March 31st, 2004 01:55 AM
I am a new member here, but my PC has become victim to trojan horse programs SEVERAL times. I just had to pick up my PC after needing to get Windows re-installed after some d*ckhead decided to screw over my computer by deleting a key Windows file.
Anyways, my ISP is Bell Sympatico High-Speed Edition. I connect through an ADSL modem and my IP is changed everytime I connect. Like I have said, this is not the first time I have been attacked by trojans and it is getting very annoying and also costly to pay for repairs.
I have always had Norton AntiVirus 2003 Professional installed and somehow the trojans got past this protection (or maybe someone else in my house executed the trojan server files by accident). So I now have McAfee VirusScan 6.0 Professional installed, which also comes with a built in personal firewall. When I enable the firewall, even though I have allowed full access to the Enternet folder (which contains Sympatico Access Manager) my internet connection is dropped. The Access Manager will also not let me connect to the internet if the firewall is enabled.
I am just wondering if anyone here is using Sympatico High-Speed with a firewall enabled? If so, what firewall are you using? Any help on this matter would be greatly appreciated.
Thanks in advance!!
March 31st, 2004 02:23 AM
I, personally, have had alot of problems directly related to McAfee products. Especially their firewall. It completely crashed a system of mine and I had to do a reformate and re-install to get it working again. Their antivirus programs seem to be ok though.
My suggestion to you would be to uninstall the firewall portion and use a third party firewall. ZoneAlarm, Kerio, and EZArmor all have free firewalls you can download, and they are very good (there are others out there also).
[EDIT] Trojans by the way are usually downloaded by a user on your own computer and a firewall will offer you very little protection to prevent this. what they will do is prevent them from 'phoning home' with potentially damaging information.
\"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, Champagne in one hand - strawberries in the other, body thoroughly used up, totally worn out and screaming WOO HOO - What a Ride!\"
March 31st, 2004 03:04 AM
Head over to www.moosoft.com and download the 30 day trial of "the cleaner"....that should get you cleaned right up. After that, make sure that you don't open attachments or accept files from people that you don't know...and in some cases avoid accepting them from people that you DO know.
It isn't paranoia when you KNOW they're out to get you...
March 31st, 2004 03:58 AM
Are you a P2P fan? Kazaa is the number one when it comes to downloading viruses. Do you have file sharing disabled, or are you sharing anything you shouldn't, I.E. c:? Someone could drop a trojan in that way, but shouldn't be able to execute it.
I've had success with Norton products, firewall and AV, but I always run housecall.trendmicro.com for a double check. I don't have experience with the cleaner, but it gets good marks around here.
These are 2 scanners that will do some penetration testing on your box, and look for live trojans accepting connections.
You're firewall will have logs, and should alert you if someone attempts to connect with a trojan client. With that IP you can use a site or program like magic nettrace
If their is a single IP that is singleing you out over time, then you can use that tool
to find a email you can complain to, like: abuse@"attackersnetwork.com"
Resonse to your next post- I installed Kerio on a winME machine, and although I thought its options and interface were better than any firewall i have dealt with....(norton and zonealarm) and free, it caused major freezage with other progs. Regardless of my problems, its configurability(is that a word ) was incredible and is worth trying.
March 31st, 2004 04:00 AM
March 31st, 2004 04:07 AM
lol Soda_Popinsky. We must have posted at the same time!
Yes, I do use KaZaA and have had MANY encounters with viruses and with this program. This is most likely how the server files are getting installed on my system. I read that trojan servers can be binded to almost any Windows filetype (including .mp3) meaning that they are probably being executed by me not even knowing that they are there.