schwendrick
join:2005-01-12
| reply to schwendrick
Re: Startup security for "always-on" connection.
Actually I wanted to remove attention from the router as I presumed that's the first thing that would be focused on.
At what point during the boot cycle does the PC become vulnerable through the network port, and is it late enough that my security software is enough in place to prevent malware from being installed/executed?
Thanks |
|
Mele20
Premium
join:2001-06-05
Hilo, HI
| You can use BootlogXP to show you when your security software loads during the boot process. I have DiamondCS ProcessGuard and it loads extremely early in the boot process before my Antivirus loads even. It is a classic HIPS that runs in kernel mode and would not allow anything that somehow got downloaded before the AV was loaded to execute. It would block it and as soon as Windows finished loading stick a popup in the middle of my screen, where it would be impossible to miss,and demand that I tell it what to do about the new process/program that wants to start.
»www.greatis.com/utilities/bootlogxp/
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason |
|
schwendrick
join:2005-01-12 | Thanks Mele20. Good tips. |
|
La Luna
Surviving Ashraful
Premium
join:2001-07-12
Warwick, NY
clubs:
 ·Optimum Online
 ·Vonage
| reply to schwendrick
said by schwendrick  :Actually I wanted to remove attention from the router as I presumed that's the first thing that would be focused on.... The idea is to help others, such as those who may also be using this particular router you speak of.
It would be nice to know what router you believe was compromised, how it was compromised, and what lead you to believe you were "targeted" for online intrusion attempts.
--
10,582 DEADLY TERROR ATTACKS SINCE 9/11~~TEAM DISCOVERY
Can't feel you anymore, don't need you anymore, don't believe you anymore, I don't need you anymore
|
|
genewitch
join:2007-09-12
Klamath Falls, OR
·Charter Pipeline
·Suddenlink
·Cebridge Connections
1 edit | reply to schwendrick
said by schwendrick :Actually I wanted to remove attention from the router as I presumed that's the first thing that would be focused on. At what point during the boot cycle does the PC become vulnerable through the network port, and is it late enough that my security software is enough in place to prevent malware from being installed/executed? Thanks Network should come up last, but there's no guarantee. If you are paranoid about it, before you shut down the machine turn off the network card (nethood ->properties ->device ->disable)
Unless something fishy is going on that should stay set until your machine is completely booted, at which point you can go in and enable it at your leisure.
PS this is how my network is run, there's no internet to any computer until i explicitly boot a virtual machine for that purpose. My computer can't even lease an IP until i do that. |
|
