Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me

The Shed is going Social! Join us on FaceBook and Twitter and chime in on the conversation.

Go Back   Dev Shed ForumsSystem AdministrationAntivirus Protection

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old November 24th, 2003, 10:17 PM
InsaneNoodle InsaneNoodle is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2003
Posts: 5 InsaneNoodle User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via AIM to InsaneNoodle
Exclamation Badass Virus?

About a month ago, I turned on my machine. I logged into Win2k and to my surprise, I can't access the internet. Almost like I was disconnected from my LAN. I checked all my cables and they worked fine so I figure I have a virus. I use Norton Anti Virus (which sucks a nut but i have it for free so..) and scan my whole HDD. Didn't pick up anything. So I tried restarting into Safemode with networking, and to my unpleasant surprise, internet access is still disabled. I tell myself then that it must be some trojan thats got on my boot up files. So i wiped out my whole HDD, and even bought a new HDD for my win2k files. l installed windows its patches and SP's onto the new harddrive. That night, after I installed about half of my old programs again, i reboot and I cant access the internet again. So i run SygatePersonal Firewall and it doesnt pick up anything unusual. I set it so it boots up on windows load up. I reboot normally and for some reason, I was able to access the internet. This is my temporary fix. I thought it mightve been some software that i might've pirated but then this virus or whatever thing got worse. Then next time i booted up and logged on, an error message pops up saying my paging file was too small. So i press ok and everything boots up and i can access the interenet (thanks to SPF) but when I look down on my toolbar and my Norton is disabled (this is what makes me think it is a virus). My system is now worse, windows installer and windows registry is jacked. The last programs I installed onto my computer that may have set this virus/error was DeadAIM 4.0 and Diskeeper Lite. Someone please help me...

(I can renable my Norton's auto protect but not its auto live update and my machine runs sluggishly, I've tried different anti virus software (including AntiVir and AVG), and tried adaware.)

Reply With Quote
  #2  
Old November 25th, 2003, 04:59 AM
Known_criminal Known_criminal is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Location: Mississippi
Posts: 475 Known_criminal User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 10
i am glad to see this post, not happy that you have the situation. the reason for the "glad" last week, had three computer brought to me with odd problems, no virus detected on two, one had some easily fixed, nothing out of the ordinary. the other two,pain in the azz. i backed up the info on cdr. formatted, reinstalled to have the same problems start over,ok these are proprietary machines with format and recovery cd sets. should have been simple. ended up, i used the maxblast diagnostic floppy to do a low level format, erased the disk back to raw then set the partitions back up and installed. problem was gone. i have a machine i use to test things, installed a fresh copy of xp, then dumped backup files on it and used every anti virus i had and some i downloaded just for this, nothing detected. i just kept the pictures, music files,and documents.(these were home computers) both had norton firewall 2002 and anti virus 2002, one was a dell, the other a emachine. xp and norton was all they had in common, one connected dial up, the other cable. i ran this by several people who said it wasnt a virus, but they had no answers.

Reply With Quote
  #3  
Old November 25th, 2003, 10:55 PM
ctrlaltdel's Avatar
ctrlaltdel ctrlaltdel is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2003
Location: Boston MA
Posts: 71 ctrlaltdel User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 10
Sounds like some bad spyware took over your DNS settings. Could you ping okay? How about Resolve DNS?

Reply With Quote
  #4  
Old November 26th, 2003, 12:59 AM
InsaneNoodle InsaneNoodle is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2003
Posts: 5 InsaneNoodle User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via AIM to InsaneNoodle
couldnt resolve my dns.. i could however ping myself... but nothing else...

Reply With Quote
  #5  
Old November 26th, 2003, 03:36 AM
stone stone is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2003
Posts: 113 stone User rank is Corporal (100 - 500 Reputation Level)stone User rank is Corporal (100 - 500 Reputation Level)stone User rank is Corporal (100 - 500 Reputation Level)stone User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 6 h 53 m 47 sec
Reputation Power: 11
Hey gang... ....just wanted to share acouple tools i use to determine which process are listening or have established connection to the internet.They are easy to use and can help find possible virus

The first tool is called tcpview and can be found here http://www.sysinternals.com/ntw2k/source/tcpview.shtml .Basically it will tell u which process is running....what protocol...loacl and remote address and whether its listening or connected.Now say u see a procees running that u r unfamiliar with u can use the next tool called fport

Fport can be found here http://www.foundstone.com/index.htm...ddesc/fport.htm and u run it in the command box.This tool will tell u where the process is installed.hope this helps someone.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationAntivirus Protection > Badass Virus?

Developer Shed Advertisers and Affiliates



Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 


Powered by: vBulletin Version 3.0.5
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.

© 2003-2013 by Developer Shed. All rights reserved. DS Cluster - Follow our Sitemap