Re: AdAware, SpyBot S &D, etc. + leave PC connected to Internet

From: curious (heyimjustcurious_at_yahoo.com)
Date: 01/30/04 

Date: 30 Jan 2004 00:47:03 -0800

yosponge@yahoo.com (sponge) wrote in message news:<8d76ec03.0401291723.741ccb03@posting.google.com>...
> On 29 Jan 2004 15:37:30 -0800, heyimjustcurious@yahoo.com (curious)
> wrote:
>
> >Just after I ran AdAware and reomoved 80 files and 2 registry, I ran
> >AdaWare again. It's runing now that with a statement that 4 files
> >identified, i.e 4 objects found. Is that a *normal* behavior? Or am I
> >not doing soemthign right? Does it have somehting to dow the Firewall
> >not workign efficiently?
>
> You didn't say *what* it found. Odds are, it probably found some
> spyware, but they both also identify and remove cookies associated
> with spyware services and adsites, the latter of which can be worse
> than spyware itself. Just about any non-Internet Explorer browser
> will allow you to delete cookies on exit, so cookies are never saved
> to the disk.

 I plan to change to non IE browser after i egt SyGate set up
preperly. (I didn't know that other browswer qould nto save those
cookies.) It's ridiculous that the cookies get saved the way they are.

>
> >How often do I run these spy ware? Of course, I will be online a lot
> >as I am trying to learn many things....
>
> If you use Internet Explorer or frequently download and software,
> daily at least. If not, mayby once a week is fine.

Thanks.

>
> >Since I have Sygate installed and turned on (though 4 ports are still
> >open when I did scanning using Stealth scan, Trojan scan and 3 with
> >TCP sca while UDP scan couldn't be performed), is it OK to leave my
> PC
> >connected to Internet, say 24 hours?
>
> Really, everything should come up Stealth or at least Closed. If you
> have 4 ports open, and you're not running a server, then there's a
> problem.
 
 I thought so and I was concern.

> What ports are open?

Ports 21, 25, 80, 1307 are 'OPEN' when Qucik Scan and Stealth Scan
were performed.

Ports 21, 25, 80 for Trojan Scan.

Ports 21, 25, 80 for TCP scan. TCP scan seemed to have stopped at port
1024.

> If it's any of the NetBIOS ports
> (137-139), or RPC ports (1025, 135, for example) then create ruels
> immediately to close them.

 TCP scan seemed to have stopped at port 1024. SO I gueess it didn't
check for port 1025.
 
 I have also posted the results of scans in the thread "help with
SyGate needed " in this ng the same day.

> I would also consider investing $60 and by
> a firewall/router, but don't give up personal firewalls like sygate -
> routers do absolutely zero as far as preventing outbound connection
> attempts.
 
 Would you recommend a name. I don't mine the cost. I want to make
sure about the secuirty.

>
> >Or is it better to disconnect my PC from the modem (to Internet) when
> >not using it? Just that I have Windows Update scheduled everyday and
> >Norton Anti-virus scheduled everyweek.
>
> Since I assume you are not running a server,

 No I am not.

> I'd disconnect it
> whenever it's not in use. You generally do not ISP software (which
> often contains spyware and other junk) to connect to the net; if you
> have a high-speed connection, use IPCONFIG /RELEASE to disconnect and
> IPCONFIG /RENEW to connect.

I have highspeed (comcast). I need to learn how to disconnect and
connect as you suggested above. IPCONFIG /RELEASE and IPCONFIG /RENEW
 the commands I need to use for disconnecting and reconnecting? I
shall try immediately.

> You generally have to run this from a DOS
> window,

In my case, command prompt. I have XP prof.

> You can create shortcuts and place them wherever you want.

> Windows Update and Norton LiveUpdate are of no consequence; if they
> cannot connect to the net at a certain time, they will wait until a
> connection IS available.

Well..Norton LiveUpdate has been doing that, i.e prompting me to
download whenever i connect to internet but Windows Update hasn't been
doing that since I had my PC disconnected from internet. Something
wrong?

> If you mean to let Norton auto-scan for
> virii, you can leave the computer running as long as you like by
> following the aforementioned disconnect procedure.

Thanks for all the tips. It would be much more efficient if I can let
the Norton Virus scan done through schedule tasks.

>
> Sponge
> Sponge's Secure Solutions
> www.geocities.com/yosponge
> My new email: yosponge2 att yahoo dott com

Relevant Pages

  • Re: Software Firewalls Question
    ... "firewalls" do not have this feature. ... you have some spyware or a trojan on there already. ... spyware (and, no doubt, trojans) can infect via this route. ... only cookies that get sent back to the originating server (or Reject ...
    (comp.security.firewalls)
  • PC-WORLD responds on their use of "Double-click"
    ... please be assured PCWorld.com never uses spyware. ... Some ad control software alerts about the cookies on PCWorld.com because ... Some ad control software may also misreport HitBox cookies. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: PC-WORLD responds on their use of "Double-click"
    ... please be assured PCWorld.com never uses spyware. ... >Some ad control software alerts about the cookies on ... >control software erroneously reports all cookies as bad. ... >Some ad control software may also misreport HitBox ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Should I clean out cookies?
    ... Some cookies hold information that can make browsing site ... I would first suggest you start by doing a virus scan with up to date ... then scan for and removing any installed spyware. ... After installing ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: SP2 not letting me start up
    ... My guess is that it's a remaining trace of spyware that no spyware-removal ... Should I phisycaly disconnect it and try again? ... Could the problem be related to my Network Adaptor? ... >> Noam Nelke, Israel. ...
    (microsoft.public.windowsupdate)