> Dear Group > > How do you know when you are infected by a trojan or someone > has control of > your pc from a backdoor? >
Well, there's any number of ways. First, evaluate the following risk factors (not all-inclusive): 1. Not running antivirus software and a firewall. 2. Always-on Internet connection, such as Cable, DSL, ISDN, LAN, etc. When coupled with 1. above, your risk is much, much higher. 3. Multiple users working on the computer. 4. Running Windows 95, 98, or Me (at all), or running NT/2000/XP without being patched. 5. Running unnecessary services (IIS, FTP, SMTP, DDE, and so on) on a box that does not need them, or when you're not familiar with their operation. 6. Using MS Outlook or Outlook Express. Although I use Outlook, I caution anyone who wants to run it that they're forever going to be trying to keep abreast of the latest email worm, 99.5% of which target Outlook/Outlook Express. > Is it when your windows update's always continuously refuse > to update from > the microsoft site, including the ever popular critical > updates to patch > security holes? This could be related to any number of factors. You'll have to be more specific. > When trying to update IE from microsoft it does not work? Once again, this could be any number of problems. What, specifically, is the problem when you try to update IE or your Windows installlation? > When you discover every so often that the hard drive when wiped clean > suddenly becomes a 1gb hard drive instead of a 20 gb hard drive - has > happened several times to me? Do you mean the hard drive is filled or it actually changes size? If your paging file is on the same hard drive, and/or your Temporary Internet Files is on this volume, space can be eaten up at an amazing rate. If your hard drive is actually changing size (a phenomenon I've not heard of before) you may have some other problem. > when the firewalls (zonealarm) every so often is disabled > while surfing? > Other strange happenings... > > How does one detect what the problem is and cure it, > especially when you are > a beginner? If using a trojan to fight a trojan to cure the > problem how > does you know which ones to trust, as I have found there > seems to be a lot > of programmes out there saying they can find this that and > the other but > what if it is something really specialised? > Try running a "netstat -a" from a command prompt. This will tell you what ports are open, which are connected and to what address, and which are waiting for connections. From there, you may be able to make some better assessments, or ask here about ports you're not familiar with. ######################################################### The information contained in this e-mail and subsequent attachments may be privileged, confidential and protected from disclosure. This transmission is intended for the sole use of the individual and entity to whom it is addressed. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this message in error, please e-mail the sender at the above e-mail address. #########################################################
