I will NOT give up!! Any Help?

ibexDaGoat · Cadet Joined: Mar 13, 2004 Posts: 4 Location: USA

Okay. Please don't ask how I got to this point, I'm SUPPOSED to be a pro! (ie: STUPID STUPID STUPID!!).

Here's the scenereo:
Starting from a clean backup copy of my reg and ini files everything runs fine. I'll install AntiVir Personal 1st, then scan the system: clean. Over the next 6 hours this process will occur every time. First, registry keys will begin showing up referring to miroot and other viruses (bad with names...references to files such as the TWEAKUI emulating virus, the one that parades as taskmon, etc.) but the actual files are NOT on the system. The slmm spybot will appear out of nowhere, the machine will disappear from the Network Neighborhood window, problems with MS ICS connections, then IE will stop connecting to...well, ANYTHING. The little E goes round and round and proxomotron shows no connections. I can disable the proxy and there is still no connection made, nor will it time out and give up. At this point the system will not shut down, and attempts to do so will bring up "app will not respond" alerts with no process name (no unknown processes running according to the spybot s&d process list) and basically the system is trashed at that point. Strangely enough, the computer to which I am networked, which is where the original virus installation occured, is doing just fine (this is the ICS Host, the ICS client is the one with the problems).

I'm really curious and not yet willing to wipe & install clean. Anyone seen anything like this before?

Prince_Serendip · Posted: Thu Mar 18, 2004 4:20 pm Post subject:

There's nothing stupid in needing some help. Wink

From SpywareInfo get the Direct Download of HijackThis. It's zipped.

Unzip the download (using a piece of software like Winzip). Create a folder in My Documents and to unzip HijackThis into the new folder and run it from there.

Doubleclick on HijackThis.exe from the unzipped archive and press the "Scan" button.

When the scan is finished, the "Scan" button will change into a "Save Log" button. Press this button, and save the log to a location on your machine, like the desktop.

NOTE: Most of what HijackThis lists will be harmless or even required, so do NOT fix anything yet.

Next, go to the Spyware-HijackThis Forum and press "New Topic".

Be specific in explaining your issue. Then copy and paste the contents of your HijackThis log into your new topic thread.

You'll get expert assistance in dealing with your problem shortly.

Best regards Smile

ibexDaGoat · Cadet Joined: Mar 13, 2004 Posts: 4 Location: USA

Okay, not the best phrasing in the world on my part Embarassed

Certainly there's nothing stupid about needing help, didn't mean that at all! But for a technology professional to install his own viruses at home...welll, not real brilliant, huh? But I definately appreciate the help!! I have installed the app and made logs etc. I'm going to browse this topic and the hijack this topic a bit before posting...don't wanna repeat anything that is already there.

again, Thanx!


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 736 pages served in previous 5 minutes. Page Generation: 3.231 seconds.