Ask Experts Questions for FREE Help !
Ask
    MagikPoo's Avatar
    MagikPoo Posts: 59, Reputation: 2
    Junior Member
     
    #1

    Nov 13, 2004, 08:20 PM
    Am I just paranoid?
    I thought I knew a lot, but every now and them I get stumpped and this one has me paranoid.
    Recently my internet connection has slowed or in some cases stopped, its not my ISP, I'v asked and I think I'm the victim of some sort of snooper or some dormant trogan or virus.
    When I open up my browser - Mozilla Firefox Ver 1.0- at the bottom of the screen there is a status bar that tells you the pages that open and sometimes the URL that the info is coming form, but lately, every web site that I go to tells me " transfering info from 127.0.0.1" Where is that? And who the hell is that? I know my IP address and DNS is not that and the router that I use is not that IP address or its DNS or subnet mask, I'v never heard of that IP address and I have no clue to who it is or what they want.
    I have Zone alarm as a firewall, ADSL modem, motorola router, OS Win98SE
    If you need more info no prob, except for shoe size, where I'm having thanks giving, that's a whole other story.
    urmod4u's Avatar
    urmod4u Posts: 248, Reputation: 4
    Full Member
     
    #2

    Nov 14, 2004, 03:57 AM
    127.0.0.1 is a "loopback" IP address. It is not associated with any hardware or network. Its purpose is mainly for testing and does not go out of your own machine (i.e.: 127.0.0.1 is a local host in your own PC - mozilla seems to use it).
    ==>>> Be sure to specify to "no proxy" in your browser's settings, or if you have to, specify "No Proxy" for: localhost, 127.0.0.1
    .
    murph's Avatar
    murph Posts: 15, Reputation: 2
    New Member
     
    #3

    Nov 14, 2004, 04:20 AM
    Some time ago I inadvertently downloaded some sort of trojan type thing that added a whack of entries to my "HOSTS" file. Basically, there were approximately 200 entries for various security sites e.g. Lavasoft was in there.
    It added a 127.*.*.* address against that site so if I tried to browse to that site, I got an error message saying page not found etc. I use XP and IE for my web browser. The system checks this file first to see if the requested page is listed with its IP address. Because this file told my system to go to say 127.0.0.5 (for example) for www.lavasoft.de, obviously, the page could not be found as it was pointing back to me (see prev post.)
    I'm not that au fait with Windows 98, but it might be worth looking at as from what you are saying, this seems to be what similar to what I was experiencing.
    I know very little about Windows 98 as I said, but on XP, this file is in C:\Windows\system32\Drivers\ETC\HOSTS - if you find a file like this, right click on it and open with notepad. It should read as:

    127.0.0.1 localhost

    Or something similar - just for a bit of added info, if there is any text in between a #, then don't be alarmed as that is just a comment and doesn't alter what you system does.
    urmod4u's Avatar
    urmod4u Posts: 248, Reputation: 4
    Full Member
     
    #4

    Nov 14, 2004, 04:41 AM
    Just wondering, did you, by any means, get rid of that Trojan? Because of course, this is the first thing to do.
    Next, you can remove by simple editing all entries except the "localhost" one.
    BTW: check if you find the HOSTS.BAK file, and have a look at its contents.
    murph's Avatar
    murph Posts: 15, Reputation: 2
    New Member
     
    #5

    Nov 14, 2004, 05:28 AM
    Yes, the trojan was gone before I did any of that other stuff. I have since upped my security but at the time, I found it by using the free virus scanner on Symantec's website. I then did a search on Symantec with the name of the trojan in order to obtain removal details.
    Most of these things add entries to your registry which is why people often complain about re-occuring problems; e.g. they only look at removing the symptoms i.e. altering your homepage back, getting rid of HOSTS file entries or deleting any sites from the favourites. Obviously, one needs to eradicate the source before doing any of these other things therefore, you will with many trojans, unless someone has written a removal application, need to delve into your registry to delete the offending keys.
    fredg's Avatar
    fredg Posts: 4,926, Reputation: 674
    Ultra Member
     
    #6

    Nov 14, 2004, 07:28 AM
    Isp
    HI,
    There are 2 great, free, programs to rid your computer of Trojans, spyware/advertising ware.
    Any of these could cause your surfing to stop.

    You can get them at:

    http://www.security-related.com/download2.htm
    Download: SpyBot Search & Destroy; 1.3

    AdAware at:
    www.lavasoftusa.com
    Download: AdAware_SE

    I also use Win98SE, and both the above work great...
    Best wishes,
    fredg
    urmod4u's Avatar
    urmod4u Posts: 248, Reputation: 4
    Full Member
     
    #7

    Nov 14, 2004, 11:39 AM
    Magicpoo, are you using any form of virus-scanner? You did not mention it. And today, it's indispensable. Adaware and Spybot are very good, but are not focused on viruses or trojans. You need an antivirus program in addition.
    MagikPoo's Avatar
    MagikPoo Posts: 59, Reputation: 2
    Junior Member
     
    #8

    Nov 17, 2004, 05:07 PM
    hello fokes thanks for the replys!
    OK here's the shiznit, I already do ad-aware and spybot S&D two great programs that I also recommend thank you fredg, I did what you said urmod4u and yep everything is good,
    Murph got me a little paranoid but id use the above programs and there was no significant problems, Oh and Murph local host = 127.0.0.1 so that's cool, then I went to trendmicro.com to do a online virus check no problems so I down loaded pc-cillin and found a java script virus no problem I got it removed. But had to get rid of it because it confilicted with zonealarme, so right now I have no virus checker. I know, I know, its like running around with no pants on, burrr!

    Any help on a good free antivirus program just for now?

    I still get it but less frequently, is there any free tutorials about this kind of thing?

    and I'm now off to Symantec's web site for a free virus checking, thank you murph.
    urmod4u's Avatar
    urmod4u Posts: 248, Reputation: 4
    Full Member
     
    #9

    Nov 17, 2004, 05:15 PM
    See:
    http://free.grisoft.com/freeweb.php
    For a free virusscanner (AVG virusscanner from GRISOFT)
    murph's Avatar
    murph Posts: 15, Reputation: 2
    New Member
     
    #10

    Nov 21, 2004, 11:29 AM
    There's a pretty cool site that you may or may not be aware of - http://www.auditmypc.com/
    Have a look and see if it helps. I found it pretty OK for some stuff and as a good start before trying more technical sites etc. There are a few different scans it can perform including a full on port scan, anti-virus scan and a firewall checker.
    Incidentally, I failed to mention before - some ISP's use a cache server to serve you your web pages and some of these online scanners will not pick up your IP address, only the IP of the cache server. Check that the IP being scanned is yours...
    urmod4u's Avatar
    urmod4u Posts: 248, Reputation: 4
    Full Member
     
    #11

    Nov 21, 2004, 01:19 PM
    That IP stuff you talk about is nonsense. EVERY server keeps track of your IP address.

Not your question? Ask your question View similar questions

 

Question Tools Search this Question
Search this Question:

Advanced Search

Add your answer here.


Check out some similar questions!

Am I paranoid? Any advice welcome [ 7 Answers ]

Feeling a bit :confused: Been feeling a bit off, very nauseous, very tired, very upset stomach although not eaten much due to being nauseous! Been off birth control for about 6 months. Had unprotected sex with partner on 15th July, what I thought was period started on 17th, started taking...

Paranoid [ 5 Answers ]

Hopefully someone can help me... I just got my puppy two days ago... before we picked her up we were told from our breeder (well known breeder, excellent) that one of the dogs in the litter had worms... and she told us that our puppy didn't, and she gave us a pill to give her in a weeks time......

Need reassurance, I am so paranoid. [ 11 Answers ]

Ok, for those of you who have read previous posts you will know that I have been pregnant before (had an abortion because I was back into a corner etc) and that recently I have been drinking lots of water which has been making me feel great. I also smoke - I have cut down and I am hoping to quit....

Call me paranoid... or not. [ 3 Answers ]

I would like to know how to counter Ultra high frequency radar which may or May not be used by a given "neighbor" Of mine?? :mad:


View more questions Search