internet settings being changed
Results 1 to 9 of 9

Thread: internet settings being changed

  1. #1
    Junior Member
    Join Date
    Sep 2004
    Posts
    11

    internet settings being changed

    I have a friend who has xp home
    I set his connection up and added Kerio and AVG.The machine is using dial-up and not very often online.
    After about 2 months I checked his connection and could not get on.In his internet options settings I noticed
    (1) that it was using a proxy server ??
    (2) dial whenever a network connection is not present.its a standalone pc.
    I had turned off his server "service" and this was turned on.
    Does he need to be concerned ??

  2. #2
    Senior Member
    Join Date
    Mar 2002
    Posts
    314
    What connection is it attempting to dial?
    Dial whenever a network connection is not present is basically telling the machine to try and connect to the internet (network).

    Change the settings back, keep an eye on it and see if it happens again, if so....when and what was being done just before the settings changed?
    Faqt


    If you want to make God laugh....make plans.

  3. #3
    They call me the Hunted foxyloxley's Avatar
    Join Date
    Nov 2003
    Location
    3rd Rock from Sun
    Posts
    2,528
    Could you post your 'friends' security routine ?

    ie :
    what apps do they have / use ? - adaware / spybot / cwshredder etc.
    when do they use them ?
    What level of expertise are we looking at ? - you AND friend
    Has there been a history of this type of problem ?
    Does YOUR system suffer ?

    add whatever else you feel I've missed

    AND if there is NO security routine in place ..................

    Might I suggest reading THIS

    I'm not saying there IS anything amiss, BUT :
    if you follow the above link, and abide by it, it WILL enable you to know that the problem could well be the 'nut' that holds the mouse

    [edit]
    A bit cruel as it is your friends PC :
    Set him as a power user, with password required to logon.
    Set yourself as admin, with STRONG password, hopefully friend will not be tech savvy enough to realise that physical access is THE tool of choice, and that he doesn't have ERD Commander around .............

    If this stops the problem ..............................................................















    Introduce your friend to a LART
    55 - I'm fiftyfeckinfive and STILL no wiser,
    OLDER yes
    Beware of Geeks bearing GIF's
    come and waste the day :P at The Taz Zone

  4. #4
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    "Does he need to be concerned ??"

    Most definitly! this needs immediate looking into...his machine could be dialing some offshore phone number which is billing him @ 50 bucks per minuit. there's an awful lot of "dialers" out there.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  5. #5
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,178
    Might I recommend that he gets these, updates them and runs them in SAFE MODE :

    EWIDO

    http://www.ewido.net/en/

    A-Squared

    http://www.emisoft.com/en/software/free/

    Both of them are free and the second one is a specialist app for detecting trojans and diallers.

    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  6. #6
    Junior Member
    Join Date
    Sep 2004
    Posts
    11
    My friend is a novice user and rarely online.
    Ad-aware is installed but ??
    I went to grc before and was stealthed and no important ports open.
    AVG is on auto
    Kerio is still using default settings but still chatters !
    I used black vipers services guide.
    Have not had this problem before and he hasnt complained of not being
    able to do what he does,I think he is usually at secure sites.
    I will look a bit closer tommorrow and get back
    Thank you all for your response

  7. #7
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,178
    Hi meenas

    Please use the applications that I have suggested
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  8. #8
    The Doctor Und3ertak3r's Avatar
    Join Date
    Apr 2002
    Posts
    2,744
    HAd a Customer with a problem like this.. except the Mail settings would be changed as well..
    the upshot.. had Netsky.p and Agobot Removed these to suckers and setup a Smoothy box.

    Netsky was email virus, and agobot was an internet worm, it got through inspite of dopy GRC.COM's shields up saying ALL ports were stealth..


    BTW: Smoothy = Smoothwall express
    "Consumer technology now exceeds the average persons ability to comprehend how to use it..give up hope of them being able to understand how it works." - Me http://www.cybercrypt.co.nr

  9. #9
    Junior Member
    Join Date
    Sep 2004
    Posts
    11
    Hi to all
    Well my friend really is a novice,after an hour or two
    d/loading those progs nihil suggested,and thanks ,Ive now got
    them on my own machine.I asked him if he was happy with his PC
    and he replied "well,yes it seems to be faster since the isp
    installed a speed booster,yes it does use a proxy and yes the settings
    were changed back,but not the Server service.There was
    nothing found out of place by those progs so all is well.
    Thanks for the advise though.
    you guys are legends.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides