Re: Ad Ware or Virus holding down ctrl/shift buttons?

From: siljaline (siljaline_at_nospam.com)
Date: 12/09/03 

Date: Mon, 8 Dec 2003 19:53:04 -0500

A "P2P" (peer-to-peer) *like* Kazaa has a device which holds you whole O/S
in a grip, waiting for third-party file requests.

IMO, XP firewall offers no end user rules to create or maintain other than what
to
let "in". A third-party software firewall like Kerio begins with a basic rule
set,
that is to say, it doesn't "know" what applications have permission to "phone
out"
or to receive data from the Net.

This can and is troublesome for most "but" once the user has created a rule set
for legitimate applications to access and receive, much benefit is added with
the
presence of the firewall application.

Running the onboard firewall and a third-party firewall does cause problems.
Both cannot be run in parallel.

Regards, 

-- 
siljaline
MS - MVP Windows IE/OE
______________________
(Reply to group, as return address
is invalid - that we may all benefit)
"Bill Sanderson" <Bill_Sanderson@msn.com.plugh.org> wrote in message
news:%23mPsZkavDHA.2072@TK2MSFTNGP10.phx.gbl...
> Are you running any peer-to-peer sharing programs that might provide a way
> into your system?
>
> I'd advise doing what siljaline and Kent W. England say--use HijackThis for
> diagnostic/repair purposes, and get a firewall up.  Even on XP which has a
> built-in firewall that ALL XP users should be using, you may wish to put up
> a third-party firewall that blocks outgoing traffic, so that you can vet
> that traffic--if there's a suspicion of a trojan in place, looking at
> outgoing traffic can be helpful.
>
> "siljaline" <siljaline@nospam.com> wrote in message
> news:e8kWCQKvDHA.3140@TK2MSFTNGP11.phx.gbl...
> >
> > "Mark Neglay" <negloid@hotmail.com> wrote:
> > > I have contracted some nasty adware or virus that I cannot root out.
> > > I have three computers all using a router to connect to a cable modem.
> > >  A few weeks ago, I was hit with typical signs of adware: homepage
> > > changed, popups on sites that don't have popups, porn and various
> > > scumy "search engines" added to my favorites, etc.
> > >
> > > I checked the other two computers and all three had similar problems.
> > >
> > > Since then, I have installed Spybot and Ad Aware, both of which
> > > detected various files, registry entries, cookies, etc,...  However
> > > they didn't get it all out.  I found everything from Gator to ISTBar
> > > to Memorywatcher.  I have also run several thorough virus checks with
> > > Norton AV as well as Tau something-or-other trojan detector.  Nothing.
> > >
> > > Yet every day, I get new scumware on my computer.  Every time I run Ad
> > > Aware or Spybot, they find several new programs or browser addons
> > > installed.  Do I have a trojan or what?
> > >
> > > Here's one of the most annoying problems: No matter whether I have
> > > just rooted out various spyware programs or not, I cannot stop this
> > > from happening.  If Internet Explorer is open, something is running in
> > > the background that will randomly hold down the shift and ctrl keys, I
> > > assume as a way to override popup blockers, since the one I
> > > had--google, will allow popups if you hold down the ctrl key.  I use
> > > Google to post on Usenet, so I have to type everything you are reading
> > > here in to notepad first, then copy it in to a browser window.  If I
> > > try to compose in a browser, the computer will start randomly
> > > "shifting" and "ctrling", creating various problems.  (ctrl-n is a new
> > > window.  Ctrl-up-or-down-mousewheel goes forward and backward through
> > > browser histroy, etc)
> > >
> > > No, I do not have a keyboard problem.
> > >
> > > Anyone else in my boat?  Any suggestions?
> > >
> > > I *really* don't want to have to f-disk this problem away.
> >
> >
> > Run "Hijack This" - info and download:
> > http://mvps.org/winhelp2002/unwanted.htm
> >
> > Run SpyBot and Ad-aware *often*, just like you would your
> > pre-installed A-V scanner.
> >
> > HTH
> >
> > -- 
> > siljaline
> >
> > MS - MVP Windows IE/OE
> > ______________________
> >
> > (Reply to group, as return address
> > is invalid - that we may all benefit)
> >
> >
>
>
Quantcast