Home Page
   Articles
       links
About Us    
Traders        
Recipes            
Latest Articles
System32 virus
Page 1, 2, 3  Next
 
Post new topic   Reply to topic    Downsizer Forum Index -> IT Matters
Author 
 Message
Wombat



Joined: 28 Oct 2004
Posts: 396
Location: SW Cheshire
PostPosted: Sun Apr 17, 05 12:38 pm    Post subject: System32 virus Reply with quote
    

Another question for all you techies out there, please.
Have had a couple of boxes appear stating:-

Norton Antivirus has detected
Backdoor.Ranky virus at C:\WINNT\System32\kevejekim.exe
and
W32.Randex virus on C:\WINNT\System32\wenetoh.exe

Norton Antivirus does not appear to be able to try to repair then delete.

Any thoughts please?
Are these really harmful and how can I get rid?

Thanks in advance.

Wombat

jema
Downsizer Moderator


Joined: 28 Oct 2004
Posts: 28098
Location: escaped from Swindon
PostPosted: Sun Apr 17, 05 12:42 pm    Post subject: Reply with quote
    

https://securityresponse.symantec.com/avcenter/venc/data/backdoor.ranky.m.html

is what you are meant to do for backdoor.ranky which is a pretty nasty and must be removed.

w32.randex is also nasty and a bit harder to remove:

https://securityresponse.symantec.com/avcenter/venc/data/w32.randex.e.html

dougal



Joined: 15 Jan 2005
Posts: 7184
Location: South Kent
PostPosted: Sun Apr 17, 05 12:48 pm    Post subject: Reply with quote
    

Harmful? Yes IMHO. Your machine can be controlled by some nasty little kid somewhere across the internet...

A simple Google gave me
https://securityresponse.symantec.com/avcenter/venc/data/backdoor.ranky.t.html
and ... well...
https://www.google.co.uk/search?hl=en&ie=ISO-8859-1&safe=off&q=randex&meta=

Are you running XP with the latest patches? And the firewall turned on?

(Gosh how wonderful a Mac is !!)

Wombat



Joined: 28 Oct 2004
Posts: 396
Location: SW Cheshire
PostPosted: Sun Apr 17, 05 3:54 pm    Post subject: Reply with quote
    

Apologies for late reply, just had hassle getting rid of Viruses, PC kept freezing.

I do not have a firewall, but am about to look at Tahir's post where I think I can download one.

Thanks for help,
Wombat

dougal



Joined: 15 Jan 2005
Posts: 7184
Location: South Kent
PostPosted: Sun Apr 17, 05 5:03 pm    Post subject: Reply with quote
    

Wombat wrote:
...I do not have a firewall, but am about to look at Tahir's post where I think I can download one.


1/ What OS are you running? Even XP is hardly secure if not updated to at least Service Pack 2... (Note that XP has a firewall, but only sp2 turns it on for you...)
2/ If you are planning to get a second computer, a router will provide shared internet access AND screen your computers from the 'outside world'.
3/ A firewall's function is *not* to block *all* incoming traffic. Its supposed to filter the requests from the outside. BUT unless you are wanting to allow any 'outsiders' to come in, you should shut them *all* out. A router can act as just such a barrier.
4/ A broadband connection provides the world with a motorway to your door, so, if the door isn't locked, then minimise your connection time - don't leave the internet connection open just because you can!

jema
Downsizer Moderator


Joined: 28 Oct 2004
Posts: 28098
Location: escaped from Swindon
PostPosted: Sun Apr 17, 05 5:17 pm    Post subject: Reply with quote
    

I agree with most of that advice, but not point 4. When attacks are rampant, you will be practically just as likely to be infected if you are online 1 hour a day or 24.

You have to make sure your security is up to date, and a router is a fantastic measure as well. I would not run a PC these days with anything I cared about on it, without the protection of a router.

Wombat



Joined: 28 Oct 2004
Posts: 396
Location: SW Cheshire
PostPosted: Sun Apr 17, 05 6:01 pm    Post subject: Reply with quote
    

I'm running windows 2000 professional and Norton Antivirus.
I see that there are quite a few routers on ebay. Is there a particular spec that I should look for? And price?
I only run one computer really. Can I use a router on one for the firewall protection?

I keep getting Norton Antivirus box comes up again re Backdoor virus, even though I have deleted via the Symantec way today?

Wombat

Wombat



Joined: 28 Oct 2004
Posts: 396
Location: SW Cheshire
PostPosted: Sun Apr 17, 05 6:31 pm    Post subject: Reply with quote
    

Just installed free ZoneAlarm, cant believe how many times it is activating

Wombat

sean
Downsizer Moderator


Joined: 28 Oct 2004
Posts: 42207
Location: North Devon
PostPosted: Sun Apr 17, 05 6:34 pm    Post subject: Reply with quote
    

It's bloody scary when you put it up for the first time isn't it?

Wombat



Joined: 28 Oct 2004
Posts: 396
Location: SW Cheshire
PostPosted: Sun Apr 17, 05 6:37 pm    Post subject: Reply with quote
    

Sean who, your'e blocked mate

Wombat

jema
Downsizer Moderator


Joined: 28 Oct 2004
Posts: 28098
Location: escaped from Swindon
PostPosted: Sun Apr 17, 05 7:17 pm    Post subject: Reply with quote
    

Wombat wrote:
Just installed free ZoneAlarm, cant believe how many times it is activating

Wombat


And I bet you don't have a clue most the time what it is saying/meaning! Or has it improved?

Wombat



Joined: 28 Oct 2004
Posts: 396
Location: SW Cheshire
PostPosted: Sun Apr 17, 05 8:16 pm    Post subject: Reply with quote
    

Appears to have stopped the Backdoor stuff. However my PC has frozen once since I installed it.
Any ideas why?
Gosh I'm pushing you guys today, 06.00hrs to 21.15hrs, what a service!

Thanks
Wombat

dougal



Joined: 15 Jan 2005
Posts: 7184
Location: South Kent
PostPosted: Sun Apr 17, 05 9:01 pm    Post subject: Reply with quote
    

dougal wrote:

4/ A broadband connection provides the world with a motorway to your door, so, if the door isn't locked, then minimise your connection time - don't leave the internet connection open just because you can!

Reason I suggested this is that IF your protection is potentially crackable in time, once an interested party has worked out what he's dealing with - you might well have logged off. And next time reappeared at a different IP address (BT charge extra for domestic users to have fixed IP) so the process has to start again.

With dialup, the limited bandwidth is actually a protection, 'cos you're not much use to anyone. And the chances of finding anything worthwhile on your machine, (like card details) with the time/bandwidth considerations of dialup are much, much less - IMHO!

But ideally, of course, you'd be properly protected...

dougal



Joined: 15 Jan 2005
Posts: 7184
Location: South Kent
PostPosted: Sun Apr 17, 05 9:06 pm    Post subject: Reply with quote
    

Wombat wrote:
I only run one computer really. Can I use a router on one for the firewall protection?

Oh, yes.
Ideally you'd look for something with a simple enough (web based) setup, and an ADSL modem included (ie not an ethernet/ethernet router), from a company that is still supporting that product!

Wombat



Joined: 28 Oct 2004
Posts: 396
Location: SW Cheshire
PostPosted: Mon Apr 18, 05 10:36 am    Post subject: Reply with quote
    

My PC has frozen a couple more times since yesterday, any ideas??

Wombat

Post new topic   Reply to topic    Downsizer Forum Index -> IT Matters All times are GMT
Page 1, 2, 3  Next
Page 1 of 3
View Latest Posts View Latest Posts

 

Archive
Powered by php-BB © 2001, 2005 php-BB Group
Style by marsjupiter.com, released under GNU (GNU/GPL) license.
Copyright © 2004 marsjupiter.com