Welcome, Guest. Please login or register.

Author Topic: spyware in bios mobo  (Read 4177 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline Glaucus

  • Hero Member
  • *****
  • Join Date: Feb 2002
  • Posts: 4518
    • Show only replies by Glaucus
    • http://members.shaw.ca/mveroukis/
Re: spyware in bios mobo
« Reply #14 from previous page: March 03, 2004, 04:44:10 PM »
Hmmm....  Just remember that msconfig is a debuging tool and should not be used as a permanent solution.

First off, in whabang's link it seems that the PheonixNet "feature" can be disabled via BIOS option. There may also be a jumper to do so if it's an older motherboard.

Second, ZoneAlarm is your friend. ZA not only traps incoming Internet requests, but outgoing ones as well. You can simply disallow PheonixNET's Internet traffic all together.

Third, install SysInternals TCPView which will give you a list of all Internet connections, including the application they're associated with and the destination IP.

Fourth, install and run HijackThis. This will give you a good idea as to what "extra" software is launched at startup. If you've installed lost of some legit software already then the listing it generates may be long. If it's a fresh Win98 install, it should be fairly sparse. At any rate, click on the "Save Log", and save it to a text file somewhere, then copy it and paste it here in this thread and we can help you find what the offending program is.

Fifth, use SysInternal's AutoRuns to track down and disable any spyware. This is the way it should be done and not through msconfig. You may end up editing the registry, but AutoRuns will take you to the place where you need to make the edit.

Sixth, install Lavasoft's Ad-Aware (and get the LSP plugin as well).

I think all the above should make your setup pretty spy-ware resistant for some time.  :-)

  - Mike
YOU ARE NOT IMMUNE
 

Offline Methuselas

  • Hero Member
  • *****
  • Join Date: Feb 2002
  • Posts: 2205
    • Show only replies by Methuselas
Re: spyware in bios mobo
« Reply #15 on: March 03, 2004, 05:53:38 PM »
@Speelgoedmannetje

Typically, you can find the mobo bios version and revision on the lower left of the screen when the system is powered on. If you can paste that here, I can probably dissect it it for you. :-D

Cheers!
\'Using no way as way. Having no limitation as limitation.\' - Bruce Lee

\'No, sorry. I don\'t get my tits out. They\'re not actually real, you know? Just two halves of a grapefruit...\' - Miki Berenyi

\'Evil will always triumph because good is dumb.\' - Dark Helmet :roflmao:

\'And for future reference, it might be polite to ask someone if you can  quote them in your signature, rather than just citing them to make a  sales pitch.\' - Karlos. :rtf
 

Offline SpeelgoedmannetjeTopic starter

  • Hero Member
  • *****
  • Join Date: Oct 2002
  • Posts: 9656
    • Show only replies by Speelgoedmannetje
Re: spyware in bios mobo
« Reply #16 on: March 03, 2004, 06:08:33 PM »
I know how to flash a bios,
but this mobo seems to be abandoned. I might try some bios roms from obscure sites, but it's not my computer, and I do not like to take risks with other's posessions.
@Glaucus
Yeah, I tried an anti-spyware program, but it didn't detect it. And I think if an anti-spyware program would detect it and remove it, it'd be installed again by the mobo.
(well, I tried to remove the shortcut from the desktop, but when restarting it was again on top)

ah well, thanks for the tips and here's one for you Glaucus, :pint: (or something alcohol-free, I dunno)
And the canary said: \'chirp\'