User Name
Password

Go Back   Planetarion Forums > Non Planetarion Discussions > Programming and Discussion > Hardware and Tech Support
Register FAQ Members List Calendar Arcade Today's Posts

Reply
Thread Tools Display Modes
Unread 6 Jul 2004, 00:41   #1
Androme
☆ ♥ 
 
Androme's Avatar
 
Join Date: Jan 2003
Posts: 3,489
Androme can only hope to improve
Got spyware/a trojan/a worm?

*I've taken the 'time' to carefully reformat this to be compatible with this board's bbcode and I've spaced it out a lot more - it didn't 5 mins to do heh -copyright claimer by the original authour is at the bottom*

What are these grotesque things?
  • Virus - A computer program that can reproduce by changing other programs to include a copy of itself. It is a parasite program, needing another program to survive.
  • Trojan - A trojan is a program that does something undocumented that the programmer intended, but that some users would not approve of if they knew about it. According to some people, a virus is a particular case of a Trojan, namely one which is able to spread to other programs. According to others, a virus that does not do any deliberate damage is not a Trojan. Finally, despite the definitions, many people use the term "Trojan" to refer only to *non-replicating* malware, so that the set of Trojans and the set of viruses are disjoint.
  • Spyware - any software that covertly gathers information about a user while he/she navigates the Internet and transmits the information to an individual or company that uses it for marketing or other purposes; also called adware

How do they get on to your system?
  • You may have opened an attachment from someone you don't know or even someone you do know which contains some executable code within it.
  • There are flaws in one of the most major browsers out there known as Internet Explorer which hackers regularly exploit. It's vital to keep this up to date.
  • You may have gone onto a P2P file sharing program and downloaded a file which looked legitimate but in fact contained executable code as well as music for example.

Viruses/Trojans - How to keep clean
  • Don't open email attachments! This is the most common way that viruses and trojans are getting into users systems. If you don't know who the email is from it's simple. Do NOT open it. Also if you're not expecting an email off a friend especially with an attachment chances are they have got a virus and the virus has forwarded itself to you within the email from your friend.
  • Be careful what you download and where it's from! Many of the large P2P networks are now full of viruses and trojans. If you're stupid enough to download stuff off there, then chances are you're stupid enough to get the virus trojan too. It's simple and easy. Just go out and buy your music,software,games, movies You'll be much safer in the long run! (Note to RIAA: you can pay me later )
  • You should have a virus checker on your system at ALL times and keep it up to date and regularly scan There are now so many trojans and viruses out there it was inevitable that the software makers would have a huge market of innocent users to cash in on. There are lots and lots of virus scanners and trojan removers out there but which one is for you. That is not for me to decided and I won't sit down here and give my (possibly biased) personal opinion on each and every one of them but there is one virus scanner which stands out from the rest. Simply because it's a good free solution for those that don't want to spend the money on protecting themselves. This virus canner is AVG Anti-virus FREE EDITION. The definitions are updated on a daily basis and it's a good tool for helping you get rid of those nasty evil viruses
  • Get a firewall There's no excuse if you don't have one of these. Don't believe all this hype about microsofts firewall as I guarentee things will still manage to slip throug your system. You need a custom-built solution that is regularly updated. Again like anti-virus programs there are loads of firewalls out there and it's up to you and do the research, read the reviews on the best out there. Again I'm just going to offer you the most popular free solution which is Zone Alarm. It's free and whilst the pro version is far better it'll again provide a first line of defence of things trying to get in. And also things that are are already in trying to get out.
  • Just use your common sense You don't have to be a computer genius when browsing online. Don't go on silly sites which host warez, porn and other stuff as chances are they have viruses on their sites too. Just keep mainstream, enjoy the internet and have fun !

Spyware/Adware/Browser Hijackers

Now with spyware you need to take a different approach. You can follow the tips above but we also need to outline some other tips to keep yourself clean. The main way that these pesty things get into your system is via vulnrabilities in your browser. Their aim is to take your credit card details, log your keystrokes, take over your homepage, bombar you with popups.

Now a lot of people claim the cause of the huge rise in spyware is due to the flaws and vulnrabilities in internet explorer (IE). I myself have been using internet explorer for quite some time until about 6 months ago when I decided to migrate to another browser. The main reason for this was due to it's failure to follow standards and keep itself up to date. I wanted something new, fresh with new features and plugins. My answer was a great product released by the Mozilla foundation called Firefox. For me this is my favorite browser out right now. I just can't heap enough praise on it but I'm not going to bore you going on about it. I'm going to explain the security reasons why you should move away from IE and to an alternative browser and if you insist on carrying on to use IE then how to make it a little more secure.

The great browser war

Do you want to carry on using IE but make it a little more secure?

Go here and take a look at the great tutorial on how to beef up IEs security settings. The problem with IE is most of the security settings are disable by default and your average joe bloggs who knows little about computers is not going to know anything about tweaking software settings, let alone care about it. So what we need to do is heighten the security of it. Follow the instructions in the tutorial and you should be just a little bit more secure. However due to the regular exploits being discovered in IE and windows almost every month, unless Microsoft starts upgrading its software and adding functionality and more security then you're just going to be at constant risk if you don't update your security settings.

Also another important point to tweaking your security settings is to update your windows as often as possible. There's an option to enable auto-updated but I do it manually every day when I get on just to be safe. To go to windows update navigate to your start menu and go to 'Programs > Windows Update'. (It's in the first, far left column almost right at the top)

Want to move away from IE and step into the light?

The alternative browsers that are around right now are superb. We have new features, plugins, skins and lots more. There's several right now but two which stand out for me are:
  • Firefox - This browser is my favorite. Yes I'm biased, yes I love it and yes I will stand by it besides anybody elses genuine arguements against it It follows web standards, is upgraded regularly, has plugins, skins and renders pages much quickly compared to IE. Oh hold on. I forgot. It's FREE!
  • Opera - Another great browser. I've used it once and it worked quite nicely. A lot of people rave about this browser also just like they do about firefox. I'll leave that one up to you The only obvious disadvantage is you have to pay a fee to remove a little ad banner in the top of the browser. But saying that after using it for a couple of weeks it's no inconvenience of annoyance at all and it's definately worth giving a go!
You've got spyware already huh?

Ok well there are literaly hundreds of spyware/adware removers out there. Some are free, some are paid. Just be careful of what you're using and if you're reading reviews of them make sure they are coming from an unbiased source.

Freebies:

Ad-Aware - Probably the most popular free one out. They update their definitions on a regular basis and have an active community base for trying to resolve problems.

Spybot, Search & Destroy - Another hugely popular free one. I will warn you now though I've been using it for about 2 months and they haven't updated the definitions once. It's good and will clean up quite a lot of the clutter on your system and also prevent it from ever getting on your system but unless it keeps up to date with the latest spyware technologies it'll be of little use in the next year or so.

Paid or Free Trial:

SpySweeper - This one only recently came into my light but boy oh boy it does the job. It can run in the background, protect your memory and monitor cookies. Also it regularly updates its definitions and the scan finds a lot of stuff which the others will not.

PestPatrol - This one's great too. Ignore the horrific interface and navigation. It does the trick and finds so much horrible things on your PC. I've found all sorts from decompilers to tracking cookies. It's a great tool to have.

Still got spyware in IE?

Ok well this is not a foolproof method and you will need help unless you're a genius and can follow the jargon presented in the range of tutorials for this software. It's called HijackThis and was developed by a programmer not too long ago. It basically list the component parts of the registry used by legitimate programmers and also hijackers. It'll produce a log but I must urge you do not do anything with this program other than look at it unless you know what you're doing. I will not be held responsible if you use this program and end up with a mucked up PC. Now what I do reccomend you do is just generate your log file and pop on over to ComputerCops and they have a dedicated forum where users can post their HijackThis logs and have an expert analyse it and tell you what to edit/delete. Yet again I must stress this is something which should be done only if you know what you're doing and the people over at ComputerCops and myself cannot be held responsible for any accidental damage to your computer that you may cause.

That's about it

I hope you enjoyed reading the article and if you have any further resources which you reccomend then send me a private message with the link and I'll think about adding it to the list. Please only reccomend the software if you have personal experience with it.

Copyright/Disclaimer

This tutorial was written by Dean Clatworthy and is copyrighted material. It may not be posted on any forum or website without my written consent. If you wish to post this on your website then please contact me and I'll let you know if you can use it. Anyone found re-distributing, translating or modifying this article without permission will be reported to their appropriate host and internet service provider.

Also I will not be held responsible for any damaged caused to your PC as a result of information provided in this article. All software, changes to your sytem you do at your own risk.
__________________
R3: LegioN (came #32) || R4: BlueTuba
R5: WolfPack Order || R6: Wolfpack
R7: Fury
----------retired-------
R52-R55: Apprime
R56-R57: FaceLess
R58-60: Apprime/Ultores

Last edited by Androme; 1 Sep 2004 at 17:55.
Androme is offline   Reply With Quote
Unread 6 Jul 2004, 12:51   #2
Spaced
[WP]
 
Join Date: Apr 2004
Location: England
Posts: 44
Spaced is an unknown quantity at this point
Re: Got spyware/a trojan/a worm?

I always believed the definition of a trojan to be a malicious program disguised as a legitimate one (hence the originallity of the name) that allows a user to illegally gain access to anothers computer.
__________________
Spaced ~ PA n00b R2 - R11

Ex [WP] Peon
Ex [NoS] Officer
Ex [Coven] Officer
Ex [=V=] Whore
Ex [Ely] Peon

Nom de Dieu de putain de bordel de merde de saloperie de connard d'enculé de ta mère! You see, it's like wiping your arse with silk, I love it.
Spaced is offline   Reply With Quote
Unread 6 Jul 2004, 16:33   #3
Vaio
Heh, Leeds !
 
Vaio's Avatar
 
Join Date: Apr 2000
Location: In The Redfern
Posts: 3,790
Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Vaio has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.
Re: Got spyware/a trojan/a worm?

You read this yet Lokken ?

~Vaio~
__________________
The George Harrison of BlueTuba

Yes, I know he is dead !
Vaio is offline   Reply With Quote
Unread 8 Jul 2004, 23:13   #4
Flayer
Wankoverable
 
Flayer's Avatar
 
Join Date: Apr 2002
Location: wherever I am
Posts: 726
Flayer is a glorious beacon of lightFlayer is a glorious beacon of lightFlayer is a glorious beacon of lightFlayer is a glorious beacon of lightFlayer is a glorious beacon of lightFlayer is a glorious beacon of light
Re: Got spyware/a trojan/a worm?

spyware = adware ??

I thought adware was software which carries ads, like opera!
__________________
Don't worry, life is too long.
Flayer is offline   Reply With Quote
Unread 9 Jul 2004, 00:00   #5
flapjack
crashed computer
 
Join Date: Jan 2001
Posts: 2,257
flapjack is infamous around these parts
Re: Got spyware/a trojan/a worm?

spyware != adware.
Adware shows you ads, like the name shows, and is normally installed after asking you and always with a legitimate program, like Opera.
Spyware == the spawn of the devil, it shows up everywhere, whenever you don't want it and it's on your computer before you know it.
Adware is normal, I don't like it, but I can live with it
Spyware should be banned to the netherregions of whatever religion you believe in to never be let out again.

okay, did you follow me there??
__________________
IRC quotes:
<Walrus> Let's all poke him next time he appears.
<Heiro> I think that is wise, Master Walrus

<Gryffin> ungrateful wretches
<Gryffin> they should be here!
<Gryffin> so I can grace them with my presence
flapjack is offline   Reply With Quote
Unread 10 Jul 2004, 02:08   #6
sayonara
Shai Halud
 
sayonara's Avatar
 
Join Date: Aug 2001
Location: Sunny Leeds \o/
Posts: 2,127
sayonara is just really nicesayonara is just really nicesayonara is just really nicesayonara is just really nicesayonara is just really nice
Re: Got spyware/a trojan/a worm?

Quote:
Originally Posted by Androme2
Spybot, Search & Destroy - Another hugely popular free one. I will warn you now though I've been using it for about 2 months and they haven't updated the definitions once.
Latest definition update was 16th June.
__________________
meow
sayonara is offline   Reply With Quote
Unread 10 Jul 2004, 23:13   #7
Leshy
Mr. Blobby
 
Leshy's Avatar
 
Join Date: Nov 2000
Location: Belgium
Posts: 8,271
Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.Leshy has ascended to a higher existance and no longer needs rep points to prove the size of his e-penis.
Re: Got spyware/a trojan/a worm?

Two points in addition to what has already been said:
  • Perhaps a bit of a nitpick, but a virus does not need another program to survive. It is simply a piece of code that replicates itself when executed; the fact that it generally infects files is so it is less easily noticed, and because people tend not to want to run bugbear.exe or iloveyou.com manually.
  • You cannot get a virus from a music file, or for that matter an image file. These type of files contain data that is being read by another program, none of the code inside the file is actually executed, making these files useless for carrying viruses. The files to look out for are .exe, .com, .bat, .scr and .msi which all contain actually executable code. Note that virus creators may give their file a double extension such as prettygirl.jpg.exe which may confuse users who have extensions turned off and can mistake it for an actual image file.
__________________
http://www.leshy.net
Leshy is offline   Reply With Quote
Reply



Forum Jump


All times are GMT +1. The time now is 21:46.


Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2018