Jump to content

some questions, id like help with ;)


Recommended Posts

Ok, so i have someone who has threatened my online security a while back, and I've been paranoid ever since.

 

1- If someone knows your IP address, can they send a virus to your router? My ip doesn't seem to change, even though it's dynamic...and even though i've done the usual tricks to change it.

 

As far as wireless security, I have wpa2-psk with a weird nonsensical 63 characterpassword, of all tyes of symbols. I also just ''reset'' the router the other day. If someone has my ip though, can they just break in to my router even though I reset it, and have a strong password?

 

2- I notice altely that my ssid no longer appears on my available networks list unless I unplug and replug the router...this isnt from a virus right?(related to question 1)

 

3- does malware bytes check routers?

 

4-what about keyloggers? i have zemana installed, but would prefer malwarebytes to check anyway.

 

5- is it possibl for someone to infect your email account with a virus, such that even if you dont open an email containing virus, just having the message undeleted/unopened, and sitting in your email causes someone to be able to spy on your activities everythime you SIGN IN to your email acct..yahoo for example?

 

6-does mwb check email?

 

7-My dad's mwb found 179 infections, but when i deleted them all there were only 171..what gives?

 

8-I know mwb focuses on '0 hour'' malware. Does this eman that with every updated version, the ''1 hour'' malware is not scanned anymore?

 

btw great product, my dad's computer was amrked clean by kaspersky, but had 171/179 processes. crazy.

Link to post
Share on other sites

Hi princetongrad24,

 

Welcome to the forum.

 

If you are worried about you computer being infected I'd like to refer you to Available Assistence for possibly Infected Computers.

(MBAM=MalwareBytes Anti-Malware)

I don't know the answer to all your questions (I'm just a MBAM user) but I'll try to answer them:

 

Question 1a: I don't know. They might be able to exploit it, but I don't think changing your ip will help in this case.

Question 1b: As long as they don't have the password (and it a good one) and there are no known security holes in you router they can't "just" break in to your router. I'm not sure if resetting your router helps with anything. (Does this reset the routerpassword as well?) Note that the router and Wifi password are not the same thing. The routerpassword allows you to change the routersettings (networkname and password, blocked ip's ect.), the wifi-password is nessecary to wirelessly connect to your network.

Question 2: It need not be. Did you contact the techsupport of your router?

Question 3: I don't think so as the word 'router' doesn't show in the help file of MBAM.

Question 4: In this post nosirrah wrote that MBAM detects malicious keylogger. (Those are malware after all.)

Question 5: Yes, kind of. It is possible to hack Yahoo (or any other site) and adding a piece of code so when you visit the site the script runs wich in turn exploits your browser and installs malware. This malware can than monitor every thing you do. (This assumes your computer defenses were insufficient.) This goes for every site and works when you didn't sign in as well.

Generally speaking, as long as an email-message is not opened (including no preview) it can't infect your machine.

Question 6: I think MBAM PRO checks every executable that runs, including executable attachments. But I don't think MBAM PRO scans email before you open them. For as far as it concerns the on-demand or sheduled scans, I do not know wether MBAM can scan unopened attachments.

Question 7: No clue.

Question 8: Though MBAM focusses on detecting the newest malware, they do detect the 'a bit older' malware. As far as I know Malwarebytes occasianally removes (very) old malware signatures from their database. This to keep MBAM light and anti-virus software picks those malwaresamples up anyway, so MBAM does not have to,

 

For some advise on how to keep your computer malware free: Bleeping Computers as an topic about it.

If you are getting a bit paranoid about getting your computer infected and want to enhance your computer security further than usual, take a look at: MBAE, EMET, Spywareblaster, Sandboxie and perhaps even virtual machines. I strongly recommend that if you suspect the presense of malware on your computer you first make sure it is removed before applying any of the mentioned programs. Non of these programs were made to remediate an already infected machine and already present malware might influence/undermine their installation and functioning.

 

 

I hope this helps you a bit further.

 

 

 

 

 

 

 

 

 

 

Link to post
Share on other sites

A1:

1. the short answer is YES

but that means

1. remote management was allowed

2. the passsword was not changed at the time of install

3. the firmware was updated maliciously

If you're really convinced this has occurred, then the solution is trivial

4. download a fresh copy of the firmware for that device

5. reset the hardware (there's a paperclip hole for this)

6. login after the reset

7. IMMEDIATELY set a new admin password

8. now load the new firmware from (1)

9. IMMEDIATELY reset the admin password again

10. disable remote management

11. configure your Router, DHCP range and any applicable WiFi settings

A2:

Resetting the router as mentioned in A1 above would most likely correct this

A3:

No, Malwarebytes does not scan/check routers.

A4:

Malwarebytes will detect malware loggers but not legit ones due to a growing corp user base where logging software is often mandatory.

We are debating adding the ability to enable optional detection for legit loggers in future application updates. (granted this info is from 2010)

A5:

Email accounts can become hijacked and they can be used for malicious purposes. Its better to use an email client (like MS Outlook for example) to collect your email instead of using a web browser to check your email, this will help reduce the risk of exploits.

A6:

No Malwarebytes does not check your email, this is the job of your antivirus software.

A7:

If your dads computer is infected it best to have one of the experts take a look at it and help you clean it up. I can give you the instructions for that. But to answer your question, the reason it only removed 171 is probably because some of the items detected were already removed by a previously.

A8:

Malwarebytes updates their definition files anywhere from 10 to 15 times a day in order to keep up with the newest malware out there. From time to time they do optimize the database and remove outdated items.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.