OT: Where can I download a Virus or three?

[Romulus68]

Funny story.....My friend (different girl) who knew little about computers got hacked by a friendly hacker! She had no firewalls or much of anything at the time.....He hacked in and started talking to her on Net messenger (I think). Here is the funny/cool part. He explained security and hacking then proceeded to download Anti-virus programs, spybots, firewalls, etc. He then installed them, ran them and cleaned up her system for her. He lastly told her how to activate the firewall and he would then disappear from her machine. It was most amusing, but VERY much true.

I think she is going to wipe the systems clean and reinstall everything. Most everything she does is web surfing and email. No gaming or working on the PC's, so its no biggee for her with no need to reinstall a bunch of stuff. After that its a matter of installing all the security software and checking her email to make sure nothing is getting forwarded.

Everyone, Thanks for the GREAT suggestions! I'll put some of that to work for myself, especially the wireless router issues.

[Azselendor]

I've heard of that, the hacker was doing as an experiment to demonstrate to people how insecure their systems were.

I suggested changing the Router's IP address as one more means of slowing the person down. A dedicated hacker will break down any defense you put up, but instead of your system falling to the hacker in 10 minutes, we can turn it into a few days.

Of course, the best security for a wireless system is to not use wireless

Edit- Forgot to add, if your router allows it, reduce the transmitter power. My router doesn't have that ability, but I know some do. If your router does you can limit it's broadcast range down to a 20-30 feet or so. A linksys WRT54GS, for example, has an effective range of about 150 feet or so which is far too large for the average home.

[Baron Munchausen]

dogscoff said:
Contact the ISP and ask them to change all passwords. Then back up all data, pull the network plug on the machine, format the HD and re-install Windows (or better yet, install something more secure, like Linux ).

Just be aware that Ubuntu isn't the only Linux. Many people are boosting it because it's relatively easy to install, but it doesn't necessarily have everything you would want/need. Some other major versions are:
Debian (One of the oldest and most respected versions.)
Fedora (formerly Redhat)
SUSE (the 'free' version of Novell's enterprise Linux)

These are a little bit harder to setup, but you get much more stuff right on the disks and not everyone finds 'Gnome' desktop to be the best way to use Linux.

dogscoff said:
If applicable, change the password on her router while you're at it. If it's wireless, change the SSID and WEP passwords (or enable WEP if it wasn't already), and set it to non-broadcast mode. Enable MAC address filtering if available.

If at all possible, just don't use wireless. What does it save you to have a box five feet away from your computer not need a cable? Internet cafes might find it useful to let people connect with their own laptops and not have to manage plugs or cables. Ordinary home users are usually paying for their own exclusive connection. Even with encryption, wireless networks are not secure. It's just a little extra effort to crack the encryption, as has been demonstrated by quite a few hackers. In other words, encryption works like the locks on our house or car doors, it keeps honest people honest. It doesn't stop real criminals. Given that this guy seems pretty motivated, the smart thing to do is use a shielded cable and disable the wireless.

dogscoff said:
Configure the OS to require a password on bootup. Ideally, you'd also change the BIOS to disable boot-from-other-media and then password-protect the BIOS setup screen. Install all security updates for your OS as quickly as possible. This is especially important for Windows. If possible, do the updates offline (ie, download updates from a different PC and save them to a CD, so that you don't have to connect an unpatched PC to the internet).

Windows can be 'caught up' very quickly and easily by downloading the appropriate Autopatcher and burning it to CD before reformatting.

dogscoff said:
Now you can install some anti-virus/ anti-spyware (if using Windows. I'm not sure Linux even *needs* anti-virus..?)
Here is the basic freebie suite to keep your average Windows machine mostly secure:
AVG antivirus
Spybot Search & Destroy
Spywareblaster
Firefox
I'll let someone else recommend a good freebie firewall.

Microsoft's own Windows Defender is probably the best anti-spyware now. It comes from the authors of the OS, after all.

Firewalls for Windows XP? The average unsophisticated user is probably better off to just use the integrated firewall. If she's willing to learn a bit, or someone else is willing to help her configure it (this will require repeat visits for several days or weeks as her usage patterns are figured out), Ghostwall is a good supplement to the built-in firewall.

[Fyron]

Noone says you have to use Gnome with Ubuntu. There are a bunch of sub-distros with different default DEs (Kubuntu, Xubuntu, etc.). You can also just not install the Gnome package and install something else from apt when you do a custom install. The core of the OS is exactly identical between Ubuntu, Kubuntu and the rest. The only difference is putting in a different default DE package on the installer. They all use the same apt repository, and you can choose the DE of another from any of the base installers.

Pretty much every major distro (including Fedora, Debian, and Suse) has their default DE, with options to install others.

Personally I'd recommend staying far away from any distro without a robust apt repository (I'm looking at you, Fedora). RPM type systems are a real pain to work with, compared to the trivial ease of apt and its GUI offspring (aptitude, synaptic, etc.).

There really isn't much software available on one distro but not the others, beyond tools made specifically by the distro authors for that distro. Ubuntu has pretty much everything in its apt repository that Debian does.

[Suicide Junkie]

Azselendor said:
I've heard of that, the hacker was doing as an experiment to demonstrate to people how insecure their systems were.

I have a story about this one guy who called the help line, complaining that his internet was slow.
He had gobs of ports active, and must have been swamped with spyware, viruses and junk...
But his techie "friend" had secured the system, so there was no way he could be infected with stuff...

It got escalated, of course, and half an hour later the boss came downstairs to relate the story.
Even after printing a test page remotely, he dosen't believe he's got any problems...
Sorry, you're beyond help until you get out of the denial stage.

[Renegade 13]

Azselendor said:
Solution: Go over to the Ex's house and put a dead fish inside his computer case, bolt the computer case to his furniture, and weld the computer case shut.

I vote for this option.

But seriously, this dude sounds dangerously obsessive...I'd consider not only internet/computer security, but physical security as well.

[narf poit chez BOOM]

For security, I recommend The Club. An old, tried and tested method of personal security, The Club can be found anywhere, from forests to cane shops to flashlight stores (Large, with aluminum case).
Utilization of The Club is simple; just bring it down forcefully on an attackers' forehead until they cease and desist in their aggravation.
It is nessasary, however, to prove self-defence to the local law, so always check the laws in your area to be sure you are actually allowed to defend yourself. If not, leave.

[Baron Grazic]

Isn't that why you purchase 2 Clubs. 1 to give to the attack after you have subdued him.