Increase in Virus Activity

[digen]

Ahha typical from the ISP breed !
Anyways could you send me a copy of the logs if possible?

Also in your first post of this thread,
p.s. I also seem to have been infected by some process-injecting trojan - anyone have any clues on how to deal with that?[/b]
Has your problem been solved yet? What process are you exactly referring to?

 

[vebk]

Well, it's not exactly been solved as such, but I have started using a firewall (Sygate) and that lets me keep it very much in check... Basically the main process that has been infected has to do with the NT Kernel, which I have blocked in Sygate from accessing the net... so exactly what has been infected I am not sure - but ntoskrnl.exe and smss.exe have been acting suspiciously. (I was also getting a lot of DCOM and LSASS exploit attacks, which Avast antivirus was able to block, and Sygate now seems to keep that in check as well).

 

[digen]

Sorry for pushing this too much but I do care about insecure systems so I'll push my bit even more.Incase you arent too sure about how things are it would be wiser to analayse each & every process that loads,disable un-necessary services,close open ports.This is pretty much it,also find which apps/process get loaded at start-up.Incase you feel the need to "forensic" your system let me know,maybe I can contribute my 2 cents

 

[harsh_puri]

I am using Kerio personal Firewall (KPF)all entery are not from airtel ip but I can say most of them are from Airtel and this is the most common description provided. BACKDOAR trojan active *I am happy with my KPF not many problem faced but I am sure if u dont install a good firewall Ur system is gonna face wired things and after reinstall first thing I do is install my firewall and antispyware

 

[digen]

Yes that very true.You need to have proper software running when you connect to the internet.