[Stoner]

Just a follow up..........
Only several MRUs have shown up in Adaware...no risks there.

Spybot is acting up since the last 'detection' update, yesterday.
It complains(Error) about not being able to check Win.ini claiming some other process is using it. It appears to be an eratic problem with users, when I did a Google search. But then, I'm updating 1.3 with 1.4 defs, so I suspect there's a conflict now. I uninstalled and reinstalled 1.3 and got no errors. Again downloaded the latest 'detection' update for 1.4 and the same error was thrown.
Oddly enough, a clean bill of health was given each time.
I'll keep using Spybot, but I'm not so sure it's reliable now


I got rid of Acrobat Reader and installed Foxit......nice, loads much faster and removed the BHO associated with Acrobat.

attached is a Highjackthis log......

No blue screens or lockups since my last report
Also installed PhotoFiltre and it's plugins, just to try it out. Nice.


If any win95 users are reading this and have suggestions for security apps that work, please post them.

I just gave a-squared a try......no go.

[Stoner]

Well, this is interesting
A Spybot scan can be run from outside the OS .

http://www.safer-networking.org/en/faq/43.html
and
http://www.safer-networking.org/en/faq/41.html


I have Bart's PE.
I can scan win95 several ways.
I can scan from the 1.3 version already installed, using Barts.
I can instal 1.4 into win95 and scan using Barts.
I can scan from a 1.4 copied folder from a win98se instal, using Barts.

Barts is pretty slick, IMHO
I was able to take a screen shot with 'Print Screen' and paste it to the Wordpad app in Barts, then copy that to the C:\ drive and in win95, again copy/paste to Paint.

Notice that Barts basically keeps the same file structure as 9x even though it is a live CD. Makes it nice to work with.


BTW, scanning with version 1.3 and 1.4 Spybot came up clean

[Stoner]

Some more info.
I had installed a-squared 1.6, which is a trojan/worm scanner.

http://www.emsisoft.com/en/

I chose the free version.
It installed, opened up, and updated itself OK. It has to be registered and accomplish at least one update before it will scan.
a-squared is only supported in 98 and up.
No matter how many times I updated it, it would not scan. I was unable to find anyone sucessfully using it under win95.

So I booted into Barts PE, clicked on the a-squared exe in the win95 program files, it requested an update, it updated (Barts PE can establish an internet connection) ......and ran on the Barts PE platform.

The scan was clean

So, there is another security tool I can use


BTW, I didn't realize Barts had Paint in it's app list. That made a screen shot easier to save.

[ekim68]

Wow, Stoner, thanks...This is good stuff...

[Big-K]

Originally Posted by Stoner

Anyone have a install set of floppies for win3.1.......LOL!....(j/k)

Yes, yes I do. Actually I have them for 3.1, and 3.0. I use them when i'm installing 95 or 98 since my copies of both are upgrade editions. I also occassionally use them to install 3.x

[Stoner]

Originally Posted by ekim68

Wow, Stoner, thanks...This is good stuff...

You're welcome

[Stoner]

Originally Posted by Big-K

Yes, yes I do. Actually I have them for 3.1, and 3.0. I use them when i'm installing 95 or 98 since my copies of both are upgrade editions. I also occassionally use them to install 3.x

Hi Big-K

Have you gone online with win3.x?

[Stoner]

Here's a little jewel I dug up.....on the win95 OCR2 instal CD, there is an app called Hwdiag.exe. Hwdiag.exe lists every key in the Windows Registry that refers to hardware in your system.
It is in the \Other\Misc\Hwtrack folder on the CD.

[Shelly6]

Originally Posted by Stoner

Some more info.
I had installed a-squared 1.6, which is a trojan/worm scanner.

http://www.emsisoft.com/en/

I chose the free version.
It installed, opened up, and updated itself OK. It has to be registered and accomplish at least one update before it will scan.
a-squared is only supported in 98 and up.
No matter how many times I updated it, it would not scan. I was unable to find anyone sucessfully using it under win95.

So I booted into Barts PE, clicked on the a-squared exe in the win95 program files, it requested an update, it updated (Barts PE can establish an internet connection) ......and ran on the Barts PE platform.

The scan was clean

So, there is another security tool I can use


BTW, I didn't realize Barts had Paint in it's app list. That made a screen shot easier to save.

I have had a-squared for a while now and it has never ever found anything, which is a bit upsetting because I don't know if it works.
Keep up the good work.

[Stoner]

Originally Posted by Shelly6

I have had a-squared for a while now and it has never ever found anything, which is a bit upsetting because I don't know if it works.
Keep up the good work.

Hi Shelly6

Thanks.

Have you had other security apps find trojans/worms that a-squared was supposed to catch and didn't?
I've been thinking of trying several of the online scanners , also.
Have you had any experience with them?
Rollin' Rog listed several here: LINK

[Stoner]

Avast also runs on the win95 platform.

http://www.avast.com/eng/avast_4_home.html

I didn't uninstall AVG, I just made sure it was turned off before I installed Avast and made sure AVG was turned off when I run Avast.
All seems to work well without conflicts.


So, that's another security app that works on win95.


I know this comp has only been online a short time, but my impressions for usage as an Internet surfing box are so far ...favorable.

[Shelly6]

Originally Posted by Stoner

Hi Shelly6

Thanks.

Have you had other security apps find trojans/worms that a-squared was supposed to catch and didn't?
I've been thinking of trying several of the online scanners , also.
Have you had any experience with them?
Rollin' Rog listed several here: LINK

I must be one of the lucky ones I guess. I have ZoneAlarm, AVG, Spybot and AdAware, with a-squared being rarely used. I get the usual adware but have only ever had a couple of viruses. I'm slowly cutting the ads and popups with a rather large hosts file, but I believe that it has more to do with careful use. I haven't used an online scanner, probably because I'm a bit paranoid.

[Stoner]

Originally Posted by Shelly6

...........................
..............
........ I haven't used an online scanner, probably because I'm a bit paranoid.

I do know what you mean... LOL!

Same here

[hewee]

Yea I hate online scanners where I have to use IE and lower the setting on it and ZoneAlarm to do a scan.

[Stoner]

On my 98se computer, I would only run security scans about once every other week, as nothing was turning up but MRUs in Adaware.
For demonstration, I've been more cautious with the win95 install to see how well it compares.
I've run tests against the firewall at http://www.grc.com/ and more comprehensive tests at
http://www.auditmypc.com/ and http://scan.sygatetech.com/
I also ran the browser test at PCFlank: http://www.pcflank.com/

My firewall passes all tests but the PCFlank, which complains that information is escaping through the browser(user agent) and referer, firewall settings.
So I went back to GRC to see what was being leaked.

This is a regular (non secure connection)

Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Connection: keep-alive
Host: www.grc.com
Content-Length: 30
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip,deflate
Wser-Agent: XUWLSZLKBRNVWWCUFPEGAUTFJMVRESKPNKMBIPBARHDMNNSKVFVWRKJVZCMHVIBGDADRZFSQHYU CDD
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Secure: https://www.grc.com
Nonsecure: http://www.grc.com

This is a secure connection:

Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Connection: keep-alive
Host: www.grc.com
Referer: http://www.grc.com/x/ne.dll?rh0dk2du
User-Agent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7
Content-Length: 30
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Secure: https://www.grc.com
Nonsecure: http://www.grc.com

Looking closely, on a non secure (regular) connection, my firewall blocks 'referer' completly and garbles 'User Agent'.
I don't see a problem here.
Anyone else see a reason for concern??

My security :
AVG 7 (free version) run in regular and safe mode
Avast! run in safe mode
a-squared run in Barts PE
Norton Firewall 2000
Spywareblaster
Spybot S&D
version 1.3 run in win95 and Barts PE
version 1.4 (from a folder) run in Barts PE
Adaware se
run in safe mode
Hijackthis
BHODemon
Firefox 1.07 has the NoScript, Adblock, RIP and Flashblock extensions installed.

Linksys firewall router


All of my security scans passed without anything but several MRUs showing up in Adaware this morning

No BSODs to report.