| #1 | |
|
|
The phone company called to advise me of 'unusually high
activity on our telephone" - to wit, >£80 in premium rate calls in February. 2 x 13 minute calls to one number at £33.00 on Wednesday Feb 25th at 18:31 & 18:45 At the time, we know that the PC was being used by youngest son Mike, looking for an MP3 track for Lesley, with Lesley looking over his shoulder. There is a folder in the history containing parts of the re0dialer program, including a 'licenece.txt' file which outlines their 'terms of use', including the fact that calls are charged at £1.50/min, the system will disconnect after 13 minutes, and give the option to re-connect - calls should cost £20 (The actual charge works out at >£2.50/min) They even give their own details: Futurpago S.L. Tax Number (CIF) B-83301838 PO BOX 13180 28080 - Madrid - Spain A complaint has been filed with ICSTIS, and the phone company have put a bar on 0909 numbers from that line, so it shouldn't happen again. -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #2 | |
|
|
In uk.rec.motorcycles, Rope said:
> A complaint has been filed with ICSTIS, and the phone > company have put a bar on 0909 numbers from that line, so > it shouldn't happen again. Spybot search and destroy http://download.com.com/3000-8022-10....html?tag=list Or you could install broadband. -- Smile...tomorrow will be worse CBR1000FL |
| #3 | |
|
|
In uk.rec.motorcycles, Rope said:
> A complaint has been filed with ICSTIS, and the phone > company have put a bar on 0909 numbers from that line, so > it shouldn't happen again. Spybot search and destroy http://download.com.com/3000-8022-10....html?tag=list -- Smile...tomorrow will be worse CBR1000FL |
| #4 | |
|
|
"Rope" <spam@ukrm.net> wrote in message news:VA.00000f0d.197e101a@ukrm.net... > At the time, we know that the PC was being used by youngest > son Mike, looking for an MP3 track for Lesley, with Lesley > looking over his shoulder. Are you running windows 2000 or XP pro? If so, change the admin account password. Create user accounts for your kids Set up a Local Computer Policy that locks the PC down and restricts what it can do - only what you need and apply these restrictions to your new user accounts. See if that helps. |
| #5 | |
|
|
Whinging Courier spoke:
> Spybot search and destroy > > http://download.com.com/3000-8022-10....html?tag=list Got that, and Ad-aware, and Zone Alarm Pro, and AGV -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #6 | |
|
|
Previously on usenet, Rope said...
> Whinging Courier spoke: > > Spybot search and destroy > > > > http://download.com.com/3000-8022-10....html?tag=list > > Got that, and Ad-aware, and Zone Alarm Pro, and AGV ^^^ There's the problem, you need a UVEX, man. -- Lozzo : The anti-Timo ZZR1100D, GPZ500S, CB250RS x3 BOTAFOT#57/70a, BOTAFOF#57, MIB#22, TCP#7, ANORAK#9, DIAABTCOD#14, UKRMT5BB, IBW#013, MIRTTH#15a/16, BotToS#8, GP#2, SBS#10, SH#3, DFV#14, BONY#9. Url for ukrm newbies : http://www.ukrm.net/faq/ukrmscbt.html http://www.glfuk.com/ for MJK Leathers in the UK. Artificial intelligence is no match for natural stupidity. |
| #7 | |
|
|
In uk.rec.motorcycles, Lozzo said:
> > Got that, and Ad-aware, and Zone Alarm Pro, and AGV > ^^^ > > There's the problem, you need a UVEX, man. Hein Gericke? -- Smile...tomorrow will be worse CBR1000FL |
| #8 | |
|
|
Previously on usenet, Whinging Courier said...
> In uk.rec.motorcycles, Lozzo said: > > > > Got that, and Ad-aware, and Zone Alarm Pro, and AGV > > ^^^ > > > > There's the problem, you need a UVEX, man. > > Hein Gericke? Nope, try Moores of Apsley, Hemel Hempstead -- Lozzo : The anti-Timo ZZR1100D, GPZ500S, CB250RS x3 BOTAFOT#57/70a, BOTAFOF#57, MIB#22, TCP#7, ANORAK#9, DIAABTCOD#14, UKRMT5BB, IBW#013, MIRTTH#15a/16, BotToS#8, GP#2, SBS#10, SH#3, DFV#14, BONY#9. Url for ukrm newbies : http://www.ukrm.net/faq/ukrmscbt.html http://www.glfuk.com/ for MJK Leathers in the UK. Artificial intelligence is no match for natural stupidity. |
| #9 | |
|
|
In uk.rec.motorcycles, Pip said:
> OTOH, something like ZoneAlarm to control which programs can connect > to the 'net, accompanied by DAP the Download Accelerator to give you > exact control of what is downloaded would help if you insist on > maintaining your pikey status. ZA ands DAP are both free, btw. That won't stop the kids clicking "yes" to every damn request for access though. -- Smile...tomorrow will be worse CBR1000FL |
| #10 | |
|
|
In uk.rec.motorcycles, Lozzo said:
> > > There's the problem, you need a UVEX, man. > > > > Hein Gericke? > > Nope, try Moores of Apsley, Hemel Hempstead Hahaha! Actually thanks, but that Shoei you sold me is still practically mint. -- Smile...tomorrow will be worse CBR1000FL |
| #11 | |
|
|
Previously on usenet, Rope said...
> Whinging Courier spoke: > > Have you got a popup stopper? > > Yes - google toolbar It's not that effective. One particular site I visit has regular pop-ups so I installed the google toolbar. It didn't stop them. -- Lozzo : The anti-Timo ZZR1100D, GPZ500S, CB250RS x3 BOTAFOT#57/70a, BOTAFOF#57, MIB#22, TCP#7, ANORAK#9, DIAABTCOD#14, UKRMT5BB, IBW#013, MIRTTH#15a/16, BotToS#8, GP#2, SBS#10, SH#3, DFV#14, BONY#9. Url for ukrm newbies : http://www.ukrm.net/faq/ukrmscbt.html http://www.glfuk.com/ for MJK Leathers in the UK. Artificial intelligence is no match for natural stupidity. |
| #12 | |
|
|
In uk.rec.motorcycles, Rope said:
> No pop-ups, this all happened in the background. Blimey! Have you got the immunize function turned on in SpybotS&D? -- Smile...tomorrow will be worse CBR1000FL |
| #13 | |
|
|
Previously on usenet, Whinging Courier said...
> In uk.rec.motorcycles, Lozzo said: > > > > > There's the problem, you need a UVEX, man. > > > > > > Hein Gericke? > > > > Nope, try Moores of Apsley, Hemel Hempstead > > Hahaha! Actually thanks, but that Shoei you sold me is still practically > mint. Raid Shogun in size 58 IIRC -- Lozzo : The anti-Timo ZZR1100D, GPZ500S, CB250RS x3 BOTAFOT#57/70a, BOTAFOF#57, MIB#22, TCP#7, ANORAK#9, DIAABTCOD#14, UKRMT5BB, IBW#013, MIRTTH#15a/16, BotToS#8, GP#2, SBS#10, SH#3, DFV#14, BONY#9. Url for ukrm newbies : http://www.ukrm.net/faq/ukrmscbt.html http://www.glfuk.com/ for MJK Leathers in the UK. Artificial intelligence is no match for natural stupidity. |
| #14 | |
|
|
In uk.rec.motorcycles, Lozzo said:
> Raid Shogun in size 58 IIRC Indeed, Sir. You RC. The flippin thing's at my missus's place waiting for the fateful day I can return to the roads ![]() -- Smile...tomorrow will be worse CBR1000FL |
| #15 | |
|
|
Rope wrote:
<SNIP> Remove the modem and go ADSL... -- SimonB - South Wales. BOF#32 email simonb@zapikdotcodotuk Triumph Sprint ST, ZXR750L2 Wazimbaki. Kawasaki Z1R For Sale |
| #16 | |
|
|
In uk.rec.motorcycles, Lozzo said:
> > Yes - google toolbar > > It's not that effective. One particular site I visit has regular pop-ups > so I installed the google toolbar. It didn't stop them. Isn't Google toolbar spyware anyway? -- Smile...tomorrow will be worse CBR1000FL |
| #17 | |
|
|
Dwb spoke:
> > All done, everyone has their own accounts > > Own accounts AND restricted local computer policy? Or just local accounts? Yes - Mine and SWMBO only are admin accounts > > > See if that helps. > > > > Nope - they can use the web, it is a useful tool for school if nothing > else! > > Yes of course they can use the web - but you can set the GP so that they > cannot INSTALL anything, or change network settings. > Which, I would think, would solve your problem of odd software and strange > dialups. Of course, but this is a home PC, not a corporate machine. They often use it for games & stuff, as well as college/school stuff, so that amount of lock-down *should* not be necessary - which is one reason why this pisses me off so much! -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #18 | |
|
|
Whinging Courier spoke:
> > No pop-ups, this all happened in the background. > > Blimey! Have you got the immunize function turned on in SpybotS&D? Yup! -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #19 | |
|
|
In uk.rec.motorcycles, Rope said:
> > Blimey! Have you got the immunize function turned on in SpybotS&D? > > Yup! I was going to be one of the first to suggest ADSL but I called it broadband and cancelled the message after I saw you were with force9. Dunno, maybe I'm wrong, are force9 a broadband lot? Anyway, do what the others said innit and ditch the dialup ![]() Oh, you could put those sorts of sites in the restricted zone assuming you use IE. I wouldn't know how it's done on any other browser, sorry. -- Smile...tomorrow will be worse CBR1000FL |
| #20 | |
|
|
"Rope" <spam@ukrm.net> wrote in message news:VA.00000f12.19aa28fe@ukrm.net... > Of course, but this is a home PC, not a corporate machine. They often use it > for games & stuff, as well as college/school stuff, so that amount of > lock-down *should* not be necessary - which is one reason why this pisses me > off so much! <Shrug> Install Linux. |
| #21 | |
|
|
> Isn't Google toolbar spyware anyway?
No, its perfectly clean. You can choose the basic one or the advanced one. The advanced one will report back usage info to help google rate their pages. Get broadband and ripp out the modem. -- Matthew O'Neill - Mash http://www.3dfluff.com http://learn.3dfluff.com |
| #22 | |
|
|
In uk.rec.motorcycles, Mash said:
> No, its perfectly clean. You can choose the basic one or the advanced one. > The advanced one will report back usage info to help google rate their > pages. I didn't know that ![]() > Get broadband and ripp out the modem. Indeed, you won't regret it. I used to think my dialup was quite quick but stuff waiting two hours for something I can get in about 5 minutes now. -- Smile...tomorrow will be worse CBR1000FL |
| #23 | |
|
|
Eric the brave spoke:
> Remove the modem and go ADSL... In May! -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #24 | |
|
|
On Sat, 06 Mar 2004 19:01:10 GMT, Rope <spam@ukrm.net> wrote:
>Whinging Courier spoke: >> Spybot search and destroy >> >> http://download.com.com/3000-8022-10....html?tag=list > >Got that, and Ad-aware, and Zone Alarm Pro, and AGV How about user education? -- GSXR1000 DIAABTCOD#11 BOTAFOT#75 ex-two#19 "We take these risks, not to escape from life, but to prevent life escaping from us." http://www.bensales.com |
| #25 | |
|
|
Rope <spam@ukrm.net> wrote:
> Dwb spoke: > > > All done, everyone has their own accounts > > > > Own accounts AND restricted local computer policy? Or just local accounts? > > Yes - Mine and SWMBO only are admin accounts > > > > > See if that helps. > > > > > > Nope - they can use the web, it is a useful tool for school if nothing > > else! > > > > Yes of course they can use the web - but you can set the GP so that they > > cannot INSTALL anything, or change network settings. > > Which, I would think, would solve your problem of odd software and strange > > dialups. > > Of course, but this is a home PC, not a corporate machine. They often use it > for games & stuff, as well as college/school stuff, so that amount of > lock-down *should* not be necessary - which is one reason why this pisses me > off so much! Sir wants a nice little Mac ;-) -- Steve H 'You're not a real petrolhead unless you've owned an Alfa Romeo' http://www.italiancar.co.uk Honda VFR800 - MZ ETZ300 VW Golf Cabrio - Alfa 75TS - Nissan Primera(I can't explain that either) BoTAFOT #87 - BoTAFOF #18 - MRO # - UKRMSBC #7 - Apostle #2 - YTC # |
| #26 | |
|
|
On Sat, 06 Mar 2004 19:23:25 GMT, eric the brave scrawled:
> Rope wrote: > ><SNIP> > > Remove the modem and go ADSL... > > > Either that, or if you can't - get an IP sharer, plug the modem into that and set the computer up to use the lan connection it supplies. Dialers can't change the config on it, and if the machine crashes or needs a restart, the dialup connection won't be lost. They're a godsend - except when someone else keeps hogging the bandwidth by browsing ebay when you want to play online games. I can't wait until adsl gets put in (in a fortnight hopefully!) -- VFR400 nc30 - Wheee! http://www.noddingdogs.org - find bikers in your area. Visit http://www.rexx.co.uk to email me. |
| #27 | |
|
|
Ben <ukrm@bensales.com> wrote in message
<5kbk40lgaj4pr7f8u5sapeeajijofumsqd@4ax.com>: >On Sat, 06 Mar 2004 19:01:10 GMT, Rope <spam@ukrm.net> wrote: > >>Whinging Courier spoke: >>> Spybot search and destroy >>> >>> http://download.com.com/3000-8022-10....html?tag=list >> >>Got that, and Ad-aware, and Zone Alarm Pro, and AGV > >How about user education? What, you're recommending that Rope goes on a course? -- it's better to burn out than fade away |
| #28 | |
|
|
In an earlier posting, spam@ukrm.net wrote...
> The phone company called to advise me of 'unusually high > activity on our telephone" - to wit, >£80 in premium rate > calls in February. [snip dialer hijack stuff] Having read through all the various replies, the one thing I can add is do you have the modem speaker switched on? It won't stop this happening, but bells should start ringing when you get the dial tone coming out of the speakers every 13 minutes. Though I suppose they could make the dialer switch off the modem as well as hijack it. I'll go back to lurking... -- Big Tim - use this with a dot in the middle for emails [RD400E, B12, XR400R - in length of service order] |
| #29 | |
|
|
Big Tim spoke:
> Having read through all the various replies, the one > thing I can add is > do you have the modem speaker > switched on? > > It won't stop this happening, but bells should start > ringing when you > get the dial tone coming out of the > speakers every 13 minutes. Though I > suppose they > could make the dialer switch off the modem as well as > hijack it. Exactly. > I'll go back to lurking... Byee. -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #30 | |
|
|
"Rope" <spam@ukrm.net> wrote in message
news:VA.00000f12.19aa28fe@ukrm.net > Of course, but this is a home PC, not a corporate machine. Doesn't matter. It's a powerful number-cruncher with a world-wide connection. If it's not protected, it'll soon be a spam-proxy. > They often use it for games & stuff, as well as college/school stuff But what do *other people* use it for? > so that amount of lock-down *should* not be necessary You're assuming that everyone who sends packets to your machine is as friendly and honest as you are. This isn't the case... You need to secure your PC for the same reason you need to secure your bike - because if you don't, someone will make off with it. > which is one reason why this pisses me off so much! Once users start to take security more seriously, the global spam problem might start to reduce a bit. But I'm not going to hold my breath. Vic. -- Posted via Mailgate.ORG Server - http://www.Mailgate.ORG |
| #31 | |
|
|
Vic spoke:
> > so that amount of lock-down *should* not be necessary > > You're assuming that everyone who sends packets to your machine is as > friendly and honest as you are. This isn't the case... Do tell! > You need to secure your PC for the same reason you need to secure your > bike - because if you don't, someone will make off with it. > > > which is one reason why this pisses me off so much! > > Once users start to take security more seriously, the global spam > problem might start to reduce a bit. But I'm not going to hold my > breath. Lookit! - I have ZoneAlarm Pro or Norton firewall, Ad-Aware, Spybot S&D and NAV or AVG on every machine here -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #32 | |
|
|
"Rope" <spam@ukrm.net> wrote in message
news:VA.00000f1b.1dc6c748@ukrm.net > > You need to secure your PC for the same reason you need to secure your > > bike - because if you don't, someone will make off with it. > > Lookit! - I have ZoneAlarm Pro or Norton firewall, Ad-Aware, Spybot S&D > and NAV or AVG on every machine here Right, so your bike has alarms, immobiliser, chains, and a garage. Do you let anyone off the street take it out for a blat? The trick is to keep control of your keys and lend them only to those people you *know* won't abuse your trust. So it is with PCs - when a window pops up to say you've got to do something, mistrust it until you know it is trustworthy. Additionally, just as you'd make sure both front and back doors of the garage are shut, so you should make sure all entry points to your PC are controlled. That means that, if you must use IE / OE etc., make sure you've turned off all those "helpful" things they keep putting in. Otherwise, you end up executing every malware sent you by every script kiddie in christendom... Vic. -- Posted via Mailgate.ORG Server - http://www.Mailgate.ORG |
| #33 | |
|
|
On Sat, 06 Mar 2004 19:01:10 +0000, Rope wrote:
> Whinging Courier spoke: >> Spybot search and destroy >> >> http://download.com.com/3000-8022-10....html?tag=list > > Got that, and Ad-aware, and Zone Alarm Pro, and AGV Heh, you're using IE as a web browser aren't you? -- Muck Bandit 600n; CG125(MSOHPR); DS#1 ; DOMO# ; SH#2 "There's no place like ::1" Remove _TEETH_ to e-mail |
| #34 | |
|
|
Vic spoke:
> > Lookit! - I have ZoneAlarm Pro or Norton firewall, Ad-Aware, Spybot S&D > > and NAV or AVG on every machine here > > Right, so your bike has alarms, immobiliser, chains, and a garage. Do > you let anyone off the street take it out for a blat? > > The trick is to keep control of your keys and lend them only to those > people you *know* won't abuse your trust. So it is with PCs - when a > window pops up to say you've got to do something, mistrust it until you > know it is trustworthy. Er... riiiight.... At the last count we have 8 pcs in the house, counting 2 ancient P1s, 1 borked laptop, 1 semi-borked lap-top, 1 old P2-300 games only PC, the main 'family' PC with 'net access for use by SMBO and 18y/o daughter for their college work, and 1 teenage son for school work, plus Ross's own lap-top to help with his dyslexia. Plus this one, my own main working lap-top. Now come and sort out the security on that lot, without me having to be on hand every time anyone wants to do anything other than fire up Word or something. > Additionally, just as you'd make sure both front and back doors of the > garage are shut, so you should make sure all entry points to your PC are > controlled. That means that, if you must use IE / OE etc., make sure > you've turned off all those "helpful" things they keep putting in. > Otherwise, you end up executing every malware sent you by every script > kiddie in christendom... Psssst! - I've worked[1] in IT for around 20 years. Take a look at the headers - I don't use OE or any of those 'helpful' thing MS keeps offering me. [1] Well, YKWIM -- Rob_P UKRM(at)indqualtec.co.uk uppercase(d) BBIWYMC#1 BOG#11? MRO#31 IBCDBBB#1(kotl) FJ1200, CCM130 "Here we saw Tuxford in the Clays, that is to say, Tuxford in the Dirt and a little dirty market town it is, suiable to its name" Daniel Defoe |
| #35 | |
|
|
In article <VA.00000f1c.1e86192b@ukrm.net>, Rope says...
> At the last count we have 8 pcs in the house, counting 2 ancient P1s, 1 > borked laptop, 1 semi-borked lap-top, 1 old P2-300 games only PC, the main > 'family' PC with 'net access for use by SMBO and 18y/o daughter for their > college work, and 1 teenage son for school work, plus Ross's own lap-top to > help with his dyslexia. Plus this one, my own main working lap-top. > > Now come and sort out the security on that lot, without me having to be on > hand every time anyone wants to do anything other than fire up Word or > something. Why don't you network them, and set the modem up to hang off the back of a standalone linux firewall, one with an HTTP proxy server on it. You can then: A) not worry about a winodws program running it's own dialler B) Set all the sites you don't want accessing in one place C) Put in *any* port filtering you see fit. D) Run a single DHCP and DNS server for any machine on your home network. |
| #36 | |
|
|
On Sun, 07 Mar 2004 18:17:45 +0000, Ginge wrote:
> In article <VA.00000f1c.1e86192b@ukrm.net>, Rope says... >> At the last count we have 8 pcs in the house, counting 2 ancient P1s, 1 >> borked laptop, 1 semi-borked lap-top, 1 old P2-300 games only PC, the main >> 'family' PC with 'net access for use by SMBO and 18y/o daughter for their >> college work, and 1 teenage son for school work, plus Ross's own lap-top to >> help with his dyslexia. Plus this one, my own main working lap-top. >> >> Now come and sort out the security on that lot, without me having to be on >> hand every time anyone wants to do anything other than fire up Word or >> something. > > Why don't you network them, and set the modem up to hang off the back of > a standalone linux firewall, one with an HTTP proxy server on it. > > You can then: > > A) not worry about a winodws program running it's own dialler > B) Set all the sites you don't want accessing in one place > C) Put in *any* port filtering you see fit. > D) Run a single DHCP and DNS server for any machine on your home > network. I used an SMC Barricade router with a 56k modem to good effect.. not as jucy as a PC either, a lot smaller too. -- Muck Bandit 600n; CG125(MSOHPR); DS#1 ; DOMO# ; SH#2 "There's no place like ::1" Remove _TEETH_ to e-mail |
| #37 | |
|
|
"Rope" <spam@ukrm.net> wrote in message
news:VA.00000f1c.1e86192b@ukrm.net > At the last count we have 8 pcs in the house I'm down to 5 PCs, 4 Sparcs, an SGI Indy, and an HP-9000. I occasionally have the odd "project" on the network as well. Spookily enough, I've yet to get hit by anything - and I've never run up a phone bill like that getting MP3s, either... Yes, there's a bit of work to do to secure it. There are some useful recommendations elsewhere in this thread. It's your choice whether or not to do this, just as it's your choice whether or not to lock your bike when you leave it. The results are rather similar, too... > Psssst! - I've worked[1] in IT for around 20 years. Really? Do you not secure networks as standard practice? Vic. -- Posted via Mailgate.ORG Server - http://www.Mailgate.ORG |