Dismiss Notice
Join Physics Forums Today!
The friendliest, high quality science and math community on the planet! Everyone who loves science is here!

Permanently block certain processes anti virus

  1. Mar 1, 2005 #1
    This morning I got a ton of those Messenger Service messages that urge you to go to some site for a patch to prevent them, followed by Norton Antivirus informing me of many, many viruses that it could neither fix nor delete. This happened once before and I solved it at that time by doing a system restore. But now, one of the viruses has apparently "updated" my windows version, so system restore no longer works. Since my computer is a piece of crap, the cd-rom drive is broken so I can't just backup my data and reinstall windows.

    The only real problem I have with the viruses is that they slow down my internet connection. Is there any way that I can designate what programs can access the modem, and exclude all others?

    Edit: if I could permanently block certain processes, that might also fix the problem.
     
  2. jcsd
  3. Mar 1, 2005 #2

    dduardo

    User Avatar
    Staff Emeritus

    What version of windows are you using?

    You need is a firewall like zone alarm. The program will warn you when an application is trying to access the internet and you can block it.

    Also, are those messages coming from norton or windows. If it is from windows then you need to disable the messaging service in the adminstrative tools. This is assuming your running windows xp.

    http://www.microsoft.com/windowsxp/using/security/learnmore/stopspam.mspx
     
  4. Mar 1, 2005 #3
    I have Windows XP 5.1.2600, but in Windows Restore it says that at 10:06 AM today it installed "Windows XP kb823980." I think one of the viruses did that.

    Thanks for the link. How do I get that firewall-type thing you were talking about?
     
  5. Mar 1, 2005 #4
  6. Mar 1, 2005 #5

    dduardo

    User Avatar
    Staff Emeritus

    Are you sure you don't have auto update enabled? You should do so anyway.
     
  7. Mar 1, 2005 #6
    Thanks a lot, Klusener, I got ZoneAlarm and immediately after I connected to the internet after installing it, it let me block internet access to 3 suspicious-looking processes. Just now it let me block another one.

    Dduardo, I'm pretty sure that the virus did it, because the computer also spontaneously restarted which may have been at about 10 AM.

    I'm thinking of permanently disabling norton antivirus. That thing is useless. All it's ever been able to do is tell me that I have a virus, that it cannot fix it, and that it cannot delete it. It's been doing this a _lot_ recently. Would this be a real bad idea or not, now that I've got ZoneAlarm working?
     
  8. Mar 1, 2005 #7

    dduardo

    User Avatar
    Staff Emeritus

    Spontaneously restarting means that you have/begin attacked by blaster (I think). You should look into upgrading to Service pack 2
     
  9. Mar 1, 2005 #8
    Yes--Blaster and Welchia are a couple names I remember, and also Trojan-something, and I think something else too.

    So long as ZoneAlarm stops the viruses from doing anything with the internet, is there any reason to get rid of the viruses?
     
    Last edited: Mar 1, 2005
  10. Mar 1, 2005 #9

    dduardo

    User Avatar
    Staff Emeritus

    Trojans are not good because they can log keystrokes. By logging keystrokes someone can capture credit numbers and passwords.
     
    Last edited: Mar 1, 2005
  11. Mar 1, 2005 #10
    Yeah, but if they can't communicate back, is it a problem? I mean is it likely to start doing damaging stuff without being online?
     
  12. Mar 1, 2005 #11

    dduardo

    User Avatar
    Staff Emeritus

    Yes, it is nice to get rid of the virsuses because they still slow down your system and internet connection even if they don't reach the outside. This type of attack is called a Denial of Service. This means that the program (virsus) keeps on trying to access your resources and you keep dropping the request, but the action of dropping takes time. Just imagine someone poking you in the eye repeately and everytime you have to move your head. It takes energy to move your head. This is the same thing your system is doing.
     
  13. Mar 1, 2005 #12
    Well how bad does it get? I mean my computer is 2.4 GHz and the attempts at internet access are (thus far) only occasional.

    Do you know how I might manage a system restore? That would easily disable all viruses in one stroke.
     
  14. Mar 1, 2005 #13
    --Also, ZoneAlarm tells me the IP address of the computer that is attempting to access mine. Think there might be a way to act on that knowledge?
     
  15. Mar 1, 2005 #14

    NoTime

    User Avatar
    Science Advisor
    Homework Helper

    The kb823980, if legitimate, is likely from the windows auto update feature.
    Its design is to block the blaster worm.
    It will not get rid of the infection if you already have it.

    Bring up the task manager and do a google search on each of the tasks displayed.
    If it is a problem task (virus) you should get plenty of info on how to get rid of it.
     
  16. Mar 1, 2005 #15
    Yeah, but personally, I don't want to waste time on hunting down every single worm individually if they can't do anything anyway. That's good to know about the update, but right now it just seems to be preventing me from doing a system restore.
     
  17. Mar 1, 2005 #16

    dduardo

    User Avatar
    Staff Emeritus

    Bartholomew, ZA won't tell you what is trying to access the internet all the time. That would be annoying.

    I suggest you spend the $20 bucks and buy a cdrw. Download SP2 and burn it onto a cd pull the network cable. Proceed to install windows and then install SP2. Put back the network cable. This is the only way to install windows nowadays, which is just ridculous.
     
  18. Mar 1, 2005 #17

    NoTime

    User Avatar
    Science Advisor
    Homework Helper

    You could try going to the uninstall menu and try uninstalling it.
    But, I don't know if that will help.

    Also it is useful to make it a habit to check the task manager for uninvited new processes. Normally the time to get rid of one is a lot less than the time you sit around waiting for the useless virus checker progams to run.
     
  19. Mar 1, 2005 #18
    Task manager had been my only line of defense until today. But it's tough to close the processes... they just start back up again somehow.

    I _do_, technically, have a CDRW drive already. It just doesn't work anymore, it thinks all disks inserted into it are corrupted... I don't know why. The same goes for the floppy drive. This computer also has been giving me warnings about SMART failure predicted (hard drive) when it starts up, in addition to the destroyed screen and lousy 10-minute+ boot time. I think it's only a matter of time before the entire computer collapses.
     
  20. Mar 1, 2005 #19

    dduardo

    User Avatar
    Staff Emeritus

    If it is that broken just get a new computer. Did you build this computer yourself?
     
  21. Mar 1, 2005 #20
    No, it's a medium-end Hewlett Packard laptop from two years ago. It has never completely worked right but it probably has a year or two left in it.
     
Know someone interested in this topic? Share this thread via Reddit, Google+, Twitter, or Facebook

Have something to add?



Similar Discussions: Permanently block certain processes anti virus
  1. Vista anti-virus virus (Replies: 3)

  2. Best free anti virus? (Replies: 23)

Loading...