dsmith

Double negative and therefore means the eaxt opposite of what you intended.

Its there to do a very different job - stop attacks from the outisde. If you request a java applet/activex control from a web-site, the PIX will correctly let you download it. If it turns out to be mailicious its not the PIX's fault.

What you need is Anti-virus S/W aswell. This will scan webages/appletts/activex on the fly looking for malicious code aswell as doing the same for e-mail etc.

Firewalls and AV are complimentary and are both very much required!

Deano


[Edited by dsmith - 12/1/2003 4:49:46 PM]

Davie

Hello all.

every now and the whilst i'm using my PC, a VB box pops up.

The title is Project1, and the text is "its time". With an OK box.

I have clicked OK, but i fear i have started something suspicious.

Has anyone come across this?

Cheers!

David

Hobo_Jojo

you're fooked

Davie

Thanks for your input, if you have nothing constructive to say then don't say nothing!

DJ Dunk

iTrader: (5)

Sounds like a virus to me. Have you run any up-to-date AV software on the machine ?

Davie

Always got up-to date AV Systems, which all run live update.

Its on the machine which i use at the moment, and themore i investigate it, the more i think its just some stupid adware / spyware.

How are you on Win2k admin Dunk?

DJ Dunk

iTrader: (5)

Not good at all mate I'm afraid, sorry can't help much more than that.

Could well be just adware but I'd be concerned that your PC allowed an unknown VB app to run. Does the PC have a firewall software/hardware ?

Any wannabe VB developers trying to be funny in your vicinity ?

Davie

Nah, place is a retailer. nothing but good lookin models! ;-)

I think the VB app is the result of a visit to cracks.am

DJ Dunk

iTrader: (5)

Female models I hope

I'd tend to agree that the cracks website is the culprit. A software firewall like Sygate Personal Firewall should prevent any future occurances

Davie

Well i'm sat behing=d a rather funky Cisco PIX firewall, but it don't seem to block silly things like that,

OllyK

I wouldn't start to panic just yet, unless you are seeing other odd behaviour.

Get your AV software up to date and do a full virus scan.

Chances are if it is VB then it is not a true virus, more likely malicious / prank software.

First use CTRL+ALT+DEL (assuming U R not running really old windows) and look at the Applications running in Task Manager. With a bit of luck when the dialog shows it will list there, you can then do "Go To Process" and kill it off. Next do a search and locate the exe and delete it. Also worth checking start up folder for a short cut that is activating it and also look in the registry as well (if you don't know how to do this, don't mess, find somebody know knows what they are doing as if you mess up your registry you are in deep ****). HTH

Fosters

Just go look in the registry and find the app and delete the key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

noodlez

David,

I have seen a similar thing happen and I tracked it down to a program called internet-optimizer which if my memory serves me right is installed in program files in a directory called dmm. I think the filename is sysu.exe. If you delete this and any occurences of it in the registry, the problem should go away.

HTH

Rob