I need some serious help. I had a big security breach earlier and now everythings messed up. Ill explain...?

Question

Ok, so I went to a site earlier that someone sent me to, it was supposed to be for a program. I went there...I dont know if I went to the wrong site, or what. But heres what happened

(Heres a list of programs first so everyone knows)
Firewalls
- Windows Firewall
- Zone Alarm Security Suite 2006 (I bought it)
Spyware/Virus/AdwareProtectors
- Zone Alarm
- Spyware Doctor (Paid version)
- Adaware (Wasnt on during attack)
- SUPERanitspyware (This wasnt on either)

These are the programs I use, I have used others that I know people are going to say, like, Spybot, CounterSpy, AVG...etc. But these work fine.

Ok, onwards. So I went to the site, clicked enter, and immediatly, Zone Alarm pops up saying its blocked 40+ port attacks. Spyware Doctor blocked some things then started scanning. It found 200+ things, and 2 were really bad. They had to do with DNS. Which one was somehow imbedded in the memory or something, so it did an emergency restart. Well...kinda...

It froze on the desktop. I had to shut it down with the power button. I restarted. It froze on the desktop. This happened 3 times. The fourth time it started thinking, and after 5 minutes or so, the desktop popped on. Everything ran slow, and continues to do so. Mozilla takes about...4-6 minutes to load, and everything else is around there as well. When Mozilla was loading, I couldnt do anything else in the taskbar, it was froze. So, I tried restarting in safe mode. But for some reason it wouldnt let me with the F8 button. So, I had to do MSconfig and change the boot.ini to safe mode. But, I decided to do a system restore first. So I did, then I started it in safe mode. I ran all the programs, nothing came up. Spyware doctor said there was nothing. But, everything is running like crap. So, how do I fix this?

Heres why. I have alot of programs...they work on Windows...I have alot of games...They work on windows. If you can play them on Linux, I would gladly switch. And by the way, I have 2 linux programs coming to me. I paid for them, but its one of the versions thats good. The other is the free Ubuntu version.

Now...I dont want to redo windows, I dont want to redo another OS...I just want this fixed...

For anyone that is still here helping me, thanks, and I created a new topic to follow up on this.

http://answers.yahoo.com/question/index?qid=20070209234125AAhUlTh&pa=FYd1D2bwHTHwI7tmHek5SS3b52i6xQW9nYAfWqMguX7DED2o8nNNx3_N._EmNOCXU5i6COnDdF7Q6Q--&paid=asked&msgr_status=

Answer 1

damn...try this
go to start..control panel...folder options...select view....halfway down..u will see....show hidden files and folders..select that
press apply..press ok
if u can ..update superantispyware
now go into safe mode
once in safe mode
go to start..run..type in ..prefetch...u will see new window...select edit..select all...delete all
go to start..run..type in ...temp...same thing....delete all.
start..run..type in...%temp%..same thing ..delete all
now go to start..all programs...accessories..system tools...disc clean up...after it analyzes..check all boxes..press ok...it will disappear when it is finished
now open superantispyware
select scan my computer..full system scan...open your antivirus..run full system scan
if u are using zone alarm..does it have antivirus?...or just spyware protection?

ok..now u have cleaned pc...and ran spyware/virus scan
before u restart,..
go to start..run..msconfig...start up...do u see anything in there u might not know?...anything new?..if so...uncheck it..or uncheck everything but zone alarm...press apply..press ok
restart pc
u will see a pop up from ..system configuration ...check the little box that says..dont show message again
now...go here and run a online virus scan
http://support.f-secure.com/enu/home/ols.shtml
remove what ever it finds
go here..run online spyware scan
http://www.ewido.net/en/
remove what it finds
now go to start..control panel..folder options..vieew...reset to default..press apply..press ok.....
i am hoping u are ok by this time
if not..instant message me..we will take it the next step

Answer 2

First of all, unplug your computer from your internet connection (whatever it may be, ethernet, phone line, etc) and try starting in Saf e Mode. If you can't get into Safe Mode, start Windows normally. Now run all Anti-Virus and Anti-Spyware programs you have. My person favorite are AdAware, Spybot S&D, and AVG Anti-Virus, but any trusted software should do well. I suggest restarting as soon as you finish each scan to hopefully prevent any malware programs from re-installing themselves before they can be completely removed.

After this, turn your computer back on and make sure it is still disconnected from the internet. Make sure you have only one firewall on. If your router has a firewall I'd use that over ZoneAlarm and Windows firewall since hardware firewalls are much more protective than software firewalls. Whatever firewall you select, go to its settings. Select the option to "block all ports" or "stealth mode" or something along those settings. Also select the option to block ping requests. You want all ports closed (unless you are required to have a port open for internet access).

Now go to https://www.grc.com/x/ne.dll?bh0bkyd2 and read the information and click the "Proceed" button that's about in the middle of the page to test your Firewall. For maximum security, once the test is done you should see all green blocks on the grid. Blue boxes means the port is closed, but means the port is responding to outside attempts to contact it. Closed isn't bad, but since the port is responding to attempts to contact it, a brute force attack may be used on the port and it maybe be susceptible to unwanted access. The green boxes means the port is "hidden" from requests from outside sources. More or less, these ports aren't accessible by an outside attacker.

After the test is done you'll see some information below the grid. If the information says "Passed" you're okay. But if you see "Failed" anywhere you have some issues that need to be resolved.

This will help ensure that anyone trying to access your computer can't gain control of it. If you require open ports to play some of your games I suggest opening them only temporarily for the duration of the game play then closing them again. Most firewalls allow for custom "profiles" so it's easy to switch between web browsing and game playing firewall settings.

Hopefully this has helped out some. If not, post more details and I'll see if I can help anymore.

Answer 3

!!DO THIS FIRST - NOT THE OTHERS!!


Try booting in safe-mode and run system restore from Programs/Accessories/System Tools/.
Restore your system back to the last check-point.

That may help you initially....
After that I would run a spy/malware cleaner such as:-
SpyBot-Search&Destroy.

There are a multitude of issues to contend with using
Zone-Alarm.
Primarily you should turn off Windows fire-wall.. as that will cause all sorts of conflicts (and possible spurious port attacks, maybe).

I just use windows firewall, run Spy-bot S&D regularly and employ AVGfree as anti-virus defender and also watch what I download and "agree" to.... on dodgy web-sites..
I am on a simple LAN with an ADSL ethernet(better than USB) router as the gateway (which is a defence in itself)and 5 Port Switch.

Good luck
nicblack

Answer 4

The only good way to prevent some of the 114,000 viruses that infect Windows Operating Systems but not Linux or Mac is to get Linux or Mac. You are going to continue with these and other problems as long as you use windows. Get Kubuntu (a Linux system) for free at www.kubuntu.org

Answer 5

purely watch or examine what those fools would desire to declare come Monday. for valuable a number of them (and others no longer listed) will spin this into the floor like the Tasmanian devil. Katie Couric, bill Maher, Stephen Colbert, David Letterman, TYT (Uyger & Ezra Klein) Keith Olberweenie, Glenn Greenwald, Maureen Dowd, bill Moyers, Chris Matthews, David Shipley, Rachael Maddow, Jon Stewart, Arianna Huffington, final yet no longer least...Paul Krugman. The brainless liberal, innovative, laimstream media will shove their heads up their butt and hear their very own echo. The idiots can not face up to. that is going to take place.

Answer 6

the previous answerer took a lot of effort.. i would like to recommend that u disconnect ur internet and switch off router and turn back on that way the ip will change if u have dynamic ip. i would go complain to the customer service of the internet u r using. it happened to me once and i use at&t they helped me out in real time. dont forget to chck if the remote assistance option is off. cozz the trojan i had it opened it and some one was about to access my system. anyways good luck and god less

Answer 7

Never redo windows till the hijackthis experts take a look at your computer !!

(4) Download hijackthis
(5) Post the hijackthis log on the hijackthis forum for the hijackthis experts to take a look

Answer 8

You may have to completely wipe down your system. Your games will no longer work on a different operating system. Use Deban's Boot and Nuke (Google it) to erase your harddrive. But be SURE that you want to wipe, try other options. A wipe is a LAST RESORT and will erase EVERYTHING on your harddrive, so back up your important files.

Answer 9

U said system restore and last good config did what.