Re: mIRC and DameWare
From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 11/13/02
- Next message: Greg: "Re: VPN Authentication by A.D."
- Previous message: Mike ziino: "mIRC and DameWare"
- In reply to: Mike ziino: "mIRC and DameWare"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <levinson_k@excite.com> Date: Wed, 13 Nov 2002 17:56:20 -0500
"Mike ziino" <mikeziino@attbi.com> wrote in message
news:f84601c28b64$7a3688e0$37ef2ecf@TKMSFTNGXA13...
> My computer seems to have downloaded and installed
> Dameware Remote System Management Software and also a mIRC
> program. Is there a way to remove this software. It also
> runs ascript in my SECEDIT.EXE file. Any info is
> appreciated.
You've been hacked or infected with a mIRC worm that installed an IRC trojan
on your computer. Any hacker could have connected to your computer and
installed or done any number of things to your computer. Because of the
difficulty of detecting all this stuff, you may want to consider formatting
and reinstalling Windows and all other programs.
If you choose to try your best to re-secure your computer manually, I would
first recommend an antivirus program like Norton or www.grisoft.com [free]
that is configured to download updates daily, an anti-trojan scanner such as
www.pestpatrol.com, vision from www.foundstone.com/knowledge [free], and the
free file integrity checker from www.gfi.com [full URL is in one of the
links below]. Also Startup Cop which can be found by searching
www.google.com or at the links below.
After that, you can use the SECEDIT command or MMC, Group Policy snapin to
restore the two or three default group policy security templates one by one.
You also really really need a firewall... www.sygate.com and others are
free, so there's no excuse for not running one of those either. You could
probably also use more frequent visits to www.windowsupdate.com to receive
security patches for your computer [like monthly].
More information:
http://securityadmin.info/faq.htm#4.10
http://securityadmin.info/faq.htm#hacked
http://securityadmin.info/faq.htm#re-secure
http://securityadmin.info/faq.htm#harden
http://securityadmin.info/faq.htm#startup
http://securityadmin.info/faq.htm#firewall
http://securityadmin.info/faq.htm#virus
- Next message: Greg: "Re: VPN Authentication by A.D."
- Previous message: Mike ziino: "mIRC and DameWare"
- In reply to: Mike ziino: "mIRC and DameWare"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
