suggestion

[benoit]

Hello,
it's a microsoft program soo is it possible to check all
(or a lot) of dll and registry key/dword/.. that are no
more like the original to attrac the attention to it.
These night i let my computer open and somebody was
introduced into my machine(when i restart the computer it
sais "attention if you to that sombody link to you will
loss his connection")and when i try to do ctrl-alt-del it
sais that it was not possible because it was modified by
the administrator.
it would be well if one could have this kind of
information
thanks

 

[Andy]

Have you seen a bunch of little greens mens running in
your town.

 

[AndyManchesta]

This is maybe a Spyware/Virus infection if your
TaskManager is disabled, I think you should download
Ewido and try a couple of virus scans then let us know if
you still have problems. The Smitfraud/Spysheriff
infection can display a warning desktop wallpaper and
other trojans related to that can disable task manager,
It can easily be repaired though once we know exactly
what the problem is and what version of windows you are
running,

Here's a like to ewido if you need it

http://www.ewido.net/en/

And here's a couple of online Virus scanners :

http://housecall.antivirus.com/
http://www.kaspersky.com/virusscanner
http://us.mcafee.com/root/mfs/default.asp?cid=8433
http://www.pandasoftware.com/activescan/

 

[benoit]

????

ok my english is not good

but i think it is possible that someone can access my
computer via internet because i have not stop my computer
those night

 

[benoit]

Hello

i don't know if it is a spyware because i have run
adware, spybot and msas and i had no spyware.
i run nav also.
i have found via google witch key i must adapt in regedit
and now it is good.
thanks

what think you from my suggestion that msas compare the
regedit keys with the defaut value and the same with the
dll's

 

[Bill Sanderson]

It's a reasonable thought, but not possible, I think.

The registry is infinitely (well, nearly!) extensible. Keys may have a
variety of possible values, all of which are valid, in different
circumstances.

Additionally, software running as an administrator (rootkits, for example)
can easily hide registry changes from other tools--so even if the range of
possible content was smaller, this kind of protection would still be fairly
easily defeated.



--