Post: The Ultimate Computer Security Thread
04-15-2011, 04:54 PM #1
(adsbygoogle = window.adsbygoogle || []).push({});
If you just got a virus or you wanna check do you have... then read this! :yuno:


So there are much of ways to check it.. Im going from the easiest till the hardest.

Content


  • Scan your computer
  • Looking for processes
  • Looking for active connections
  • Disabling the startup of a virus
  • If you succesfully removed a virus...
  • If you still have the virus :(
  • How to prevent getting a virus
  • Credits <3



Scan your computer


I recommend you to download one or more of these tools.

  • Malwarebytes - You must login or register to view this content.
  • Spybot: Search & Destroy - You must login or register to view this content.
  • SuperAntiSpyware - You must login or register to view this content.


Do a full scan with it / them. If it found anything delete them and restart your computer immediatly.
If you think you didnt get rid of it continue reading...

Looking for processes


This basicully tells if you got a active virus (rat / keylogger) on your computer.

If you see any suspicious processes, tell to me.

Non suspicious processes

  • taskhost.exe
  • csrss.exe
  • nvvsvc.exe
  • winlogon.exe
  • svchost.exe
  • explorer.exe


If you see same process more than once, its a bad thing (but you can have many svchosts)

If you think you found a suspicious process, end it.

And with this method (thanks to Curt), you can check if your csrss.exe is infected
You can tell if your csrss.exe is infected by this.

1) go to task manager and locate the .exe itself as shown here -
You must login or register to view this content.

2) now you gotta right click and go down to properties You must login or register to view this content.

3) if your csrss.exe has the same ticks as mine then you are not infectedYou must login or register to view this content.


Looking for active connections


So, this will tell active connections to you.

Go Start>Run>cmd>type netstat - and wait till it lists all connections.
You should see many 127.0.0 connections aswell your ip connections on the Local Addres tab. They are fine.

If you look under Foreign Address and find your ip, there should be "xxx.xxx.xxx.xx:80" They are fine too. That 80 is a port number, and it shows up when your internet is on.
If there is many non-80 or 25 ports, close ALL programs FULLY and do this scan again.
If there still is "xxx.xxx.xxx.xx:1524" or a number between 1-9999 it MAY be a rat or keylogger. Don't worry we will fix it Smile

Disabling the startup of a virus


Go Start>run>msconfig.
Then go to "startup" tab and try to find a suspicious application there.
If you see something like "server.exe" uncheck it!
Now the rat / keylogger wont start when the computer boots up next time Smile We basicully killed the virus.

If you succesfully removed a virus...


Alright, so congrantulations if you got rid of a virus! Smile
Now download a program called You must login or register to view this content..
We will fix the registry with it, becouse rats and keyloggers may **** it up.
I think you find a way how to do it with CCleaner :yuno:

...I had over 300 errors in Registry week ago, lol


If you still have the virus :(


So, if you still have the virus I would recommend to format your PC.
First, take your external harddrive and put all important things to it (pics, porn, small games, DON't put any keygens or hacking tools)
You can google a way how to Format your computer... Good luck! Cool Man (aka Tustin)

How to prevent getting a virus


Now, you don't want any viruses don't you?
DownloadYou must login or register to view this content.
Now run all malicious files in it, and check how many processes pops up (Sandboxie Control)

Scan your computer every week with your Anti-Malware tool.

And... dont download everything! Smile

Good luck

// There are much of more advanced ways to check if you are infected, but these are the basic ones.

Credits
Tuhoaja, me for writing this thingy
Coders that made those great programs!

PS. Ignore my english Cool Man (aka Tustin)
(adsbygoogle = window.adsbygoogle || []).push({});

The following 8 users say thank you to Tuhoaja for this useful post:

-NoSoul4Evr-, Epic?, hustlnpoon, Mr. Bean, PENNSTATE, ssg458394, xK-ayne, zeusthunder10
04-15-2011, 04:58 PM #2
bigit1029
NGU Orginal
Originally posted by Tuhoaja View Post
If you just got a virus or you wanna check do you have... then read this! :yuno:


So there are much of ways to check it.. Im going from the easiest till the hardest.

Content


  • Scan your computer
  • Looking for processes
  • Looking for active connections
  • Disabling the startup of a virus
  • If you succesfully removed a virus...
  • If you still have the virus :(
  • How to prevent getting a virus
  • Credits <3



Scan your computer


I recommend you to download one or more of these tools.

  • Malwarebytes - You must login or register to view this content.
  • Spybot: Search & Destroy - You must login or register to view this content.
  • SuperAntiSpyware - You must login or register to view this content.


Do a full scan with it / them. If it found anything delete them and restart your computer immediatly.
If you think you didnt get rid of it continue reading...

Looking for processes


This basicully tells if you got a active virus (rat / keylogger) on your computer.

If you see any suspicious processes, tell to me.

Non suspicious processes

  • taskhost.exe
  • csrss.exe
  • nvvsvc.exe
  • winlogon.exe
  • svchost.exe
  • explorer.exe


If you see same process more than once, its a bad thing (but you can have many svchosts)

If you think you found a suspicious process, end it.

Looking for active connections


So, this will tell active connections to you.

Go Start>Run>cmd>type netstat - and wait till it lists all connections.
You should see many 127.0.0 connections aswell your ip connections on the Local Addres tab. They are fine.

If you look under Foreign Address and find your ip, there should be "xxx.xxx.xxx.xx:80" They are fine too. That 80 is a port number, and it shows up when your internet is on.
If there is many non-80 or 25 ports, close ALL programs FULLY and do this scan again.
If there still is "xxx.xxx.xxx.xx:1524" or a number between 1-9999 it MAY be a rat or keylogger. Don't worry we will fix it Smile

Disabling the startup of a virus


Go Start>run>msconfig.
Then go to "startup" tab and try to find a suspicious application there.
If you see something like "server.exe" uncheck it!
Now the rat / keylogger wont start when the computer boots up next time Smile We basicully killed the virus.

If you succesfully removed a virus...


Alright, so congrantulations if you got rid of a virus! Smile
Now download a program called You must login or register to view this content..
We will fix the registry with it, becouse rats and keyloggers may **** it up.
I think you find a way how to do it with CCleaner :yuno:

...I had over 300 errors in Registry week ago, lol


If you still have the virus :(


So, if you still have the virus I would recommend to format your PC.
First, take your external harddrive and put all important things to it (pics, porn, small games, DON't put any keygens or hacking tools)
You can google a way how to Format your computer... Good luck! Cool Man (aka Tustin)

How to prevent getting a virus


Now, you don't want any viruses don't you?
DownloadYou must login or register to view this content.
Now run all malicious files in it, and check how many processes pops up (Sandboxie Control)

Scan your computer every week with your Anti-Malware tool.

And... dont download everything! Smile

Good luck

Credits
Tuhoaja, me for writing this thingy
Coders that made those great programs!

PS. Ignore my english Cool Man (aka Tustin)


thanks for this. this will help as there seems to be far more rats around recently Smile
04-15-2011, 05:32 PM #3
Tully96
I'm A Cookie!
Originally posted by Tuhoaja View Post
If you just got a virus or you wanna check do you have... then read this! :yuno:


So there are much of ways to check it.. Im going from the easiest till the hardest.

Content


  • Scan your computer
  • Looking for processes
  • Looking for active connections
  • Disabling the startup of a virus
  • If you succesfully removed a virus...
  • If you still have the virus :(
  • How to prevent getting a virus
  • Credits <3



Scan your computer


I recommend you to download one or more of these tools.

  • Malwarebytes - You must login or register to view this content.
  • Spybot: Search & Destroy - You must login or register to view this content.
  • SuperAntiSpyware - You must login or register to view this content.


Do a full scan with it / them. If it found anything delete them and restart your computer immediatly.
If you think you didnt get rid of it continue reading...

Looking for processes


This basicully tells if you got a active virus (rat / keylogger) on your computer.

If you see any suspicious processes, tell to me.

Non suspicious processes

  • taskhost.exe
  • csrss.exe
  • nvvsvc.exe
  • winlogon.exe
  • svchost.exe
  • explorer.exe


If you see same process more than once, its a bad thing (but you can have many svchosts)

If you think you found a suspicious process, end it.

Looking for active connections


So, this will tell active connections to you.

Go Start>Run>cmd>type netstat - and wait till it lists all connections.
You should see many 127.0.0 connections aswell your ip connections on the Local Addres tab. They are fine.

If you look under Foreign Address and find your ip, there should be "xxx.xxx.xxx.xx:80" They are fine too. That 80 is a port number, and it shows up when your internet is on.
If there is many non-80 or 25 ports, close ALL programs FULLY and do this scan again.
If there still is "xxx.xxx.xxx.xx:1524" or a number between 1-9999 it MAY be a rat or keylogger. Don't worry we will fix it Smile

Disabling the startup of a virus


Go Start>run>msconfig.
Then go to "startup" tab and try to find a suspicious application there.
If you see something like "server.exe" uncheck it!
Now the rat / keylogger wont start when the computer boots up next time Smile We basicully killed the virus.

If you succesfully removed a virus...


Alright, so congrantulations if you got rid of a virus! Smile
Now download a program called You must login or register to view this content..
We will fix the registry with it, becouse rats and keyloggers may **** it up.
I think you find a way how to do it with CCleaner :yuno:

...I had over 300 errors in Registry week ago, lol


If you still have the virus :(


So, if you still have the virus I would recommend to format your PC.
First, take your external harddrive and put all important things to it (pics, porn, small games, DON't put any keygens or hacking tools)
You can google a way how to Format your computer... Good luck! Cool Man (aka Tustin)

How to prevent getting a virus


Now, you don't want any viruses don't you?
DownloadYou must login or register to view this content.
Now run all malicious files in it, and check how many processes pops up (Sandboxie Control)

Scan your computer every week with your Anti-Malware tool.

And... dont download everything! Smile

Good luck

Credits
Tuhoaja, me for writing this thingy
Coders that made those great programs!

PS. Ignore my english Cool Man (aka Tustin)


Do you know how to speed up startup and Internet explorer? (my dad uses ie)
04-15-2011, 05:45 PM #4
Originally posted by Tully96 View Post
Do you know how to speed up startup and Internet explorer? (my dad uses ie)


With CCleaner you can speed up your internet
04-15-2011, 06:10 PM #5
Tully96
I'm A Cookie!
Originally posted by Tuhoaja View Post
With CCleaner you can speed up your internet


Thanks. How long does your disk defrag take cuz I had to stop it after like 3 hours
04-15-2011, 06:16 PM #6
Originally posted by Tully96 View Post
Thanks. How long does your disk defrag take cuz I had to stop it after like 3 hours


It can take about 15 hours
04-15-2011, 06:21 PM #7
Tully96
I'm A Cookie!
Originally posted by Tuhoaja View Post
It can take about 15 hours


Holy shit that's a long time. Does it help a lot?
04-15-2011, 06:28 PM #8
Originally posted by Tully96 View Post
Holy shit that's a long time. Does it help a lot?


I haven't tried it ever, so Im not sure :banhamma:
04-16-2011, 12:14 AM #9
IPG
Haxor!
Defragging isn't really even noticeable unless your computer is really really slow
04-16-2011, 12:18 AM #10
oO-GKUSH-Oo
< ^ > < ^ >
Nice, This might come in handy one day

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo