[flamestar]

PSGUard broke through your fire wall. Raped my computer and now wants me to
pay them to fix the damage that they have done.

Yes I had the your fire wall on and yes it didn't work.

[Roger Abell]

Firewalls do not stop things that the user, knowingly or not,
invite in.

--
Roger Abell
Microsoft MVP (Windows Security)

"flamestar" <flamestar@discussions.microsoft.com> wrote in message
news:B85BBD8B-D89F-4AE6-9469-6B103AE0D99B@microsoft.com...
> PSGUard broke through your fire wall. Raped my computer and now wants me
to
> pay them to fix the damage that they have done.
>
> Yes I had the your fire wall on and yes it didn't work.

[Steven L Umbach]

No firewall alone [possible exception for VERY expensive application
filtering type such as ISA 2004] will protect from spyware/hijacks that the
user installs on their computer. That is not a firewalls job. There are
separate programs such as AdAware SE for such and some of the newer
antivirus programs such as the one from Trend Micro for home users attempts
to catch spyware. Other programs will try to configure the computer to block
activity that spyware/hijacks will attempt to do. Users also need to be
trained to be very careful in what they select "yes" for when browsing the
internet. --- Steve

http://www.microsoft.com/athome/security/protect/default.mspx --- Protect
My PC
http://www.snapfiles.com/freeware/security/fwantispy.html -- free programs
for parasite detection/removal/prevention

"flamestar" <flamestar@discussions.microsoft.com> wrote in message
news:B85BBD8B-D89F-4AE6-9469-6B103AE0D99B@microsoft.com...
> PSGUard broke through your fire wall. Raped my computer and now wants me
> to
> pay them to fix the damage that they have done.
>
> Yes I had the your fire wall on and yes it didn't work.

[Karl Levinson, mvp]

Logging into Windows as a non-admin may have helped somewhat here.


"flamestar" <flamestar@discussions.microsoft.com> wrote in message
news:B85BBD8B-D89F-4AE6-9469-6B103AE0D99B@microsoft.com...
> PSGUard broke through your fire wall. Raped my computer and now wants me
to
> pay them to fix the damage that they have done.
>
> Yes I had the your fire wall on and yes it didn't work.

[Greg Ro]

This might help you


http://www.askmarvin.ca/forums/index.php?&act=ST&f=20&t=3720

Greg Ro

[Roger Abell [MVP]]

"Karl Levinson, mvp" <levinson_k@despammed.com> wrote in message
news:%23$IpIiDgFHA.2644@TK2MSFTNGP09.phx.gbl...
> Logging into Windows as a non-admin may have helped somewhat here.
>

gasp !?

--
Roger
>
> "flamestar" <flamestar@discussions.microsoft.com> wrote in message
> news:B85BBD8B-D89F-4AE6-9469-6B103AE0D99B@microsoft.com...
>> PSGUard broke through your fire wall. Raped my computer and now wants me
> to
>> pay them to fix the damage that they have done.
>>
>> Yes I had the your fire wall on and yes it didn't work.
>
>

[Karl Levinson, mvp]

"Roger Abell [MVP]" <mvpNoSpam@asu.edu> wrote in message
news:%23y6%23FyFgFHA.3304@TK2MSFTNGP12.phx.gbl...
>
> "Karl Levinson, mvp" <levinson_k@despammed.com> wrote in message
> news:%23$IpIiDgFHA.2644@TK2MSFTNGP09.phx.gbl...
> > Logging into Windows as a non-admin may have helped somewhat here.
> >
>
> gasp !?

Heh heh... well, note that I said "may" and "somewhat..." And I never
implied that logging in as non-admin would prevent being infected or
compromised in the first place, because that would be wrong. The OP would
still be infected, but if the attacker has gained "only" user privileges and
not system privileges via a remote buffer overflow attack, then you can try
to prevent the firewall from being disabled so at least it might alert you
to the infection.

.... but on the other hand, there are so many ways to send data outbound past
a host-based firewall program, using IE and TCP port 80 for example, that
the attacker probably doesn't need to disable the firewall and might not
necessarily cause the firewall to generate alerts.

I probably should have recommended a cheap firewall appliance like
www.netgear.com or www.linksys.com for around $60 US... as long as s/he
isn't using a dialup modem. Most high-speed Internet connections now come
with a firewall appliance anyways.