Jump to content


Photo

Virus/worm?


  • Please log in to reply
19 replies to this topic

#1 S3it0*

S3it0*
  • Members
  • 42 posts

Posted 07 May 2004 - 11:33 PM

Heya, I was just wondering if anyone could help me out here, I think I have an undectable Virus/Worm (I use AVG 7.0 Professional and Norton Anti Virus 2004 Pro - always upto date of course) thats seriously screwing with my net connection. I have 128kbps adsl (16KB/s upload and download max), and this file is forcing a little over 50KB/s upload, which is totally lagging me out, making me not able to load webpages, signs me out of MSN, dropping connections etc. Usually I would just go and delete this file, (C:\WINDOWS\System32\wuxat.exe), but it has locked permissions(its also set to hidden, but thats not an issue) and I can't delete it thru windows or DOS.. Im not too keen on formatting either, so what should I do? :) any help greatly appreciated

Cheers,
S3it0*

Edited by S3it0*, 07 May 2004 - 11:35 PM.


#2 JLH

JLH

    Administrator

  • Admin
  • 1771 posts

Posted 07 May 2004 - 11:49 PM

if you can't delete it from dos, you are not in true dos
when booting (98 i assume since folder is "windows"), hit f8, go to safe mode command prompt, then delete the file IF you are sure it is a virus
or, install zonealarm firewall and tell it not to allow that file access
Anything i post on here is subject to change at any time without notification to the board.

#3 S3it0*

S3it0*
  • Members
  • 42 posts

Posted 07 May 2004 - 11:53 PM

I think I'll install Zonealarm, thanks JLH :) (I use winxp pro btw :) i prolly shouldve said :-/)

#4 JLH

JLH

    Administrator

  • Admin
  • 1771 posts

Posted 07 May 2004 - 11:58 PM

did you upgrade from windows 98/me? since a default winxp install uses the folder winnt
Anything i post on here is subject to change at any time without notification to the board.

#5 S3it0*

S3it0*
  • Members
  • 42 posts

Posted 08 May 2004 - 02:59 AM

yea I installed 98SE and then winxp pro on top of that, because the winxp cd I have isnt a bootable cd, so I needed to run the windows OS then use upgrade :) its a shame really, when I need to format it takes a lot longer to have my pc fully working again because I have to install 2 OS'

#6 Shane

Shane
  • Members
  • 496 posts

Posted 08 May 2004 - 06:13 AM

Is the XP disk you have just an upgrade or the full version?

Reason I ask is that I formated the hard drive on this computer and then intstalled XP Pro from the disk by booting it up. I just put the cd into the drive and turned the pc back on.

"Before my time is done I will look down upon your corpse and smile!"


#7 Bean

Bean
  • Members
  • 452 posts

Posted 08 May 2004 - 07:56 AM

Dear god, dont get zonealarm, there is something seriously wrong with that program, I mean like seriously.
Copying from one is Plagiarism
Copying From many is Research.

It's so exciting I need to poo~Deval

#8 Limit

Limit
  • Members
  • 400 posts

Posted 08 May 2004 - 09:37 AM

ya ive been trying to find the right dl.. ive been having the problems and i even did the virus scan from www.trendmicro.com and it found nothing. heh
The difference between stupidity and genius is that genius has its limits. - Albert Einstein

#9 JLH

JLH

    Administrator

  • Admin
  • 1771 posts

Posted 08 May 2004 - 10:16 AM

yea I installed 98SE and then winxp pro on top of that, because the winxp cd I have isnt a bootable cd, so I needed to run the windows OS then use upgrade :) its a shame really, when I need to format it takes a lot longer to have my pc fully working again because I have to install 2 OS'

on the winxp cd there will be a folder called bootdisk, get 4 floppy disks, and run the file in there. this will make you 4 boot disks that will start the pc up and let you do it without using windows 98
Anything i post on here is subject to change at any time without notification to the board.

#10 Dan

Dan
  • Members
  • 388 posts

Posted 08 May 2004 - 12:29 PM

Sounds like your doing a "dirty" reinstall of your OS's to begin with. If you reinstall your OS (any of them) you really don't need the 4 floopy boot-up kit.

A "dirty" reinstall is how Shane described how he does his. Doing it that way your bound to lose a few files simply because some Windows files will not allow you to delete/overwrite them.

If you want to simply check for worms/viruses, the best program I've toyed with so far is EZTrust Antivirus (search for it on downloads.com. It has a free trial period upon download, but after it expires your not going to get the automatic updates unless you shell out a few bucks.

#11 Shane

Shane
  • Members
  • 496 posts

Posted 08 May 2004 - 01:24 PM

after it expires your not going to get the automatic updates unless you shell out a few bucks.

Or crack it. And dont say it cant be cracked. Everything can be cracked with time and enough effort. :)

"Before my time is done I will look down upon your corpse and smile!"


#12 Dan

Dan
  • Members
  • 388 posts

Posted 08 May 2004 - 02:20 PM

I won't condone or urge others to crack programs. Telling people in a public forums to crack copywrited/trademarked programs is just stupid, you never know who's watching. Plus if a program such as a virus scanner saves you valuable time and computer fix costs, such a small price is worth it.

And yes, I have yet to pay for my goods. :)

#13 JLH

JLH

    Administrator

  • Admin
  • 1771 posts

Posted 08 May 2004 - 02:35 PM

Sounds like your doing a "dirty" reinstall of your OS's to begin with. If you reinstall your OS (any of them) you really don't need the 4 floopy boot-up kit.

you do if your cd isn't bootable or your bios doesn't support boot from cd
i would consider a "dirty" reinstall if you did a reinstall over the top of windows, rather than formatting the hard drive.
Anything i post on here is subject to change at any time without notification to the board.

#14 Dan

Dan
  • Members
  • 388 posts

Posted 08 May 2004 - 07:04 PM

Yes, my point was that if it is done correctly to begin with, the floppy's aren't needed. And yes a dirty reinstall is just going over the top of the old OS instead of configuring your booting order, formatng, etc.. is that not how it was described above? or were you trying to make a statement?

#15 JLH

JLH

    Administrator

  • Admin
  • 1771 posts

Posted 08 May 2004 - 07:39 PM

Yes, my point was that if it is done correctly to begin with, the floppy's aren't needed.

they are though, many systems do not have the ability to boot of cd, so discs are used.
Anything i post on here is subject to change at any time without notification to the board.

#16 Angelus

Angelus
  • Members
  • 1202 posts

Posted 08 May 2004 - 07:47 PM

And a lot of cracked CD's cant be booted either, like my win xp pro...


*looks over his shoulder incase he's being watched*
Angelus ingame.
Back into the shadows once again...

#17 Dan

Dan
  • Members
  • 388 posts

Posted 08 May 2004 - 08:30 PM

What systems would these be? :)

#18 JLH

JLH

    Administrator

  • Admin
  • 1771 posts

Posted 08 May 2004 - 08:44 PM

any system with a bios that doesn't support boot from cd
or any system with a cd that doesn't support booting
new machines are ok with this, older ones are not always, i know this as i deal with them at work
Anything i post on here is subject to change at any time without notification to the board.

#19 Crane

Crane

    "Teh Gareth!"

  • Members
  • 4091 posts

Posted 08 May 2004 - 09:06 PM

This won't get rid of the virus EXE itself, but should hinder the virus from doing its dirty work... unless the virus is particularly clever.

- Look for any suspicious processes under Task Manager that might relate to this virus, and terminate them.

- Look in the STARTUP folder and the registry (be careful with this) for any keys/values or shortcuts pointing to the virus EXE, and delete them.

I recently had adware on my computer - the shortcut to it was in the Startup folder, but it didn't appear in Task Manager because it was a VB Script.
The Crane Temple Chairman

Main crits:
Crane
Europa


Don't kill the messenger mathematician!

#20 Shane

Shane
  • Members
  • 496 posts

Posted 08 May 2004 - 11:12 PM

Telling people in a public forums to crack copywrited/trademarked programs is just stupid, you never know who's watching.

Anyone can take what is said on a forum/website and think what they want about it. In the end what is said on the forum/website is about a useful to them as belly button lint, they would need proof of the crime to do anything.

"Before my time is done I will look down upon your corpse and smile!"





2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users