Forum Home
Press F1
 
Thread ID: 36499 2003-08-12 00:01:00 Who is NT Authority\System and Why does he restart my PC? Chilling_Silently (228) Press F1
Post ID Timestamp Content User
166954 2003-08-12 13:04:00 Hii,

I dont think i have got it yet but not sure on it.
i got a message from sygate saying a file was trying to access internet.. and i clicked on "do not allow"
When i look under security logs in Syagte Firewall, it says:

"08/12/2003 23:08:01 Executable File Change Denied Major Outgoing TCP 216.187.107.31 0.0.0.0 E:\Program Files\Internet Optimizer\optimize.exe 1 08/12/2003 23:07:59 08/12/2003 23:07:59"

Thsi is showing under logs for Sygate
Is this file related to the virus or is it just a case of spyware or if its normal and part of IE 6.0

Cheers
neptune (3819)
166955 2003-08-12 13:40:00 Why don't you use GETRIGHT!!!! if its stopping your download b4 it finishes PoWa (203)
166956 2003-08-12 13:49:00 Just cleaned it off my dads computer. The latest AVG update picks it up.

Ironically, since he only uses the computer for email he probably got infected while downloading the virus update.

Going back tomorrow because AVG doesn't remove everything. And to patch & install a firewall.
bmason (508)
166957 2003-08-12 13:54:00 Because over 90% of the people here would have to download GetRight.. now how big is the installer's EXE?

Its just adding to the stress, hence why splitting it up, or temp. removing the virus is a good solution.. or even permanently removing it :D
Chilling_Silently (228)
166958 2003-08-12 14:46:00 Yer but all 56k users should have a copy of getright, first point of call. How can you do without it? argh! :) PoWa (203)
166959 2003-08-12 22:36:00 Just curious... why 32 and not 64? Greg S (201)
166960 2003-08-12 22:38:00 > Ironically, since he only uses the computer for email
> he probably got infected while downloading the virus
> update.

haha!

> & install a firewall.

Good man!
Greg S (201)
166961 2003-08-13 00:59:00 > Just curious... why 32 and not 64?

Because you dont have a 64Bit processor do you :-)
Chilling_Silently (228)
166962 2003-08-13 03:19:00 I decided to do a bit of digging around about all this and it somewhat interesting what I found.

It may be possible to use a program called Dcomcnfg.exe in 2000 to disable the DCom functions long enough to update as well as the other ways posted.

www.uksecurityonline.com

And these are interesting just if you want to know more about DCom and US reaction etc.

cexx.org
support.cox.net
nsit.uchicago.edu
www.outpostfirewall.com
www.iss.net

It would appear from some of this that fixing this permanently might just be a problem and port 135 might have to be blocked permanently online eventually. I wonder if any particular people would benefit from port 135 being blocked worldwide permanently? (I am old conspiracy nut so take no notice of that :D )

And this is an explanation of how to deal with it with pretty pictures to show all.

www.f-secure.com
John Grieve (367)
166963 2003-08-13 07:18:00 so this doesnt affect anyone below XP/2000?

excellent, thank you bill gates (hes still a fag)
Beef (1415)
1 2 3 4 5 6