Download help

[Variol (Farseer) Elmwood]

I need:

Standard Open HCD USB Host Controller

I can't get it from Microsoft 'cos I'm using Firefox. It says I need IE. Can someone direct me to another site where I can download this?

[Bungleau]

You should still have IE on your system. Use that to do the download, and then return to FF when you're done.

Open IE and go to windowsupdate.com. Everything should run from there.

[shamrock_uk]

You can possibly get it from the Microsoft Download Centre, but it will be much easier to fire up IE as Bungleau suggests.

If it's security you're worried about, there's no increased risk to your computer of navigating to the windows update site in IE.

[bjorn]

If it's security you're worried about, there's no increased risk to your computer of navigating to the windows update site in IE.

Whenever I even thouch IE I get atleast five new icons on my desktop.

[shamrock_uk]

I suggest you've already been compromised then [img]smile.gif[/img]

The risk can be divided into two categories:

1) The risk that malicious code on a website will be executed without your explicit permission - since Variol would only be going to the Windows Update site this would not be a concern.

2) The inherent insecurities caused by running Internet Explorer. These will always exist regardless of the programme you're browsing with as IE is effectively 'always on' because it's such an integral part of Windows. (Which is incidentally how you can get Internet Explorer spyware even if you never use it).

Beyond the inherent risk in Windows that exists regardless of what browser is actually being used to physically visit websites, navigating to Windows Update with IE will therefore not place you at a greater risk than you would otherwise be at.

[ 05-22-2006, 12:37 PM: Message edited by: shamrock_uk ]

[bjorn]

I suggest you've already been compromised then [img]smile.gif[/img]

That's what i figured, dosen't bother me that much though, I never use IE. Someone suggested that I could get rid of the problem by using hijack this, is that true?

[shamrock_uk]

I've never used it to be honest.
AdAware has always been my utility of choice to get rid of malicious software. Whilst I'm not personally up to date with these programmes as I haven't used Windows for a while, Ad-Aware still seems to get the job done with no fuss when I've used it on other computers.

It's probably worth giving it the once-over with a virus checker too - AVG or Avast are both decent free ones.

[Bungleau]

Originally posted by bjorn: quote: I suggest you've already been compromised then [img]smile.gif[/img]

That's what i figured, dosen't bother me that much though, I never use IE. Someone suggested that I could get rid of the problem by using hijack this, is that true? [/QUOTE]HiJack This (HJT) is part of my toolset. It is, however, one of the last tools I pull out.

What I'd do is this:

1. On a separate machine, get current copies of Spybot S&D (www.safer-networking.org), Ad-Aware (www.lavasoft.de), and HJT (www.merijn.org). For kicks, pick up a firewall like ZoneAlarm (www.zonealarm.com) and anti-virus like AVG (www.grisoft.com). You may also need to grab the latest update files from some of them.

2. Burn those all to a CD and bring them over to your compromised machine.

3. Disconnect that machine from the internet and start installing software. Ad-Aware and Spybot are the first two I'd install. After one installs, run it through to completion. Once one is complete, do the next one. Clean up what it tells you, googling on another machine if you have to.

4. Next I'd install the anti-virus and run it.

5. Now, firewall and set it up.

6. You should be ready to get to the internet now for a final check. Reconnect and go to Trend Micro (www.trendmicro.com) for a full on-line scan. You'll need to do this in IE, as I recall... but go ahead. It's safe.

7. You should have a clean bill of health now, but run HJT to be sure. Google for the various executables and programs that it comes up with and check to see if they're malicious or not. I tend to trust castlecops and liutilities for the most part... other sites don't reassure me as much.

Now... after all that, it may still be compromised. You may need to turn off the system restore (done somewhere in properties for the computer), reboot into safe mode, repeat all seven steps, and *then* turn system restore back on. If you want, you can start out this way... no big deal.

After that... pop a brewski. It will be a long, long day.

[shamrock_uk]

Originally posted by Bungleau: After that... pop a brewski. It will be a long, long day.

I can almost feel your pain. Why do I get the feeling you've had to do this far too many times?! [img]smile.gif[/img]

[Bungleau]

When you're the one everyone calls to take a look at their computer... you get to know the procedure. It's probably a sad commentary that every URL I listed in there was from memory, with a minor asterisk on AVG. I changed the URL from grisoft.de to grisoft.com... the other one works, but brings you to a German page first.

I'm considering offering this as a for-pay service to folks... it's definitely worth it.