article on Slashdot.org about that right now.
> Essentially, it says that after you format your disk and re-install 
> Windows, you have an average of 20 seconds online before you are hit 
> with some kind of exploit. Since it takes way longer than 20 seconds 
> to get and install all the Microsoft updates which are supposed to 
> protect you from such things, it seems like a lost cause. Maybe 
> order SP2 on CD from Microsoft?
> 
> Irv
> 
> 
> 


--
WOW! Homepage (http://www.wowway.com)

new topic     » goto parent     » topic index » view message » categorize

14. RE: [OT] I think I have a virus

Actually, you can download windows updates from the
windows update catalog.  It can be found at
http://v4.windowsupdate.microsoft.com/catalog/en/default.asp.
 It is a bit of a pain because you have to install
each on individually, and there's easy way to tell if
you need the update until you run the install routine.

Chris
--- Ricardo Forno <rforno at uyuyuy.com> wrote:

> 
> 
> Hi, Irv.
> Problem is that MS updates install themselves
> automatically. You (or at
> least I) can't download them first, save to disk,
> and then manually install
> them one by one.
> So, I never installed any of them. Instead, when I
> had to re-install Windows
> (usually because some minor problem arose when
> installing fair but buggy
> software), I did so from the CD, then installed AVG
> antivirus (an updated
> version downloaded through another PC) and other
> protecting software, and
> everything was virus-free for a while.
> Regards.
> ----- Original Message -----
> From: irv mullins <guest at RapidEuphoria.com>
> To: <EUforum at topica.com>
> Sent: Wednesday, August 18, 2004 12:06 AM
> Subject: RE: [OT] I think I have a virus
> 
> 
> > posted by: irv mullins <irvm at ellijay.com>
> >
> > Greg Haberek wrote:
> > >
> > > Ok, I totally foobar-ed my computer. I did what
> was mentioned above, and
> > > when I restarted and logged on, Windows logged
> me right off. I tried
> > > logging in as Administrator, same thing. So I
> booted into Safe Mode and
> > > removed all the settings, restarted, same
> problem. I'm posting this from
> > > my laptop. (mmmmm.... Fedora :) If it weren't
> for the homework I need to
> > > do in VB, and the programs people want me to
> write *in Windows* I'd
> > > strip down that hard drive and install Fedora
> Core 2.
> > >
> > > Grrrr.... Stupid Spyware....
> >
> > There's an article on Slashdot.org about that
> right now.
> > Essentially, it says that after you format your
> disk and re-install
> > Windows, you have an average of 20 seconds online
> before you are hit with
> > some kind of exploit. Since it takes way longer
> than 20 seconds to
> > get and install all the Microsoft updates which
> are supposed to protect
> you
> > from such things, it seems like a lost cause.
> > Maybe order SP2 on CD from Microsoft?
> >
> > Irv
> >
> >
> 
> 
> For Topica's complete suite of email marketing
> solutions visit:
> http://www.topica.com/?p=TEXFOOTER
>
>

new topic     » goto parent     » topic index » view message » categorize

15. RE: [OT] I think I have a virus

Sorry to hear that.  I'm guessing you live in
Michigan.  If you do, I'll probably be up there this
fall, near Battle Creek.  If you havn't already fixed
the problem or formatted the hard drive, I'd be more
than happy to look at it.  Also, before formatting, if
system restore is on, restore to an earlier point. 
And with Windows XP, you can basically reinstall right
on top of its self, an in place upgrade and it will
usually fix the issue.  You just have to do all the
updates and such again.  Worth a try, and easier than
losing data forgotten during a backup.  Good luck.

Chris

--- Greg Haberek <ghaberek at wowway.com> wrote:

> 
> 
> I'm just giving up on Windows for a while. I can't
> format my hard drive yet, I
>  have way, way, way, waaaaaaaaaaay too much stuff on
> there to risk losing. I
> have my whole C:\EUPHORIA\ directory. There must be
> thousands of files and
> dozens of little projects that I need to back up.
> And not to mention a few
> gigs of mp3s (all mine, thank you) and 3 years worth
> of e-mails from EUforum
> and MMON.org (Michigan Merkur Owners Network - my
> car club).
> 
> <rant type=ethical>
> It really is too bad that Windows is so aweful and
> full of holes that I have
> to give up on it. I can only image what kind of viri
> or worms other, 'normal'
> users get. I'm a programmer, a network admin, a
> penguin hugger, a windows user
> since 3.0, an i-can-fix-anything-with-buttons guru,
> and a car mechanic (and
> guru). So why do I, who uses anti-virus software, a
> *hardware* firewall and
> regular spyware checks (S&D and Ad-Aware), get stuck
> with irreprible (sp?)
> damage? Linux isn't to the point where I can develop
> applications that people
> I know can use, which is my current development
> market. Heck, I've practically
> memorized Win32Lib, I've been using it since David
> Cuny was developing it.
> wxEuphoria and EuGTK are similar, but I wish Llama
> was still alive and kicking
>     <thought> considering next big project
> </thought>.
> </rant>
> 
> On Tue, 17 Aug 2004 20:06:37 -0700, irv mullins
> wrote
> > 
> > posted by: irv mullins <irvm at ellijay.com>
> > 
> > Greg Haberek wrote:
> > > 
> > > Ok, I totally foobar-ed my computer. I did what
> was mentioned above, and 
> > > when I restarted and logged on, Windows logged
> me right off. I tried 
> > > logging in as Administrator, same thing. So I
> booted into Safe Mode and 
> > > removed all the settings, restarted, same
> problem. I'm posting this from 
> > > my laptop. (mmmmm.... Fedora :) If it weren't
> for the homework I need to 
> > > do in VB, and the programs people want me to
> write *in Windows* I'd 
> > > strip down that hard drive and install Fedora
> Core 2.
> > > 
> > > Grrrr.... Stupid Spyware....
> > 
> > There's an article on Slashdot.org about that
> right now.
> > Essentially, it says that after you format your
> disk and re-install 
> > Windows, you have an average of 20 seconds online
> before you are hit 
> > with some kind of exploit. Since it takes way
> longer than 20 seconds 
> > to get and install all the Microsoft updates which
> are supposed to 
> > protect you from such things, it seems like a lost
> cause. Maybe 
> > order SP2 on CD from Microsoft?
> > 
> > Irv
> > 
> > 
> --
> WOW! Homepage (http://www.wowway.com)
> 
>
> 
> 
> For Topica's complete suite of email marketing
> solutions visit:
> http://www.topica.com/?p=TEXFOOTER
>
>

new topic     » goto parent     » topic index » view message » categorize

16. RE: [OT] I think I have a virus

Ricardo M. Forno wrote:
> 
> Hi, Irv.
> Problem is that MS updates install themselves automatically. You (or at
> least I) can't download them first, save to disk, and then manually install
> them one by one.
<snip>

FYI:
You'd likely need admin priv's to see/change it but the "System" control 
panel (aka "my computer"/properties) should have an "Automatic Updates" 
tab for controlling A.U. behavior.

-- Brian

new topic     » goto parent     » topic index » view message » categorize

17. RE: [OT] I think I have a virus

I am running Windows 95 and Netscape 4.04.
Do I really need to worry about Spyware and Viruses
with this old stuff?

don cole
SF

new topic     » goto parent     » topic index » view message » categorize

18. RE: [OT] I think I have a virus

Christopher Stone wrote:
> 
> Actually, you can download windows updates from the
> windows update catalog.  It can be found at
> <a
> href="http://v4.windowsupdate.microsoft.com/catalog/en/default.asp.">http://v4.windowsupdate.microsoft.com/catalog/en/default.asp.</a>
>  It is a bit of a pain because you have to install
> each on individually, and there's easy way to tell if
> you need the update until you run the install routine.

Interesting. All I get when I go there is a typical Microsoft Meaningless 
Error Message (tm):
The specified request cannot be executed from current Application Pool
(in very large type).
Maybe Microsoft doesn't like Mozilla?

Irv

new topic     » goto parent     » topic index » view message » categorize

19. RE: [OT] I think I have a virus

unknown wrote:
> 
> 
> I'm just giving up on Windows for a while. I can't format my hard drive yet, I
>  have way, way, way, waaaaaaaaaaay too much stuff on there to risk losing. I
> have my whole C:\EUPHORIA\ directory. There must be thousands of files and
> dozens of little projects that I need to back up. And not to mention a few
> gigs of mp3s (all mine, thank you) and 3 years worth of e-mails from EUforum
> and MMON.org (Michigan Merkur Owners Network - my car club).

Do what I do: install the Windows drive as the second or third drive, 
and use Linux to salvage anything you want to keep. Then you can wipe 
the drive and reinstall Windows if you wish.

> <rant type=ethical>
> It really is too bad that Windows is so aweful and full of holes that I have
> to give up on it. I can only image what kind of viri or worms other, 'normal'
> users get. I'm a programmer, a network admin, a penguin hugger, a windows user
> since 3.0, an i-can-fix-anything-with-buttons guru, and a car mechanic (and
> guru). So why do I, who uses anti-virus software, a *hardware* firewall and
> regular spyware checks (S&D and Ad-Aware), get stuck with irreprible (sp?)
> damage? Linux isn't to the point where I can develop applications that people
> I know can use, which is my current development market. Heck, I've practically
> memorized Win32Lib, I've been using it since David Cuny was developing it.
> wxEuphoria and EuGTK are similar, but I wish Llama was still alive and kicking
>     <thought> considering next big project </thought>.
> </rant>

My clients still mostly use Windows (but that's changing). Recently, however,
I have been able to run almost all of their Windows software on my Linux box
using wine.
It works quite well. The next new app they need I will try to write 
using GTK. That will make the job easier for me, plus it will be no hassle to 
port when they eventually ditch Windows altogether. Spending several thousand 
bucks on a "Windows Only" app seems ill-advised nowdays, one which I wouldn't 
recommend. It limits future options. 

Regards,
Irv

new topic     » goto parent     » topic index » view message » categorize

20. RE: [OT] I think I have a virus

Ricardo M. Forno wrote:
> 
> Hi, Irv.
> Problem is that MS updates install themselves automatically. You (or at
> least I) can't download them first, save to disk, and then manually install
> them one by one.
> So, I never installed any of them. Instead, when I had to re-install Windows
> (usually because some minor problem arose when installing fair but buggy
> software), I did so from the CD, then installed AVG antivirus (an updated
> version downloaded through another PC) and other protecting software, and
> everything was virus-free for a while.

I think that's a resonable approach, provided you install a real firewall 
BEFORE you go on-line for the first time. Of course, a hardware firewall 
would be best. An ABM* software firewall would be the next choice.

*ABM: Anything But Microsoft :)

Irv

new topic     » goto parent     » topic index » view message » categorize

21. RE: [OT] I think I have a virus

> If it was General Motors who issued a potentially faulty product, 
> let's say for example, an ignition switch which would accept any 
> old housekey, they would issue a recall, fix the problem at no charge, 
> and say a polite "thank you". Why is Microsoft any different?

I'm sure we've all seen this before, but just for a refresh:
<a href="http://www.vbrad.com/Misc/hum_ms_cars.htm">If Microsoft Made 
Cars</a>

new topic     » goto parent     » topic index » view message » categorize

22. RE: [OT] I think I have a virus

> I am running Windows 95 and Netscape 4.04.
> Do I really need to worry about Spyware and Viruses
> with this old stuff?

I doubt you have anything to worry about. Windows 95 is basically bullet 
proof. I know Kat still uses it, and I'm sure she swears buy it. 
Upgrading to '98 SE might not hurt, its one of the *only* Microsoft 
upgrades I'd ever suggest. As for Netscape 4.04.... geeze, I remember 
using 3.91! Again, its kid tested and mother approved. I don't remember 
getting spyware and viruses when I had Win95 and Netscape.

The problem of constantly upgrading software isn't to fix existing 
'undocumented issues' (as Mr. Gates likes to put it) but to add new 
'features' which open up security flaws and ultimately kill the speed 
and reliability of the app on slower, older systems. Like my dad always 
said, "If it ain't broke, don't fix it." I know I'm still using 
utilities on Linux that are years old and work great.

~Greg

new topic     » goto parent     » topic index » view message » categorize

23. RE: [OT] I think I have a virus

Greg Haberek wrote:
> 
> > I am running Windows 95 and Netscape 4.04.
> > Do I really need to worry about Spyware and Viruses
> > with this old stuff?
> 
> I doubt you have anything to worry about. Windows 95 is basically bullet 
> proof. I know Kat still uses it, and I'm sure she swears buy it. 
> Upgrading to '98 SE might not hurt, its one of the *only* Microsoft 
> upgrades I'd ever suggest. As for Netscape 4.04.... geeze, I remember 
> using 3.91! Again, its kid tested and mother approved. I don't remember 
> getting spyware and viruses when I had Win95 and Netscape.
> 
> The problem of constantly upgrading software isn't to fix existing 
> 'undocumented issues' (as Mr. Gates likes to put it) but to add new 
> 'features' which open up security flaws and ultimately kill the speed 
> and reliability of the app on slower, older systems. Like my dad always 
> said, "If it ain't broke, don't fix it." I know I'm still using 
> utilities on Linux that are years old and work great.
> 
> ~Greg
> 
> 
I agree. I'm not going to upgrade anything unless I get new (faster) computer.
I downloaded a newer version of Netscape but with all it's bells and 
whistles it took about 5 minuets to download one web page.
I read somewhere (I think Internet for Dummies) "Don't upgrade everytime
a product comes out with a new version".

don cole
SF

new topic     » goto parent     » topic index » view message » categorize

24. RE: [OT] I think I have a virus

Greg Haberek wrote:

> The problem of constantly upgrading software isn't to fix existing 
> 'undocumented issues' (as Mr. Gates likes to put it) but to add new 
> 'features' which open up security flaws and ultimately kill the speed 
> and reliability of the app on slower, older systems. Like my dad always 
> said, "If it ain't broke, don't fix it." I know I'm still using 
> utilities on Linux that are years old and work great.

I can certainly understand the need to add new "features" to apps, 
otherwise why would anyone buy new copies of software they already own 
(or have 'borrowed':) But frankly, Windows itself doesn't fall into 
that category. AFAIK, very few people go out and buy a copy of XP or 
whatever, they just wait until they need a new pc, which comes with 
it already installed.

What I don't understand is why Microsoft added so many ways for others 
to get access to your computer. Was it a misguided attempt to make 
software updates 'foolproof'? Or a way to detect unlicensed software, 
or a way for Microsoft to track peoples' browsing habits,
or perhaps something demanded by the government? 

Probably a good case could be made for all of the above.

Irv

new topic     » goto parent     » topic index » view message » categorize

25. RE: [OT] I think I have a virus

Travis Beaty wrote:
> 
> On Wednesday 18 August 2004 09:49 am, irv mullins wrote:
> > If it was General Motors who issued a potentially faulty product,
> > let's say for example, an ignition switch which would accept any
> > old housekey, they would issue a recall, fix the problem at no charge,
> > and say a polite "thank you". Why is Microsoft any different?
> 
> Microsoft would be MUCH different, Irv.  They'd fix the problem right 
> away, by 
> updating your car.  The ignition switch would be removed, and instead, 
> the 
> driver would be given a 50 page instruction manual on how to hot-wire 
> their 
> own vehicle, and would be offered a downloadable screwdriver.
> 
> As far as XP2 is concerned, folks might find this interesting.  Sorry 
> for the 
> 20 mile URL:
> 
>
> http://www.computerweekly.com/articles/article.asp?liArticleID=132717&liArticleTypeID=1&liCategoryID=1&liChannelID=126&liFlavourID=1&sSearch=&nPage=1
> 
> 
> Travis.

FWIW, I'm running SP2 at work and at home without issues...

-- Brian

new topic     » goto parent     » topic index » view message » categorize

26. RE: [OT] I think I have a virus

Greg Haberek wrote:
> 
> > I am running Windows 95 and Netscape 4.04.
> > Do I really need to worry about Spyware and Viruses
> > with this old stuff?

For what its worth, I don't think I've ever had a virus or
similar on the Windows machines I use in the office, and only three
times have I had a virus at home (thanks to my teenage son accessing 
nasty sites), and they were easily removed and caused no damage.

I don't use Office, IE, or Outlook. I use OpenOffice, Opera and 
40tude-Dialog instead.

I use a firewall (Omniquad) and virus checker (CA eTrust).

I keep my Windows environments up-to-date with all the patches.

I don't accept email invitations for anything from anybody I don't know.

I don't accept diskettes, CDs, DVD's, memory sticks etc... without first
examining their contents closely with two different virus engines.

I sleep easy.

-- 
Derek Parnell
Melbourne, Australia

new topic     » goto parent     » topic index » view message » categorize

27. RE: [OT] I think I have a virus

Agreed.
----- Original Message ----- 
From: Greg Haberek <ghaberek at wowway.com>
To: <EUforum at topica.com>
Sent: Wednesday, August 18, 2004 1:22 PM
Subject: RE: [OT] I think I have a virus


> 
> 
> > I am running Windows 95 and Netscape 4.04.
> > Do I really need to worry about Spyware and Viruses
> > with this old stuff?
> 
> I doubt you have anything to worry about. Windows 95 is basically bullet 
> proof. I know Kat still uses it, and I'm sure she swears buy it. 
> Upgrading to '98 SE might not hurt, its one of the *only* Microsoft 
> upgrades I'd ever suggest. As for Netscape 4.04.... geeze, I remember 
> using 3.91! Again, its kid tested and mother approved. I don't remember 
> getting spyware and viruses when I had Win95 and Netscape.
> 
> The problem of constantly upgrading software isn't to fix existing 
> 'undocumented issues' (as Mr. Gates likes to put it) but to add new 
> 'features' which open up security flaws and ultimately kill the speed 
> and reliability of the app on slower, older systems. Like my dad always 
> said, "If it ain't broke, don't fix it." I know I'm still using 
> utilities on Linux that are years old and work great.
> 
> ~Greg
> 
> 
> 
>

new topic     » goto parent     » topic index » view message » categorize

28. RE: [OT] I think I have a virus

I think you may also use stand-alone DOS to save your files and then
reinstall Windows. I am assuming you use Windows 98.
There is a catch, however. Native DOS does not recognize long filenames, so
your files will be saved as FILEXX~1.EXE or something similar.
Regards.
----- Original Message -----
From: irv mullins <guest at RapidEuphoria.com>
To: <EUforum at topica.com>
Sent: Wednesday, August 18, 2004 10:28 AM
Subject: RE: [OT] I think I have a virus


>
>
> posted by: irv mullins <irvm at ellijay.com>
>
> unknown wrote:
> >
> >
> > I'm just giving up on Windows for a while. I can't format my hard drive
yet, I
> >  have way, way, way, waaaaaaaaaaay too much stuff on there to risk
losing. I
> > have my whole C:\EUPHORIA\ directory. There must be thousands of files
and
> > dozens of little projects that I need to back up. And not to mention a
few
> > gigs of mp3s (all mine, thank you) and 3 years worth of e-mails from
EUforum
> > and MMON.org (Michigan Merkur Owners Network - my car club).
>
> Do what I do: install the Windows drive as the second or third drive,
> and use Linux to salvage anything you want to keep. Then you can wipe
> the drive and reinstall Windows if you wish.
>
> > <rant type=ethical>
> > It really is too bad that Windows is so aweful and full of holes that I
have
> > to give up on it. I can only image what kind of viri or worms other,
'normal'
> > users get. I'm a programmer, a network admin, a penguin hugger, a
windows user
> > since 3.0, an i-can-fix-anything-with-buttons guru, and a car mechanic
(and
> > guru). So why do I, who uses anti-virus software, a *hardware* firewall
and
> > regular spyware checks (S&D and Ad-Aware), get stuck with irreprible
(sp?)
> > damage? Linux isn't to the point where I can develop applications that
people
> > I know can use, which is my current development market. Heck, I've
practically
> > memorized Win32Lib, I've been using it since David Cuny was developing
it.
> > wxEuphoria and EuGTK are similar, but I wish Llama was still alive and
kicking
> >     <thought> considering next big project </thought>.
> > </rant>
>
> My clients still mostly use Windows (but that's changing). Recently,
however,
> I have been able to run almost all of their Windows software on my Linux
box using wine.
> It works quite well. The next new app they need I will try to write
> using GTK. That will make the job easier for me, plus it will be no hassle
to
> port when they eventually ditch Windows altogether. Spending several
thousand
> bucks on a "Windows Only" app seems ill-advised nowdays, one which I
wouldn't
> recommend. It limits future options.
>
> Regards,
> Irv
>
>
>
>

new topic     » goto parent     » topic index » view message » categorize

29. RE: [OT] I think I have a virus

Thanks, but I should have made clear that I use Win 98, so this tab doesn't
exist for me...
Regards.
----- Original Message -----
From: Brian Broker <guest at RapidEuphoria.com>
To: <EUforum at topica.com>
Sent: Wednesday, August 18, 2004 4:17 AM
Subject: RE: [OT] I think I have a virus


>
>
> posted by: Brian Broker <bkb at cnw.com>
>
> Ricardo M. Forno wrote:
> >
> > Hi, Irv.
> > Problem is that MS updates install themselves automatically. You (or at
> > least I) can't download them first, save to disk, and then manually
install
> > them one by one.
> <snip>
>
> FYI:
> You'd likely need admin priv's to see/change it but the "System" control
> panel (aka "my computer"/properties) should have an "Automatic Updates"
> tab for controlling A.U. behavior.
>
> -- Brian
>
>
>
>

new topic     » goto parent     » topic index » view message » categorize

30. RE: [OT] I think I have a virus

Many thanks, Christopher.
Do you know where can I find the updates in the same format, but for the
Spanish version?
Regards.
----- Original Message -----
From: Christopher Stone <chris_m_stone at yahoo.com>
To: <EUforum at topica.com>
Sent: Wednesday, August 18, 2004 2:34 AM
Subject: RE: [OT] I think I have a virus


>
>
> Actually, you can download windows updates from the
> windows update catalog.  It can be found at
> http://v4.windowsupdate.microsoft.com/catalog/en/default.asp.
>  It is a bit of a pain because you have to install
> each on individually, and there's easy way to tell if
> you need the update until you run the install routine.
>
> Chris
> --- Ricardo Forno <rforno at uyuyuy.com> wrote:
>
> >
> > Hi, Irv.
> > Problem is that MS updates install themselves
> > automatically. You (or at
> > least I) can't download them first, save to disk,
> > and then manually install
> > them one by one.
> > So, I never installed any of them. Instead, when I
> > had to re-install Windows
> > (usually because some minor problem arose when
> > installing fair but buggy
> > software), I did so from the CD, then installed AVG
> > antivirus (an updated
> > version downloaded through another PC) and other
> > protecting software, and
> > everything was virus-free for a while.
> > Regards.
> > ----- Original Message -----
> > From: irv mullins <guest at RapidEuphoria.com>
> > To: <EUforum at topica.com>
> > Sent: Wednesday, August 18, 2004 12:06 AM
> > Subject: RE: [OT] I think I have a virus
> >
> >
> > > posted by: irv mullins <irvm at ellijay.com>
> > >
> > > Greg Haberek wrote:
> > > >
> > > > Ok, I totally foobar-ed my computer. I did what
> > was mentioned above, and
> > > > when I restarted and logged on, Windows logged
> > me right off. I tried
> > > > logging in as Administrator, same thing. So I
> > booted into Safe Mode and
> > > > removed all the settings, restarted, same
> > problem. I'm posting this from
> > > > my laptop. (mmmmm.... Fedora :) If it weren't
> > for the homework I need to
> > > > do in VB, and the programs people want me to
> > write *in Windows* I'd
> > > > strip down that hard drive and install Fedora
> > Core 2.
> > > >
> > > > Grrrr.... Stupid Spyware....
> > >
> > > There's an article on Slashdot.org about that
> > right now.
> > > Essentially, it says that after you format your
> > disk and re-install
> > > Windows, you have an average of 20 seconds online
> > before you are hit with
> > > some kind of exploit. Since it takes way longer
> > than 20 seconds to
> > > get and install all the Microsoft updates which
> > are supposed to protect
> > you
> > > from such things, it seems like a lost cause.
> > > Maybe order SP2 on CD from Microsoft?
> > >
> > > Irv
> > >
> > >
> > For Topica's complete suite of email marketing
> > solutions visit:
> > http://www.topica.com/?p=TEXFOOTER
> >
> >
>
>
>

new topic     » goto parent     » topic index » view message » categorize

Search



Quick Links

User menu

Not signed in.

Misc Menu