I dont feel safe

[eatmyshorts7569]

I Just formatted my sisters computer and she was using IE for just couple minutes to download Mozilla and small stuff like AIM, when she got MASSIVE amount of popups. I did a regscan and a Adware check and this is what i got.

Ad-Aware
http://img.photobucket.com/albums/v512/eatmyshorts7569/Ad-Aware.jpg

Reg Scrub
http://img.photobucket.com/albums/v512/eatmyshorts7569/RegScrub.jpg

I dont know about you guys but i dont feel safe no more. Just 5 Minutes of IE And the hole thing is just swormed by buggs.


Any stories you guys want to share feel free.

[Bios24]

You did a clean format and install and you got all that with 'a couple of minutes' worth of internet use? I flat out don't believe it. People have this notion that you just catch things flying around the net; like you just plug in the internet and your automatically under attack. You have to visit certain sites and download certain things to get infected! Did you have any data backed up that your replaced on the computer? what sites were visted exactly?

[dicecca112]

there is no way that was a few minutes. I agree with bios on this one. You probably didn't do a clean format, or did a repair.

[eatmyshorts7569]

i said my sister i dont know what sites she went on and i dont care but thats kinda scary on how fast you can get these tings. im just saying what she told me when she staretd getting the popups.

[JDXNC]

I personally went to ONE random website with IE and noticed a lot of hard drive activity and wierd things happening, I had just done an ad-aware scan 5-10 mins earlier and found a few problems and removed them. After those wierd things started happening I ran ad-aware again and found 180ish problems.

People have this notion that you just catch things flying around the net; like you just plug in the internet and your automatically under attack. You have to visit certain sites and download certain things to get infected!


BTW, you can get infected without going anywhere, just being online.... remember Blaster?

[JigPu]

BTW, you can get infected without going anywhere, just being online.... remeber Blaster?
Yup. Just because you haven't opened IE dosen't mean you're safe ;) Worms can infect any computer connected to the network, provided the OS has the required security hole. For example, the Blaster worm would contact a target system, and using an exploit of Window's DCOM RPC, run code which would download the worm onto said target. No IE required -- only the appropriate hole in the OS and firewall.

JigPu

[Slackfumasta]

Welchia was the same way. An unpatched XP left an exploitable hole on port 135, Welchia would transport itself via tftp to the open machine and voila! Infection simply by being plugged into the network.

However, I doubt you got all that stuff in that manner. Probably the first thing your sister did was go and immediately download the stuff she thinks she has to have - AIM, Kazaa, Bonzi Buddy, Comet Cursor, etc. . .all the stuff you were getting rid of by reformatting :)

[eatmyshorts7569]

ok i just went to safe mode. and cleaned the hole thing, uninstalled MSN,IE, and Etc and did a ad-aware check and a regscrub check and everything is clean. now she only get one popup somtimes that i coudent find how to get red of.

[9mmCensor]

I always setup some security (firewall or whatever) before I plug in the ethernet cable to the PC. Then hit up windows update right away.

[Turd Furguson]

Try using Spyware Doctor to remove that last little bug.

On a side note, it is possible to get all that spyware pending you downloaded it from a site that secretly adds spyware into the executables.