Teenage boys
-
My nephew spent the weekend at ours, and being a teenage boy he is basically nocturnal. So when we went to bed, he stayed up playing on the internet. I thought I had a fair idea of what he would be doing, looking at picture of "models" and that sort of thing. Boy was I wrong! Turns out he was trying to download software to crack the activation of some software he's downloaded at home. Cheeky little sod. In the morning, he sheepishly tells me that he thinks my computer has a virus called avast, telling me that this virus popped up a message on the screen telling him that the software he was running (called crack.exe) had a virus - "that can't be right can it Uncle?". Oh boy, here we go. It took me two ours to get into Windows on Sunday morning, and twelve hours to let avast run a through scan and clean up the mess he's made. I could throttle the little git. I've finally got the system back up and running, with only two small problems. When you click your name to load your profile, the 'loading your personal settings' screen appears and takes around 4 minutes to complete, and when shutting down it takes around six minutes. There's nothing untoward in the event viewer logs, just the normal services, and I'm having little luck finding out what the OS could be doing during these periods on MSDN and google. Can anyone point me towards a guide as to what the machine could be doing during these periods so I can try to speed it up?
- Dy
-
My nephew spent the weekend at ours, and being a teenage boy he is basically nocturnal. So when we went to bed, he stayed up playing on the internet. I thought I had a fair idea of what he would be doing, looking at picture of "models" and that sort of thing. Boy was I wrong! Turns out he was trying to download software to crack the activation of some software he's downloaded at home. Cheeky little sod. In the morning, he sheepishly tells me that he thinks my computer has a virus called avast, telling me that this virus popped up a message on the screen telling him that the software he was running (called crack.exe) had a virus - "that can't be right can it Uncle?". Oh boy, here we go. It took me two ours to get into Windows on Sunday morning, and twelve hours to let avast run a through scan and clean up the mess he's made. I could throttle the little git. I've finally got the system back up and running, with only two small problems. When you click your name to load your profile, the 'loading your personal settings' screen appears and takes around 4 minutes to complete, and when shutting down it takes around six minutes. There's nothing untoward in the event viewer logs, just the normal services, and I'm having little luck finding out what the OS could be doing during these periods on MSDN and google. Can anyone point me towards a guide as to what the machine could be doing during these periods so I can try to speed it up?
- Dy
-Dy wrote:
There's nothing untoward in the event viewer logs, just the normal services,
It would be next to impossible for you to analyze anything with event logs in this case. What you need is HijackThis!
-Dy wrote:
Can anyone point me towards a guide as to what the machine could be doing during these periods so I can try to speed it up?
You've a long way to go. Probably. I can only tell it from a HijackThis log. But, then this is surely not the place. Create a log with HijackThis and post it at BleepingComputer forum[^]or SpywareInfo malware removal[^] forum. There are plenty of security experts there (I'm a moderately active member too) and they'll guide you through the process.
Nobody can give you wiser advice than yourself. - Cicero .·´¯`·->Rajesh<-·´¯`·. Codeproject.com: Visual C++ MVP
-
My nephew spent the weekend at ours, and being a teenage boy he is basically nocturnal. So when we went to bed, he stayed up playing on the internet. I thought I had a fair idea of what he would be doing, looking at picture of "models" and that sort of thing. Boy was I wrong! Turns out he was trying to download software to crack the activation of some software he's downloaded at home. Cheeky little sod. In the morning, he sheepishly tells me that he thinks my computer has a virus called avast, telling me that this virus popped up a message on the screen telling him that the software he was running (called crack.exe) had a virus - "that can't be right can it Uncle?". Oh boy, here we go. It took me two ours to get into Windows on Sunday morning, and twelve hours to let avast run a through scan and clean up the mess he's made. I could throttle the little git. I've finally got the system back up and running, with only two small problems. When you click your name to load your profile, the 'loading your personal settings' screen appears and takes around 4 minutes to complete, and when shutting down it takes around six minutes. There's nothing untoward in the event viewer logs, just the normal services, and I'm having little luck finding out what the OS could be doing during these periods on MSDN and google. Can anyone point me towards a guide as to what the machine could be doing during these periods so I can try to speed it up?
- Dy
Unfortunately, the best way to sort out these problems is simply to say that you can no longer trust anything on the system and rebuild it from scratch. I'd try Rootkit Revealer[^] to see if there's anything like that lurking on the system. Then any other badware scanner like Ad-Aware[^] and Spybot[^], but well-hiding malware can still hide from these programs. In future, don't let him have administrative rights on the system. Make his account a Standard User account.
DoEvents: Generating unexpected recursion since 1991
-
Unfortunately, the best way to sort out these problems is simply to say that you can no longer trust anything on the system and rebuild it from scratch. I'd try Rootkit Revealer[^] to see if there's anything like that lurking on the system. Then any other badware scanner like Ad-Aware[^] and Spybot[^], but well-hiding malware can still hide from these programs. In future, don't let him have administrative rights on the system. Make his account a Standard User account.
DoEvents: Generating unexpected recursion since 1991
Mike Dimmick wrote:
In future, don't let him have administrative rights on the system. Make his account a Standard User account.
I've taken a slightly different attitude. He's now only allowed access to the Linux box. It's got firefox on it, which is all he will be allowed access to.
- Dy
-
Mike Dimmick wrote:
In future, don't let him have administrative rights on the system. Make his account a Standard User account.
I've taken a slightly different attitude. He's now only allowed access to the Linux box. It's got firefox on it, which is all he will be allowed access to.
- Dy
-
My nephew spent the weekend at ours, and being a teenage boy he is basically nocturnal. So when we went to bed, he stayed up playing on the internet. I thought I had a fair idea of what he would be doing, looking at picture of "models" and that sort of thing. Boy was I wrong! Turns out he was trying to download software to crack the activation of some software he's downloaded at home. Cheeky little sod. In the morning, he sheepishly tells me that he thinks my computer has a virus called avast, telling me that this virus popped up a message on the screen telling him that the software he was running (called crack.exe) had a virus - "that can't be right can it Uncle?". Oh boy, here we go. It took me two ours to get into Windows on Sunday morning, and twelve hours to let avast run a through scan and clean up the mess he's made. I could throttle the little git. I've finally got the system back up and running, with only two small problems. When you click your name to load your profile, the 'loading your personal settings' screen appears and takes around 4 minutes to complete, and when shutting down it takes around six minutes. There's nothing untoward in the event viewer logs, just the normal services, and I'm having little luck finding out what the OS could be doing during these periods on MSDN and google. Can anyone point me towards a guide as to what the machine could be doing during these periods so I can try to speed it up?
- Dy
My 10 year old neice has caused havoc on all the family PCs, searching for porn.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
My 10 year old neice has caused havoc on all the family PCs, searching for porn.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
My 10 year old neice has caused havoc on all the family PCs, searching for porn.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
Christian Graus wrote:
My 10 year old neice has caused havoc on all the family PCs, searching for porn.
Ah - "blame the dog" way of doing things. ;P
Nobody can give you wiser advice than yourself. - Cicero .·´¯`·->Rajesh<-·´¯`·. Codeproject.com: Visual C++ MVP
-
My 10 year old neice has caused havoc on all the family PCs, searching for porn.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
Unfortunately, the best way to sort out these problems is simply to say that you can no longer trust anything on the system and rebuild it from scratch. I'd try Rootkit Revealer[^] to see if there's anything like that lurking on the system. Then any other badware scanner like Ad-Aware[^] and Spybot[^], but well-hiding malware can still hide from these programs. In future, don't let him have administrative rights on the system. Make his account a Standard User account.
DoEvents: Generating unexpected recursion since 1991
Mike Dimmick wrote:
you can no longer trust anything on the system
Amen!
Software Zen:
delete this; -
Mike Dimmick wrote:
In future, don't let him have administrative rights on the system. Make his account a Standard User account.
I've taken a slightly different attitude. He's now only allowed access to the Linux box. It's got firefox on it, which is all he will be allowed access to.
- Dy
-Dy wrote:
He's now only allowed access to the Linux box. It's got firefox on it, which is all he will be allowed access to.
That means he can search Google for instructions to reset the root password[^] and gain full access to the machine. You should have given him only a text-mode console running rbash[^], and no
lynx,wget,curlor any other Internet-access commands in the $PATH. -
I never knew 10 year old girls were into porn
xacc.ide - now with TabsToSpaces support
IronScheme - 1.0 alpha 3 out nowNor did I, but she's the common thread, and the searches make it obvious (zack effron totally nude full on was one )
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
Christian Graus wrote:
My 10 year old neice has caused havoc on all the family PCs, searching for porn.
Ah - "blame the dog" way of doing things. ;P
Nobody can give you wiser advice than yourself. - Cicero .·´¯`·->Rajesh<-·´¯`·. Codeproject.com: Visual C++ MVP
Actually, I blamed my father in law at first and lectured him on deleting his history, not downloading any ActiveX, etc. Whenver my tenant does a google search now, it finds porn and shows photos. No matter what she looks for
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
Nor did I, but she's the common thread, and the searches make it obvious (zack effron totally nude full on was one )
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
My nephew spent the weekend at ours, and being a teenage boy he is basically nocturnal. So when we went to bed, he stayed up playing on the internet. I thought I had a fair idea of what he would be doing, looking at picture of "models" and that sort of thing. Boy was I wrong! Turns out he was trying to download software to crack the activation of some software he's downloaded at home. Cheeky little sod. In the morning, he sheepishly tells me that he thinks my computer has a virus called avast, telling me that this virus popped up a message on the screen telling him that the software he was running (called crack.exe) had a virus - "that can't be right can it Uncle?". Oh boy, here we go. It took me two ours to get into Windows on Sunday morning, and twelve hours to let avast run a through scan and clean up the mess he's made. I could throttle the little git. I've finally got the system back up and running, with only two small problems. When you click your name to load your profile, the 'loading your personal settings' screen appears and takes around 4 minutes to complete, and when shutting down it takes around six minutes. There's nothing untoward in the event viewer logs, just the normal services, and I'm having little luck finding out what the OS could be doing during these periods on MSDN and google. Can anyone point me towards a guide as to what the machine could be doing during these periods so I can try to speed it up?
- Dy
-
Christian Graus wrote:
zack effron totally nude full on was one
I dunno who or what that is, but it sounds scary enough :)
xacc.ide - now with TabsToSpaces support
IronScheme - 1.0 alpha 3 out nowThe male star of high school musical.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
The male star of high school musical.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
Actually, I blamed my father in law at first and lectured him on deleting his history, not downloading any ActiveX, etc. Whenver my tenant does a google search now, it finds porn and shows photos. No matter what she looks for
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
Christian Graus wrote:
Whenver my tenant does a google search now, it finds porn and shows photos. No matter what she looks for
Lucky tenant! :-D Why don't you try disabling the suspicious BHO entries with the help of HijackThis? I've fixed similar problems (more than once) at my neighbors place.
Nobody can give you wiser advice than yourself. - Cicero .·´¯`·->Rajesh<-·´¯`·. Codeproject.com: Visual C++ MVP
-
Christian Graus wrote:
Whenver my tenant does a google search now, it finds porn and shows photos. No matter what she looks for
Lucky tenant! :-D Why don't you try disabling the suspicious BHO entries with the help of HijackThis? I've fixed similar problems (more than once) at my neighbors place.
Nobody can give you wiser advice than yourself. - Cicero .·´¯`·->Rajesh<-·´¯`·. Codeproject.com: Visual C++ MVP
I felt the safest thing was to just reinstall.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
-
Really scary!
xacc.ide - now with TabsToSpaces support
IronScheme - 1.0 alpha 3 out nowyes, indeed. Most of her other searches were not lounge friendly. At 10.
Christian Graus Please read this if you don't understand the answer I've given you "also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )