Topic: What I have learned since getting a new PC, and it scares me

[Clark Kent]

Not too long ago I posted that I had gotten a new Dell Inspiron 9300 after an extended periodalmost solely as a mac user.  I was spoiled by my mac usage, as I never ran into any viruses, spyware, etc etc, since it just simply doesn't exist for the mac. 
So anyway, I got my new dell, set everything up, and set it up on my wireless network.  I have taken it to the following places on the web, and no where else:
the mozilla firefox  download site
Yahoo!
AOL
Apple.com
Dynaverse.net
A singapore radio station

I have contracted several viruses, and inumerable pups and spyware packages- most of them when the computer didn't even have explorer or firefox loaded.  That's insane that I take it no where on the web, don't do anything bad with it, but it is still targeted.  There is something seriously wrong with that.

[IAF Lyrkiller]

Yes it is insane. nowadays its is almost impoosible to surf the web w/o something getting inside the machine.

that is why i have the following installed.

Norton Security 2005
ZeroSpyware

and both are fully updated.

of course, that is my preference.

[Bonk]

1) Its a Dell (spyware preloaded for ya )
2) You used Yahoo.
3) You used AOL. (the horror!)

I have none of these problems with popups, viruses and and spyware on my PC and I only run a monthly virus and spyware scan that usually only turns up the odd item like Alexa...

Where did you obtain this information, that you have all these viruses and spyware? A lot of such messages are bogus. Many people get sucked in by popups that look like windows system messages but are not. To avoid this, install firefox and set it to be the default webbrowser. Also, disable the messenger service with the Services utility under Administrative tools under the Control Panel.

If your machine came preloaded with windows from Dell, then wipe the partition and reinstall XP professionsal from a retail distribution. God only knows what Dell has done to the OEM version that shipped with the machine.

Do not install any spyware software other then Ad-Aware, Spybot Search & Destroy and the MS Anti-Spyware beta.

Dell = Crap  (my considered opinion)

[prometheus]

First thing to do when you buy a new computer?  Format the hard disk and reinstall everything yourself...   I wouldn't dream of letting Service pack 2 anywhere near my Operating System, and don't use XP at all except when  I really have to... 

I use Avast!  Anti Virus (Free) and Sygate Personal Firewall to keep my machine secure, and System Mechanic to keep it spyware free...  Generally with no problems... 

[Bonk]

Why no XP SP2 prometheus? Its fine with my system...

[E_Look]

I think Pestalence posted this many times some time ago, that only the automatic update version of SP2 is bugged.  If you navigate over to www.microsoft.com and search for the network admin version on its website, it will work with all computers.  Ignore the brushback pitch on the same page that says only network guys should use it.  We can all use it.

I had a fear of SP2 for a little while, until Pestalence's post.

If you want to check for yourself, search these forums for Pestalance's posts on SP2; it should be less than a year ago, if I recall correctly (which I may not, by the way).

[Dracho]

I use McAfee and Adware Filter (Formerly Spyware Assassin).

[Bonk]

I think Pestalence posted this many times some time ago, that only the automatic update version of SP2 is bugged.  If you navigate over to www.microsoft.com and search for the network admin version on its website, it will work with all computers.  Ignore the brushback pitch on the same page that says only network guys should use it.  We can all use it.

I had a fear of SP2 for a little while, until Pestalence's post.

If you want to check for yourself, search these forums for Pestalance's posts on SP2; it should be less than a year ago, if I recall correctly (which I may not, by the way).

Ah right, the full version is the only one I've ever used... never had a problem with it.

http://www.microsoft.com/downloads/details.aspx?FamilyID=049c9dbe-3b8e-4f30-8245-9e368d3cdb5a&displaylang=en

[Sethan]

I run Win98SE, and NAV.  Among other things, I clean viruses off other peoples' machines on my home network.

I cannot recall the last time I had a virus.  I know it was several years ago.

Same goes for spyware/adware.

No Yahoo, no AOL - in fact, no chat clients are on this machine.

[prometheus]

Why no XP SP2 prometheus? Its fine with my system...

As I mentioned earlier in the thread, my copy of XP build 2600 was deactivated and I've been using a hacked one...  SP2 didn't seem to like it, and it seemed to make my computer a lot more pernickety about lisencing agreements...

[toasty0]

I believe this is your culprit, Clark.

How to prevent Windows Messenger from running on a Windows XP-based computer

[Clark Kent]

I believe this is your culprit, Clark.

How to prevent Windows Messenger from running on a Windows XP-based computer

So let me get this straight- windows automatically installs a virus/spyware magnet and leaves no way of getting rid of it is to dig deep into the OS and cut it out?  That's messed up.

[E_Look]

CK & Toast-

you guys should request a sticky for this thread; lots of people need to know this.

[Bonk]

I believe this is your culprit, Clark.

How to prevent Windows Messenger from running on a Windows XP-based computer

So let me get this straight- windows automatically installs a virus/spyware magnet and leaves no way of getting rid of it is to dig deep into the OS and cut it out?  That's messed up.

The Messenger service can do nothing but send and accept pop-up messages. It cannot install viruses or spyware. You might however be identified as a target for spyware etc if it is found running on your machine. As it would indicate that you have not updated in over a year... XP SP2 disables it by default. So Dell must have shipped you a PC without SP2... Build your own or go HP...Blame Dell, not Microsoft.

E_Look, I dont think it is worth stickying this thread for the info on how to disable the windows Messenger service, as the thread is not titled appropriately to draw attention for that and XP SP2 is like a year old now I think (or more is it?) and handles this anyway...

But if you really think it is necessary I'll create a new thread titled appropriately and sticky it.

Moral of the story: Dell still sucks and update, update, update...

edit: yup, over a year old...:
http://www.dynaverse.net/forum/index.php/topic,163345015.0.html

[Sarek]

Interesting.  When I built my PC I installed an OEM version of XP Pro w/SP2 yet it was enabled.  It's a little confusing in that you disable it by clicking on "Enable", but I'm not surprised since it's from the folks who decided you should click on "Start" when you want to shutdown. 

[Mr_Tricorder]

I recently did a system restore on my friend's HP Pavillion laptop.  I made the mistake of not disconnecting it from the network connection in her dorm room before I did this.  After I restored everything to the way it was a couple of years ago, I tried installing updates while at the same time Windows was filling itself with all kinds of crap.  I had to do another system restore, this time physically disconecting the cable, got on my computer, and downloaded service pack 2, antivirus software, spyware removal programs, and Firefox on my computer, put them on a flash drive, and installed them on her laptop before reconnecting the computer to the internet.

By the way, she and I are now primarily Linux users.

[E_Look]

Interesting.  When I built my PC I installed an OEM version of XP Pro w/SP2 yet it was enabled.  It's a little confusing in that you disable it by clicking on "Enable", but I'm not surprised since it's from the folks who decided you should click on "Start" when you want to shutdown. 

Yes, I noticed the same things.  It's as if they really DON'T want you to disable their precious little tattletale.

[Bonk]

Ah, I could be wrong about SP2 disabilng the messenger service, I thought I remembered it doing so. Sorry if I misled.

Myself, I use Knoppix when using other peoples machines so I can connect securely to various servers. I've grown quite fond of Knoppix. My own XP pro install is quite secure though and has been for some time.

Also, I am a rabid fan of QNX and prefer it or FreeBSD for server applications.

[Mr_Tricorder]

I like both Knoppix and Slax as far as live CD linux distros are concerned.  I installed Xandros 3 Open Circulation Edition on my second hard drive a while ago and used it for about a week to get acquainted with Linux before moving to a less Windows-like distro, and I was less than impressed with Crossover Office since it had a hard time running several of my favorite Windows apps.  I am currently running Vector Linux SOHO 5.0 and absolutely love it.  I made my friend a Slax CD so she could see what Linux has to offer and she was very impressed.  She could do more with the Slax live CD than she could do with her current Windows XP, she liked the way it looked better, and she was astounded that it was completely free.  I installed Mandriva Linux 2005 Limited Edition on my friend's laptop for her after Windows started screwing up again.  Both of our computers are set up for dual boot.

[prometheus]

I'm very fond of the SUSE distrubtuion of Linux...  I've yet to have it crash on me, the old system restart, the bane of the life of the Windows System Administrator is not an issue with it, it picks up most of my hardware without having to trawl the net for drivers...   It looks good, feels good...   I think it is every bit as good as XP, and infinitely cheaper and not fettered with idiotic lisence restricitons and deactivations...

[IAF Lyrkiller]

Ah, I could be wrong about SP2 disabilng the messenger service, I thought I remembered it doing so. Sorry if I misled.

Myself, I use Knoppix when using other peoples machines so I can connect securely to various servers. I've grown quite fond of Knoppix. My own XP pro install is quite secure though and has been for some time.

Also, I am a rabid fan of QNX and prefer it or FreeBSD for server applications.

Bonk you are wrong. SP2 does disable Messenger service. I know because I have windows w/ SP2 intregrated into the OS. And also several other services are disabled.

[Bonk]

I thought so. Should never second-guess myself. 

[toasty0]

If that is the case then Clark is getting himself in trouble because of what he's been downloading...

[Commander Maxillius]

CK, I don't know if it's a feasible idea, but have you considered selling the Dell and getting an iBook with the cash?

[Clark Kent]

CK, I don't know if it's a feasible idea, but have you considered selling the Dell and getting an iBook with the cash?

ALready have an iBook, and I use it primarily instead of the new dell.  I didn't have to pay for the Dell, that's why I have it.

[Commander Maxillius]

CK, I don't know if it's a feasible idea, but have you considered selling the Dell and getting an iBook with the cash?

ALready have an iBook, and I use it primarily instead of the new dell.  I didn't have to pay for the Dell, that's why I have it.

Aye.  As an aside, I have a Toshiba laptop that seems to be nearly immune to virii and hackware.  I can't understand how that thing can function with only the Windows firewall when my sister's Compaq 5000 needs only to connect to the network to get every virus and hackware ever created.  It's very odd indeed.

[E_Look]

It's not the machine so much as the person using it.

[Clark Kent]

It's not the machine so much as the person using it.

And if this person has all the anti virus, firewall etc etc etc crap running all the time and it doesn't do much good, and on top of that all never goes anywhere on the internet with that machine, what does that say?

[E_Look]

If that's the case, then it might have been just a few accidentally hit random sites or unthinkingly opened e-mails.  Junk e-mail is horrible.  And then, once they're in and the antivirus or antispyware programs are not updated, then stuff will take root, fester, and make a huge mess.

[Clark Kent]

Nope, I have take this machine to less that 15 web sites as of now and none of them were mistakes.  Have not read any email from it.  Nope, this guy is a virgin as they get on the net, but it still attracts the crap.

[toasty0]

Nope, I have take this machine to less that 15 web sites as of now and none of them were mistakes.  Have not read any email from it.  Nope, this guy is a virgin as they get on the net, but it still attracts the crap.

Gotta be Voodoo then.

[E_Look]

Voodoo?  Maybe GeForce or Radeon!  Okay.  Sorry.  I know this was lame. 

It just might be that this guy is a normal guy who likes what most people like and visits pages where most people go.  Spammers and virus infectors know this stuff too.

[Commander Maxillius]

stick to the iBook.  seriously, it sounds like your machine is targeted and should only be on firewalled corporate networks

Keep the Dell offline as mush as possible

[E_Look]

Max, targeted?  One solitary computer?

[Commander Maxillius]

Sometimes viruses lock on to specific IP's and you can't shake them off no matter what.  They're like random number generators that always land on 210 or something like that.

There's a number that every machine has but I forgot what it is, and every one is different, maybe it *is* IP, but I'm not sure.

I don't think hackers would target a specific machine unless they knew what was on it, but viruses and hackware and the like are prone to unpredictable behavior, such asa locking on to an IP or range of IPs.

Stranger things have happened.

[E_Look]

I see.  Thanks for the illumination!

Oh, do you mean the MAC address?

[ELITE-Kaos]

Sounds like the MAC address is a target as its a Dell.  I've not come accross anything like this but that dosn't means it isn't out there...  For security I use a hardware firewall and Adaware from Lavasoft, with these I manage to run virus, worm, trojan and intrusion free.

Clarke, if your using a router that lets you mimick a MAC address I suggest checking that it is using the Mac's MAC and not the Dell's that could help, also follow the re-install advice from earlier in the thread (Very good thing to do with any new PC).  You may be hating it now but just think of all those games you'll be able to play online.....  Failing that send the Dell to Apple and tell them they sent you the wrong machine, might work!

[Mr_Tricorder]

... also follow the re-install advice from earlier in the thread (Very good thing to do with any new PC).  ...

If you have to reinstall everything, don't let your computer anywhere near the internet until you have service pack 2 and a working antivirus program installed and running on your computer.  I would also recommend installing Firefox before you connect to the internet also, so the only thing you will ever need IE for is Windows Update.

[Darth Sidious]

If you're on comcast (or any other major broadband provider), if at all possible be behind a router that does NAT.  A cheap linksys from one of the bigbox stores will do.

A reinstall from the restore disk wouldnt be a bad idea - especially if there isnt any data needing to be saved.

While doing the restore from disk - dont be connected to the net unless behind a router-based firewall (again, NAT is your friend).  before going online (if WinXP), turn on the firewall and immediatly do windows update/install all.

if a reinstall isnt an option; try this:

start/run/msconfig.
Go to startup tab, and check to see whats loading at startup.  Check what loads at startup.  If it looks odd, check it out a tasklist.org (not 100% accurate, but a good start)
If something shows up as bad, uncheck it from loading at startup.

Do the same for task manager, except end-task non-needed processes.

If alot of things in msconfig/taskmanager are showing up as trojan/spyware/etc, a reformat/reinstall is probably best, especially if the pc hasnt been used much