Re: system clock looses time

From: Tim Holman \(MVP - Security\) (tim_holman_at_hotmail.com)
Date: 10/14/04


Date: Thu, 14 Oct 2004 11:36:55 +0100

Weird... there's not much hacking benefit in changing someone's system
time - there are far more fun things to do...
I'd give it a spring clean just in case though -

1) Run a full Stinger scan in Safe Mode - http://vil.nai.com/vil/stinger/
2) Install and run LavaSoft AdAware -
http://www.lavasoftusa.com/support/download/
3) Download and run latest version of HijackThis (HJT)
http://www.tomcoyote.org/hjt/
4) Post the log at http://www.hijackthis.de/index.php?langselect=english
5) Run MSBA - http://www.microsoft.com/technet/security/tools/mbsahome.mspx
& take appropriate patching action

Then...

1) Ensure WindowsUpdate is set to update your system
2) Download a pop-up blocker - eg toolbar.google.com
3) Install Lavasoft AdAware and run regular scans, or just leave it and
have it handy for when problems start recurring.
4) Keep your AV software up to date - daily updates recommended
5) Enable Internet Connection Firewall, or use ZoneAlarm if you don't use
XP
6) Stay vigilant. Don't bother opening non-work related email attachments,
or install an on-access virus scanner so that it doesn't matter if you do.
7) Look at a host IPS - eg www.prevx.com to cover your machine between when
a virus hits the wild and when a patch is finally released that fixes it.
Average time is roughly 6 days.

"Gene-L" <GeneL@discussions.microsoft.com> wrote in message
news:3D8C2FB6-64AB-4AAA-AF9F-60F5D331B521@microsoft.com...
>
>
> "Lanwench [MVP - Exchange]" wrote:
>
>> Gene-L wrote:
>> > This system looses three hours (exactly ) once or twice a week. It
>> > seems if someone from the West coast is hacking it, I live on the
>> > East coast. I have Norton system works, firewall enabled, there is
>> > even a fax machine on the same line that answers on the first ring.
>> > How can i find out if someone is getting into my computer.
>> > I haven't found anything messed up or damaged, so I dont know what is
>> > happening I'm just guessing.
>> >
>> > Gene-L
>>
>> What's your OS version?
>> What's open inbound in your firewall?
>> Does your time zone get changed?
>> Fully patched via Windows Update?
>> Run a full antivirus scan with updated pattern files?
>>
>>Thanks for the reply.
>>Windows XP Pro with service pack 2 installed.
> I don't know What's open inbound in my firewall.
> The time zone does not get changed.
> windows updade runs once every week.
> The Nortion gets updated every week and runs a full system scan.
>
>



Relevant Pages

  • Re: Startup programs
    ... > If you don't wish to follow all of the advice immediately, ... I will assume a "Windows" operating system is what ... If there was more than one, install ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Latest Update Wreaked Havok - Cannot Restore
    ... track of what you install in order to be able to uninstall it. ... been diligent with your critical updates, ... Windows Update ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: partitioned hardrive and installing XP Pro
    ... the clean install method is the best by far... ... of contacting the Internet UNTIL you have activated the Windows XP ... download/instyall all critical updates. ... FIREWALL ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Service Pack 1 & 2
    ... but enable to install because of service pack 2. ... >> I recently reinstalled Windows XP home on a new hard disk because the ... >> I tried to install service pack 1 but was rejected from doing so. ... > Why you should use a computer firewall.. ...
    (microsoft.public.windowsupdate)
  • Re: How do I get the Windows Update icon to stop notifying me of SP2?
    ... If you don't wish to follow all of the advice immediately, ... using Windows XP "prettifications". ... If there was more than one, install them back ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsupdate)

Quantcast