People w/o protection?

[foq]

Anybody here with no firewall/antivirus? if so, what precautions do you take to protect your PC and what do you do if you have suspicions of viruses?

[Baker]

I don't use anti-virus on this computer. I don't have much of a need for it.

Any router anymore has a hardware firewall, blocking anything inbound. I use Sygate as a software firewall to block anything outbound (applications that like to "phone home" <--- f*** that).



I use FireFox so I don't need to worry about how Internet Explorer is tied to the operating system, the few FireFox exploits there are supposedly involve cookies and other things I don't care about -- or mouse dragdrops with shortcuts or other silliness that simply isn't going to happen.

And I don't install applications from non-trusted sources and actually generally don't install them at all. I already have everything I want installed already.

So the odds of me getting a virus or other kinds of problem are near zero. It could happen, but it hasn't and I've had this setup for about 4 years.

A couple of times, I thought I might have a virus but it turned out to be your average crapware like Flash or Quicktime loading in the backgound, and a quick trip to "msconfig" took care of that.

The best way to avoid getting a virus is by not installing warez, although I've done it before, usually for convenience (can't find a CD .. download it illegally as I already own it, etc. etc.)

If I think I have a virus on a computer, I usually get Ad Aware, Avant or something from download.com

[Mindf!3ldzX]

heh,ne one on the internet not having *NE* type of protective software deserves to catch some gay ass spyware/adware/malware/virus/trojan.

honestly.

install AVG,install S.B:S&D,install A.A.Personal-Edition, all free and all availible at multiple places , and once that shits setup , I dont even think twice about that stuff

[foq]

Ah. I shall kick Zone Alar, in it's memory-useing nuts.

[Phenom]

What do Zonealarm and RuneQuake both have in common?

There gey!

Hey Mindz why don't you hook up some links to those programs for these nice folks? You helped me out alot just by warning me about zonealarm.. unfortunatly I had just finished installing zonealarm when he shared that info with me and I was imediatly ripped from 90% of my computer access dew to zonealarm, I ended up having to use some old school tricks just to uninstall it. Zonelabs is turning out to be alot like Norton products, trying to have to much power to do a one task job. people think "Zonealarm: This stops hackers from getting in my PC" ...not... "Zonealarm: This had a builtin virus scanner, TV tuner, screen saver, emailer... etc etc etc.." Norton makes some good products. none of them are antivirus of course. Norton Ghost is decent but the Norton Antivirus portion likes to grab your PC by the short and curly's and drag it around at will

***My rant in a nutshell***
Runes are gey
Don't try to be something your not
Runes are gey like Richard Simmons in a cockfight
Don't install Zonealarm

And if you know what your doing/ are smart enough and dont run anti-virus Good job! I'll let you know when Sub7 sends me the "victom is online" message HAHAHAAH

[Baker]

Zone Alarm is a dawg. It's awful.

[urdead]

You kids are hilarious. And absolutely clueless.

[Baker]

So what's your advice, Urdead? I know your opinions on this vary from mine (a lot, but maybe not as much as it used to) :d :d

[Grim]

I don't use anything. No firewall, no virus protector, nada. I've been screwing with PC's long enough to know what to stay away from or when there is a problem.

[urdead]

All it takes is for you to go to a webiste that contains exploit code, no matter if you're using IE or Mozilla, Opera...etc. You need something to filter out the bad web traffic, and only an application-layer program can do that for you. Firewalls won't. AV won't. If you set your browser security to very high, you could give yourself the best protection right there, especially when it comes to ActiveX. Do not allow ActiveX things to run through your browser. All the other lame traffic, pings and probes nad what-not, can be blocked by your computer and firewall. Just shut off all the unnecessary services, use a simple firewall, and secure your browser.

All you druggies, piracy and pr0n surfers probably have tons of crap on your computers, I'd be curious to see a copy of your hijackthis logfile. LOL!!

[Baker]

Logfile of HijackThis v1.99.1
Scan saved at 4:57:47 PM, on 5/18/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\Smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\XIMETA\NetDisk\LDServ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft SQL Server\MSSQL$NetSDK\Binn\sqlservr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PowerQuest\V2i Protector 2.0\Agent\PQV2iSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\XIMETA\NetDisk\Admin.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\NOTEPAD.EXE
C:\Program Files\mozilla.org\Mozilla\mozilla.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Administration\Local Settings\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr7/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr7/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr7/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr7/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost;
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CInterfaceObj Object - {58F07DD3-924D-4141-BC74-299F523A95F1} - C:\WINDOWS\pxwma.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\Smc.exe -startgui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [StarSkin] C:\PROGRAM FILES\ROCKET DIVISION SOFTWARE\STARSKIN\STARSKIN.EXE -H
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: NetDisk Administrator.lnk = C:\Program Files\XIMETA\NetDisk\Admin.exe
O4 - Global Startup: RemindMe.lnk = C:\WINDOWS\NOTEPAD.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LANSCSI Helper Service (LanScsiHelper) - XIMETA, Inc. - C:\Program Files\XIMETA\NetDisk\LDServ.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\Smc.exe
O23 - Service: SNMP Trap Service (SNMPTRAP) - Unknown owner - C:\WINDOWS\system32\snmptrap.exe (file missing)
O23 - Service: V2i Protector - PowerQuest Corporation - C:\Program Files\PowerQuest\V2i Protector 2.0\Agent\PQV2iSvc.exe

Here's mine. I wasn't sure what to expect, but after looking it over everything looks fine, although I'm not an expert at reading this.

[urdead]

You running a sqlserver on ur machine? That could really chew into your RAM. Looks good!

[Baker]

You running a sqlserver on ur machine? That could really chew into your RAM. Looks good!

I forgot how to turn it off. :d :d I usually kill it in processes, heh. :d

The firewall is instructed to deny it the internet. I used to use it ... oh well. I could spend 20 minutes to turn it off, but I've never taken the time to actually do it.

Maybe tonight! heh

[Canadian*Sniper]

I forgot how to turn it off. :d :d I usually kill it in processes, heh. :d

It's under Services in Admin Tools

[Baker]

It's under Services in Admin Tools

Cool! That was helpful.

I always decided against shutting it down in the past because I thought I'd always want to mess around with it again.

But, that time will never come.