unknown failure problem

[kwokwai]

I am using Win98 and tonight I visit the internet as usual when suddenly there is a popup picture appears and a unknown type of program is installing without my admit.

I tried to go to Safe Mode and disabled some of the services, but such the popup still appeared and I was unable to connect to the internet.
It said "the machine has disconnected to the internet or your machine was out of response"...

I have to restore my PC before I can tell you my story here.

I really don't know what's happened to my PC.
I hate malwares so much, hoping they will be destroyed someday.

Please recommend me a free anti-virus software for me to fight against them!

[bear]

About the only decent free AV program is AVG [ www.grisoft.com ].
Are you still using Internet Explorer?
When is the last time you performed a security update for the OS?

[EDIT: They've moved the free version: http://free.grisoft.com/doc/1 ]

[kwokwai]

About the only decent free AV program is AVG [ www.grisoft.com ].
Are you still using Internet Explorer?
When is the last time you performed a security update for the OS?

[EDIT: They've moved the free version: http://free.grisoft.com/doc/1 ]


I restored the system to 21st (4 days ago), and the system can function well now.
Just one hour ago, My PC was infected by the same virus again, and luckily I can still restore the system to an hour ago when the system was healthy.

This time I have seen there is a "ipconfig" program running when I pressed the "DEL+ALT+CTRL".

What is this program?

[kwokwai]

I am using IE6.0 with no anti-virus installed.

I never used AVG before, what are the users' comments?
What do you think of this AVG program?

[bear]

IPCONFIG is used to configure your internet settings. Unlikely to be running without something trying to reset your connection, possibly to cause you to have to connect through their site to get anywhere. Sounds like either a home page hijacker or a "man in the middle" setup...

Running IE is risk enough, but to run without some sort of AV program is very dangerous. For an added level of protection, I'd even suggest a decent firewall.

[kwokwai]

will AVG automatically prevent virus if users visit an infected website?

[kwokwai]

IPCONFIG is used to configure your internet settings. Unlikely to be running without something trying to reset your connection, possibly to cause you to have to connect through their site to get anywhere. Sounds like either a home page hijacker or a "man in the middle" setup...


If "ipcongif" is just used to confiure a internet setting, why this setting will prevent me from accessing the internet. An warning said "Connection failed...." after I entered the UserID and Password as usual.

Normally, a virus should hope itself to spread as widely as possible, I wonder why this stupid program won't let me go to the internet.

ha...
ROTFL...

[bear]

AVG should prevent the infection, as long as it's recognized as a virus. Since that AV program updates daily, there's a pretty good chance it will recognize most current viruses.

As for the IPCONFIG question...it could just be badly written. Another thought is that it's redirecting you to the log in by way of the attacker's server, and grabbing your username and password along the way (man in the middle).

[kwokwai]

The AVG program is scanning if there are viruses during bootup, how can I disable this setting? As it always just claims there are no viruses detected, which is not true.

[bear]

You need to open the program and configure it not to scan on startup. As for it not finding viruses, how do you know this to be true, and did you update the definitions before scanning?

[wera]

AVG is as good as it gets and with that resident shield i love it..there is avast also avast home is almost like avg about as good but i would recommend zonealarm and avg *good combo* :D sygate is also a nice firewall.

[kwokwai]

You need to open the program and configure it not to scan on startup. As for it not finding viruses, how do you know this to be true, and did you update the definitions before scanning?

I have opened the program, but I can't see there is anything I can to disable its running bootup.

Some of the viruses are trojan horses, and it said it neither heal it nor delete it, that's why I assume there are still viruses existing in my PC.

[bear]

From the help files:
The Run Bootup scanner option (available under Windows 95/98 only) allows you to enable or disable the launch of the Bootup scanner at the computer startup (from AUTOEXEC.BAT).

It's under "service-> program settings", I believe.

As for the trojans, exactly where is it seeing them, and what are they (just a few names would be fine)?

[kwokwai]

I am sorry, but the version I have downloaded was 7.1.371.

I have found a program setting menu, but it is for setting fast-accessing keys.

I think I can't do better for that...