Security help needed.

**Stownplayer** · March 27th, 2005, 07:11 AM

Can anyone give my information and how to identify malicious software or services running on windows that do not show up in the task manager? I don't know enough about things like this but i want to be able to cover my ass.

**Afn** · March 27th, 2005, 07:22 AM

Originally Posted by Stownplayer

Can anyone give my information and how to identify malicious software or services running on windows that do not show up in the task manager? I don't know enough about things like this but i want to be able to cover my ass.

Get a copy of ADAWARE at www.Lavasoft.de

That will solve most problems for you some people like other programs, but ad aware does a fine job.

Also get AVG anti-virus, also a good free antivirus.

**Stownplayer** · March 27th, 2005, 07:31 AM

I use adaware and spybot. IS there a way for me to see everything running on my computer regardless were it buried in the operating system. Task manager does not cut it.

**DigitalJunkie** · March 27th, 2005, 07:46 AM

You may want to try Prevx Home, it detect anything want to change your system so you can prevent it first!

**Stownplayer** · March 27th, 2005, 07:55 AM

Originally Posted by DigitalJunkie

You may want to try Prevx Home, it detect anything want to change your system so you can prevent it first!

that is interesting. Never heard of it, so i'll look into it. Thanks

**Afn** · March 27th, 2005, 08:50 AM

Originally Posted by Stownplayer

I use adaware and spybot. IS there a way for me to see everything running on my computer regardless were it buried in the operating system. Task manager does not cut it.

Learn how to read the registry and how to stop xp's services. XP loads many components that you do not need.

Hijack this is another good tool. good for malware that keeps reloading on boot.

**Stownplayer** · March 27th, 2005, 08:56 AM

Originally Posted by Afn

Learn how to read the registry and how to stop xp's services. XP loads many components that you do not need.

Hijack this is another good tool. good for malware that keeps reloading on boot.

I know how to stop xp services and i have most all extra one's stopped. I'm not a newb to security. I just know that some programs can run hidden and not show up in task manager so how do i know they are there?

**Malakai1911** · March 27th, 2005, 09:00 AM

He is worried about malware that doesn't show up in the taskmanager (hides itself).

TDS-3, TrojanHunter 'ought to take care of that stuff. Check my sig.

**Auggie2k** · March 27th, 2005, 09:05 AM

You can also use norton systemworks. It has a liitle add-on that gives you detailed information on all processes shown and hidden!

**homie_da_clownx** · March 27th, 2005, 10:00 AM

There's Wintasks Professional 5.0. I know some people that like it.

**RACKnRAIL** · March 27th, 2005, 10:50 AM

You may want to check out these two pieces of free software. You may find them helpful. Codestuff Starter & Startup Monitor

http://www.softpedia.com/get/Tweak/S.../Starter.shtml

http://www.mlin.net/StartupMonitor.shtml

**RACKnRAIL** · March 27th, 2005, 10:53 AM

Originally Posted by Malakai1911

He is worried about malware that doesn't show up in the taskmanager (hides itself).

TDS-3, TrojanHunter 'ought to take care of that stuff. Check my sig.

I also agree with Malakai. These are good trojan tools.

**Greylin** · March 27th, 2005, 01:00 PM

TDS3 is an excellent tool. You could also try a registry cleaner/multipurpose tool called jv16 Power Tools.

**truelyme** · March 27th, 2005, 01:35 PM

Very good info here by people who have encountered problems before. I too, have had the go arounds with malware. TDS-3 an excellent program, certainly when looking for open ports that a trojan or the like might be using or looking for hidden streams that are normally not within the realm of user viewing. Hijack this also an excellent program for determining hidden start ups. Adaware another good program for finding some of the hidden stuff and for protection. Spybot also has its uses, though in my mind a bit simpler and therefore not quite as effective. Many of the trojans you can get are specifically written to null out Spybot and Antivir being as they are so popular with folks in use. One other to add to this list would be cwsshredder. While cwsshredder mainly looks for cws malware it also has a startup list generator. The startup list generator won't allow you to fix stuff like hijackthis but then you can't make mistakes by just looking either.

**Lehk** · March 27th, 2005, 07:04 PM

first close all programs you use that connect to the internet,
then open a console, (start>run "cmd"
type netstat /a

look for anything that is in state listening or established that is not on foreign address = localhost or foreign address = 0.0.0.0

If you see anything you are unsure about right click on the console window and select "mark"
then click at the top left corner and drag to select the entire output of netstat, you do not have to select copy, "marking" the text puts it in the clipboard, now paste the output into this thread and i can take a look at it.

this will not find all malware, but will catch anything accessing the internet.