Help! ccsvchst.exe is killing my machine!

[d000hg]

I think the Windows 7 firewall does that too. It has outbound rules that by default block programs/services unless you specify otherwise. A warning appears if something attempts to make an outbound call

Yep, although I didn't realise that wasn't in XP too. If you install a game you sometimes get a popup when you try to play online the first time, etc.

[Ruprect]

Get a mac

HTHBISID

[Sysman]

Get a mac

And if you do get a Mac, don't run Norton on it.

(I don't know if it is still sold, but a few years ago I saws lots of reports that Norton for Mac was a resource hog)

[amcdonald]

Zone alarm stops outbound vectors so rogue processes can't dial home with your details. A router firewall only blocks inbound.

I guess it works fine, I've not had a virus since using it (admitedly the paid version though) for years

[PAH]

I remember reading an article a few years ago in one of the computer magazines where they did a test for how true it was that the internet was awash with nasties trying to infect your home computer via an unsecured internet connection.

I think they had the PC connected to an unsecure connection for less that a day before they had all sorts of infections uploaded to it.

Of course, this could have been a stunt, or they could have been using the office network whose IP address is probably well known to the hacker community.

Maybe the story had 'advertisement for Zone Alarm' at the top.

Moral of the story: There's free protection available (usually out of the box) so may as well use it, as long as it doesn't hog too many resources.

[doodab]

I remember reading an article a few years ago in one of the computer magazines where they did a test for how true it was that the internet was awash with nasties trying to infect your home computer via an unsecured internet connection.

I think they had the PC connected to an unsecure connection for less that a day before they had all sorts of infections uploaded to it.

I recall around the end of 2004 I helped a friend with a USB modem internet connection (which had no firewall) reinstall XP. By the time you had connected, mdownloaded and started installing updates, SP2 and anti-virus software it was infected i.e. within minutes of connecting. In the end I had to download XP SP2 and AVG from elsewhere and install offline in order to get the PC well protected enough before connecting.

[Mason Boyne]

Get a mac

HTHBISID

Hope That Helps But I See I'm Dyslexic...?

[DaveB]

I remember reading an article a few years ago in one of the computer magazines where they did a test for how true it was that the internet was awash with nasties trying to infect your home computer via an unsecured internet connection.

I think they had the PC connected to an unsecure connection for less that a day before they had all sorts of infections uploaded to it.

Of course, this could have been a stunt, or they could have been using the office network whose IP address is probably well known to the hacker community.

Maybe the story had 'advertisement for Zone Alarm' at the top.

Moral of the story: There's free protection available (usually out of the box) so may as well use it, as long as it doesn't hog too many resources.

I recall around the end of 2004 I helped a friend with a USB modem internet connection (which had no firewall) reinstall XP. By the time you had connected, mdownloaded and started installing updates, SP2 and anti-virus software it was infected i.e. within minutes of connecting. In the end I had to download XP SP2 and AVG from elsewhere and install offline in order to get the PC well protected enough before connecting.

SANS run a (semi) real time survival time chart tracking the time between connecting to the internet and the first attempted connection from a malicous source. Asuming an unpatched system the first attempt will almost certainly result in infection of the target. It generally hovers somwehere around 10 minutes.

SANS Survival Time Chart

[PAH]

It generally hovers somwehere around 10 minutes.

Maybe ISPs should concentrate on filtering out this stuff at source. Every PC or hosted server has to connect to the internet somewhere, so first port of call should be firewalled against the scum.

Why should those at the end of the chain have to protect against those at the beginning?

[doodab]

Maybe ISPs should concentrate on filtering out this stuff at source. Every PC or hosted server has to connect to the internet somewhere, so first port of call should be firewalled against the scum.

Why should those at the end of the chain have to protect against those at the beginning?

A firewall that prevents outgoing connections is protecting the beginning of the chain.

ISPs randomly preventing people connecting to the net would break loads of legitimate things and probably not work. Even with deep packet inspection it would be trivial for malware writers to circumvent with encryption or steganography.