Thanks to Darragh

Thanks for the heads up regarding AGV.
Before I installed it I gave McAfee one last chance,
downloaded the new patches and updated it, ran a full scan - nothing.

Un installed it, installed AGV,
updated AGV shut down and ran a full scan - 5 infections found!
(2 were keystroke loggers : angry: )

I was paying 90 euro a year for 3 subscriptions for Mc Afee.
Wast of money.
AGV from what I can see is excellent AND free!!!
Brilliant.

Thanks.

i use eset nod32 it stopped the connection and i had a other hit from here as well no problems sofar


regards john

Frank_Ryan_jr wrote:

Un installed it, installed AGV,
updated AGV shut down and ran a full scan - 5 infections found!
(2 were keystroke loggers : angry: )

I do data security for a living and I have yet to see a personal scanner which beats AVG. I use nothing else. In a corporate world mcafee seems hard to beat but this doesn't carry over into the home edition IMO. Combined with a good firewall and AVG nothing should get through. Touch wood, I havent had a single infection in the 5 years I've been running AVG. I would normally recommend Zone ALarm as a good personal firewall but in truth it has become such bloatware of late I can really recommend it anymore.

Just as an aside. Does anyone know what the vulnerability which has been causing the infections here is? I run a number of joomla based sites and to date they are all ok. I'd like to keep it that way. PMs welcome. I don't use extaplorer, I always lock down the config files once I'm done editing and always install the latest security updates. Updating is a PITA when you have done mods, so I keep mods to a bare minimum. Also you never know when you make a mod, if it will compromise your site. I also use a rolling password regime. There is a component which allows you to block IP addresses. I combine this with another component which logs all 404s and the source IP. With this info I just ban any ips which have caused a 404 by trying stuff like SQL injection or testing for suspect components. Maybe some poor unfortunate with a virus gets banned now and then but sod 'em.

DaveGrennan wrote:

There is a component which allows you to block IP addresses. I combine this with another component which logs all 404s and the source IP. With this info I just ban any ips which have caused a 404 by trying stuff like SQL injection or testing for suspect components.

Hi Dave,

Which components do you use for this (IP block / logging)?

Phil.

Dang!!!!!!!

My PC is still freezing up.
It has all the hallmarks of a memory issue.
AGV is asking do I block or allow 'Services.exe'
Now, I know what this is normally for and I'm also
aware it can be used for spyware and the like.
I'm only guessing it's this thats causing the crashes.
I've ran another anti virus and updated, cleaned the registry and defrag'd the thing
and deleted unnecessary progs / files to free up space.
I even increased the virtual memory
all to no avail,

Anyone got any ideas!?

I'm stumped.

oh man, not services.exe, one of our sites was hit by something very similar a while back.
ok, after running avg, try malwarebytes and then spybot, also do a disk clean of the c drive and remove all temp files and clear IE caches.
If you're still getting grief then maybe rolling back and doing a windows restore to a date before all this happened.
If that that doesnt do it then windows might be damaged, do a windoew repair using an installation cd, if not that then a clean install.
It might be a hardware issue, do you know what make of harddrive do you use, drives like maxtor seem to be very susseptible to going belly up, I once saw a stack 6 foot high of these in an office, amazing.