Tagged Questions
1
vote
1answer
191 views
Identifiying weird chinese registry entries in CurrentControlSet\Services
I noticed chinese characters inside my register under HKLM\System\CurrentControlSet\Services. Inside these there was nothing. I googled the strings and found nothing. Anyway for me to identify these? ...
0
votes
1answer
63 views
Good resource for evaluting AV and anti Malware software?
I am looking for good resources to use to compare the effectiveness of various antivirus/antimalware software solutions. In particular, I am comparing Windows Security Essentials against Symantec ...
11
votes
4answers
1k views
How do I deal with the removal/eradication of an unknown worm on our network?
TL;DR
I'm pretty sure our small network has been infected by some sort of worm/virus. It seems to only be afflicting our Windows XP machines, however. Windows 7 machines and Linux (well, yea) ...
0
votes
1answer
94 views
Security & Malware Protection for Windows 2008 Server (with RDP)
I am running an ASP.NET site on a windows 2008 server with RDP access to the server. Installing or enabling firewalls shuts off my RDP access and multiple other issues. My hosting provider is very ...
3
votes
3answers
122 views
Training High School Students on Security - What harmless “viruses” can I install that they can find?
I'm training some high school students interested in OS security (specifically, Windows Server 2003/2008), and though I've gone over a lot of the "in-theory" stuff, some hands on would be great. ...
1
vote
2answers
96 views
md5sum or sha1sum of legitmate microsoft system files
Is there a database or repository of the legitimate checksums for Microsoft system files? We think we have a 0day on DNS for Windows 2003 SP2 using IRC for command and control. (Latest McAfee does not ...
6
votes
12answers
643 views
Hardening a financially critical Windows computer
One of the risks to small and medium businesses is losing your bank credentials to bad guys by use of a key logger or other malware as Bruce Schneier blogs about. A particular threat is real-time key ...
4
votes
3answers
412 views
Some questions about the Microsoft Windows Malicious Software Removal Tool (MRT)
Does this program automatically run? If so, when and how often?
Is it automatically updated?
How do you disable it?
How can you tell if it is running?
What versions of Windows is it installed on?
2
votes
9answers
322 views
How do you deal with malware on Windows?
Simple: what do you do when they ask you the common question: "Can you clean my pc? Its so slow."