CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Prevent spy program from automatic install

 
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Catch All - Guests [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Fieldmouse

Cadet
Cadet


Joined: Apr 24, 2007
Posts: 4
Location: USA

PostPosted: Tue Apr 24, 2007 9:45 pm    Post subject: Prevent spy program from automatic install
Reply with quote

How can I prevent an invisible spy program from my computer when I open a file from someone? Would Norton catch it or is there another program that would alert me? I keep hearing about people getting spied on like this. A friend opened a .jpg file and it was not really a .jpg. Nothing came up and she thought it was just a bad file, but a program actually opened, she later found out, and installed a spy program that sent every keystroke to someone else. That's scary!
Thanks!

Back to top
View users profile Send private message
k027

Special Response Team
Guest Forums Host
Guest Forums Host

Joined: Aug 25, 2003
Posts: 8519

1st Responders SRT

PostPosted: Tue Apr 24, 2007 10:11 pm    Post subject:
Reply with quote

Hello Fieldmouse,

1) Don't accept files from unknown sources. Do not participate in P2P file sharing. Only download files from known, trusted sites. Don't open E-mail messages/attachments from unknown sources.

2) Make sure your operating system, browser, and other software is up-to-date with the latest security patches.

3) Use a number of legitimate anti-malware programs that that have anti-trojan, anti-virus, and anti-spyware capability. When possible, use programs that have real-time monitoring capability. Make sure your anti-malware programs are properly configured and have the latest definitions.

4) Periodically check the efficacy of your installed software with online anti-malware detection scans.

5) Use a properly configured two-way software firewall.

6) If you believe that you are infected, work through this:

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview

7) Norton what? Symantec markets a number of programs under the Norton brand. Whatever Norton-branded program you are using, it must be properly configured and have up-to-date definitions. Even if that is so, no one security program can detect all known malware - you must use more than one anti-malware program.

Back to top
View users profile Send private message
Fieldmouse

Cadet
Cadet


Joined: Apr 24, 2007
Posts: 4
Location: USA

PostPosted: Thu Apr 26, 2007 5:09 am    Post subject: so confused
Reply with quote

I have Norton Internet Security 2006. It has always been so hard to know how to configure it. AT first, every second a box popped up and eventually, I just gave up and let them do their thing, not knowing if they were ok or not. It is NOT user-friendly unless you're extremely knowledgeable. I have Spy Sweeper, AVG Anti-Malware free edition, Spybot, and Ad-Aware Personal Free Edition. I keep them all up to date. Will this do it? Also, I only open things from people I know, BUT, they all send things they have gotten, that those people have gotten, and on and on, so I never know the original source.
A program called PCHEALTH keeps hogging my resources. Is this legit? I got mixed responses in Google. Thanks so much!

Back to top
View users profile Send private message
k027

Special Response Team
Guest Forums Host
Guest Forums Host

Joined: Aug 25, 2003
Posts: 8519

1st Responders SRT

PostPosted: Thu Apr 26, 2007 8:26 am    Post subject:
Reply with quote

Quote:
I just gave up and let them do their thing, not knowing if they were ok or not.


That is exactly what you don't want to do. The whole purpose of outbound monitoring is to let you know that a program is trying to access the internet - that gives you the opportunity to determine if it is legitimate or whether it is, say, a keylogger that is calling home to report your credit card info or other personal information that can be exploited. Shocked

Quote:
It is NOT user-friendly unless you're extremely knowledgeable.


It is in your best interest that you either become sufficiently knowledgeable about your software or use a different application that you find more user friendly. For most people, becoming sufficiently knowledgeable is merely a matter of climbing a short learning curve by doing some hard work - reading the documentation, trial and error configuring, testing, etc.

Quote:
I keep them all up to date. Will this do it?


You also need to keep your operating system, browser(s), E-mail mesage program, Microsoft Office, WinAmp, and any other software program that you are using up-to-date - many of these have been found to have flaws that can be exploited by malware.

Quote:
A program called PCHEALTH keeps hogging my resources. Is this legit?


The only sure way to know whether your computer has malware is to run a series of tests. We recommend that you use the previously suggested MRP.

Back to top
View users profile Send private message
mechBgon

Lieutenant
Lieutenant


Joined: May 13, 2007
Posts: 216

MVP

PostPosted: Sun May 27, 2007 1:34 am    Post subject:
Reply with quote

Here are some links to help apply those recommendations:

1) to help you check your third-party software for known vulnerabilities, try Secunia's online checkup.* If the checkup finds issues, it will provide links and information to help you solve them.


2) If you have any of the Microsoft Office2000 products, such as Word 2000, Excel 2000, Access, Visio, Publisher or PowerPoint 2000, then also visit Office Update repeatedly until your system has all the service packs & patches required.


3) consider trying a non-Administrator user account for activities such as opening email, browsing the Internet, using Instant Messaging and media playback. If it doesn't work well for you, you can undo it.


4) remove software you don't use. This may sound trivial, but to give a concrete example, your system can't be exploited by a malicious WinAmp playlist attack, if you uninstalled WinAmp because you never use it.


* This checkup uses Java, so if your computer does not have Java installed, you can get Java Runtime Environment (JRE) from this page.


_________________
Vista x64 · non-Admin account + Software Restriction Policy · Kaspersky AntiVirus 7 · Windows Firewall · full hardware DEP · 64-bit IE7 PM
Back to top
View users profile Send private message
twright

Sergeant
Sergeant


Joined: May 29, 2007
Posts: 98
Location: UK

PostPosted: Tue May 29, 2007 5:20 pm    Post subject:
Reply with quote

hi
a good way to prevent permanent damage from malicious emails is to use a sandboxing program such as sandboxie (google it)

place your email program in the sandbox and any damage will be easily reversable

Back to top
View users profile Send private message Send email
Display posts from previous:   
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Catch All - Guests All times are GMT
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer