Yet another PC meltdown

[Dom]

I might have been, but remember that 99% of problems like that will be caused by "something silly" because most users have little interest or knowledge in how they work, so a little wizard thing like that is probably a good idea to help fix things.

But yeah, they are getting better.

[familychoice]

I installed MSE on Mrs FC's laptop and it's working nicely so I'll stick on my laptop and this PC when I get a chance. Good old Microsoft, who'd a thought it eh?

[familychoice]

I've had about 5 malware hijacks on this PC since this thread was started - all the same so I know how to get them off, but it's getting tedious.

I installed MSE on both laptops here and it seems to be doing the trick on those. The only thing holding me back from putting it on my main PC is the lack of firewall settings. I may have got this wrong but I read you don't need Windows Defender once MSE is installed, but there doesn't seem to be any way of modifying the firewall settings in MSE. I'd like to customise application access for example.

Is there a way to do this in MSE or would I need to install additional firewall software for additional control?

[Steve Lampkins]

Stop visiting those dodgy sites.

Doesn't Windows have a built-in firewall? You can add exceptions there, or how much control do you need?

And your computers sit behind a router with a built-in firewall?

[spannaa]

Microsoft Security Essentials doesn't have a firewall - it's an anti-virus program that also protects against spyware and adware. Widows Defender isn't necessary if MSE is installed (in fact MSE disables Defender if it's installed first).

If you want a software firewall then use either Windows Firewall or a third party firewall such as Comodo.

Windows Firewall has improved a lot since it first appeared and now includes an Advanced Security console (Control Panel > Windows Firewall > Advanced settings).

Reference:
http://programming4.us/desktop/3480.aspx
http://programming4.us/desktop/3482.aspx
http://programming4.us/desktop/3484.aspx

[robwhizz]

I've had about 5 malware hijacks on this PC since this thread was started - all the same so I know how to get them off, but it's getting tedious.

Are you using an external drive? Last Malware I dealt with implanted its self into any removable media attached and set up an autorun so it would re-infect every time the drive was used.

[familychoice]

Thanks for the replies.

Stop visiting those dodgy sites.

Doesn't Windows have a built-in firewall? You can add exceptions there, or how much control do you need?

The 'dodgy' site this time was a commercial WP plugin I was researching. Just reading through their blurb and *pow* up comes 'Security Shield' (pretend virus checker).

At the moment I'm using McAffee which takes over from Windows and applies it's own settings. I do like to be able to control what programmes access the web though, I don't really want to share my bandwidth with apps that are constantly checking for updates or give access when it's not necessary.

Windows Firewall has improved a lot since it first appeared and now includes an Advanced Security console (Control Panel > Windows Firewall > Advanced settings).

Reference:
http://programming4.us/desktop/3480.aspx
http://programming4.us/desktop/3482.aspx
http://programming4.us/desktop/3484.aspx

Thanks, that looks like the feller. I'll test it out on the laptops and see how it works.

Are you using an external drive? Last Malware I dealt with implanted its self into any removable media attached and set up an autorun so it would re-infect every time the drive was used.

Only for back-up, so it's one way traffic. After each infection I scrub the drive clean with a range of malware software including the Microsoft tool, until it's squeaky clean again.

It's only been happening since the latest upgrade of Firefox, so maybe that's less secure than the previous version. I'm staggered that McAffee isn't stopping any of this though, it's ridiculous.

The scripts seem to be hidden on a lot of 'download' type sites, and when I'm searching for new WP plugins and themes it's almost impossible not to hit a site that's offering them for 'free'. You don't have to click or download anything, just accessing the URL is enough. Ironic really as I wouldn't touch a 'free' version with a very long bargepole.

I think it's just McAffee being crap.

[Steve Lampkins]

Noscript might help.

[robwhizz]

My cousins laptop was similar to that. Visiting any site brings up a fake (bloody good one though) security panel thingy. It was down to a resident infection rather than any sites he'd recently viewed.

Have you tried running Combofix again, making sure your removable drives are connected. Also check removable drives for hidden folders etc. Booting a live Linux might help.

[familychoice]

My cousins laptop was similar to that. Visiting any site brings up a fake (bloody good one though) security panel thingy. It was down to a resident infection rather than any sites he'd recently viewed.

Have you tried running Combofix again, making sure your removable drives are connected. Also check removable drives for hidden folders etc. Booting a live Linux might help.

I haven't tried Combofix but I'll try that one thanks.

I don't think it's a resident infection, the hijacks are different (though use similar methods). I'll give it another good clean with Combofix, though I think I've probably got the most virus checked PC in the world at the moment.