Results 1 to 10 of 10

Thread: Virus help!! please!

  1. #1
    Mind that bus, what bus? Splat!
    Join Date
    Sep 2003
    Location
    Hertfordshire
    Posts
    1,440
    Thanks
    52
    Thanked
    21 times in 21 posts
    • Gr44's system
      • Motherboard:
      • Asus P5K Premium
      • CPU:
      • C2Q Q6600 G0 @ 3.68Ghz
      • Memory:
      • 4x1GB Crucial Ballistix PC8500+
      • Storage:
      • 2x 500GB Spinpoint
      • Graphics card(s):
      • 8800 Ultra
      • PSU:
      • Enermax 720w
      • Case:
      • Lian Li G70
      • Monitor(s):
      • 2x Dell 2408's
      • Internet:
      • Virgin 100MB

    Virus help!! please!

    Dear god, I swear if this doesn't get sorted soon I'm going to throw my bloody pc out of a freaking window from a great height!

    Right, story...

    Mate comes round and uses my 2nd pc ( one im on now ) and we play some games over the LAN, another m8 wants to join so i DMZ my pc so I can host a game so he can join over the inet - he cant connect and the Inet eventually goes down. I some how got a virus which spams my net connection so badly nothing else works. Fixed it from killing my net, but was still on the pc so though sod it i'll just format ( I have a partition so it only takes 40mins ish - easier than messing around )

    So I get it back up, all drivers back on etc. All is sound. Get home from work ( having done nothing to the pc other than put some drivers on, and the net doesnt work... It's back.. Okie.

    So I find the main offender from the Process list (Scardclnt.exe) and download a fix for it, it finds some stuff gets rid of it etc.

    I figure to completly get rid of the git I'd format just to make sure theres nothing left in the registry that might come back to life in a week or 2 - and since I had just formatted anyway, what was the harm?

    Reinstall 2k ( after a quick format on the partition ) then have to goto work. Get home from work and guess what... the internet isnt working for the rest of the house because my pc somehow has been infected again - having done nothing, not even load up IE/Firefox/ press the bloody start menu.

    I should point out during this time that I did un-DMZ myself long ago and my Inet IP has changed serveral times.

    Now I am OH so fed up. I backup my data onto my other pc ( after making sure none of it is infected. I unplug one HDD and low-level format the other one. then unplug that and low-level format the other one.

    Both HDD's have been Low level formatted. They havent been plugged in at the same time - so they cant have infected each other since.

    Make a partition for my OS. Install 2k.

    What the - hell - I get a windows messenger pop up saying some crap about my registry is broken. This is BEFORE I have even connected to the internet! ( although just after I had installed my network drivers )

    Please. Help me. Before I go postal.

  2. #2
    Mind that bus, what bus? Splat!
    Join Date
    Sep 2003
    Location
    Hertfordshire
    Posts
    1,440
    Thanks
    52
    Thanked
    21 times in 21 posts
    • Gr44's system
      • Motherboard:
      • Asus P5K Premium
      • CPU:
      • C2Q Q6600 G0 @ 3.68Ghz
      • Memory:
      • 4x1GB Crucial Ballistix PC8500+
      • Storage:
      • 2x 500GB Spinpoint
      • Graphics card(s):
      • 8800 Ultra
      • PSU:
      • Enermax 720w
      • Case:
      • Lian Li G70
      • Monitor(s):
      • 2x Dell 2408's
      • Internet:
      • Virgin 100MB
    Should of said, current running 'dodgy' processes -

    stsr32.exe
    spoolsv.exe ?
    mousehs.exe
    winhlpp32.exe
    smss.exe ?
    svchost.exe x 3?

    Messenger service is from 'SYSTEM' to 'ALERT' Got another one when I just booted it to check what processes were running.

    Gonna turn that off right now.

    Just scanned the win 2k cd i used for viruses and was ok, just put in the Asus cd i used and this pc now has stsr32.exe running on it to, didnt notice it before, but its not found any viruses on it yet...

    some one please help me

  3. #3
    Studmuffin Flibb's Avatar
    Join Date
    Jul 2003
    Location
    Kent
    Posts
    4,904
    Thanks
    31
    Thanked
    324 times in 277 posts
    • Flibb's system
      • Motherboard:
      • Gigabyte GA-970A-UD3
      • CPU:
      • AMD FX-6300
      • Memory:
      • 16GB Crucial Ballistix DDR3 PC3-12800
      • Storage:
      • Samsung SSD 840 EVO 250G
      • Graphics card(s):
      • 3GB MSI Radeon HD 7950 Twin Frozr
      • PSU:
      • FSP
      • Operating System:
      • Win7 64bit
      • Monitor(s):
      • Deffl TFT thing
    Stupid question time, have you got a firewall? If not you need one as you can get re-infected as soon as you connect the pc to the internet.

  4. #4
    Mind that bus, what bus? Splat!
    Join Date
    Sep 2003
    Location
    Hertfordshire
    Posts
    1,440
    Thanks
    52
    Thanked
    21 times in 21 posts
    • Gr44's system
      • Motherboard:
      • Asus P5K Premium
      • CPU:
      • C2Q Q6600 G0 @ 3.68Ghz
      • Memory:
      • 4x1GB Crucial Ballistix PC8500+
      • Storage:
      • 2x 500GB Spinpoint
      • Graphics card(s):
      • 8800 Ultra
      • PSU:
      • Enermax 720w
      • Case:
      • Lian Li G70
      • Monitor(s):
      • 2x Dell 2408's
      • Internet:
      • Virgin 100MB
    router has one, but I have never bothered using one and always been okie tbh, been on the inet for about 6-7 years and broadband for 4-5 years and never had anything like this. Had the odd bit of spyware from a bit of er, googling shall we say lol

    Gona try and download one now, atleast I can block it and carry on using the inet - this one is getting well slow because of it!

  5. #5
    Shunned from CS:S Trippledence's Avatar
    Join Date
    Feb 2005
    Location
    Exeter Uni/Truro Cornwall
    Posts
    1,848
    Thanks
    0
    Thanked
    1 time in 1 post
    Try Kerio as it goes right into the core of windows and shouls stop apps you dont want from conectiong to the net. Or running.

  6. #6
    Prize winning member. rajagra's Avatar
    Join Date
    Oct 2004
    Posts
    1,023
    Thanks
    0
    Thanked
    0 times in 0 posts
    1) Are you really doing a low-level format? (Trick question, really. You can't do a true low-level format of modern drives!) Or are you just formatting partitions without the QUICK option? You could be leaving something in the MBR.
    2) Are you only checking one of your PCs for viruses? Sounds like it's spread over the network, and is going to keep on doing so until you isolate and clear each PC.
    DFI LanParty UT NF4 SLI-D; AMD64 3500+ Winchester ;
    2x XFX 6600GT ; Corsair XMS3200XLPRO TWINX 1GB;
    Dell 2405FPW TFT.

  7. #7
    Taz
    Taz is offline
    Senior Member Taz's Avatar
    Join Date
    Jan 2005
    Location
    London
    Posts
    2,111
    Thanks
    49
    Thanked
    26 times in 25 posts
    • Taz's system
      • Motherboard:
      • Gigabyte Z270 HD3P
      • CPU:
      • Intel Core i5 7600K
      • Memory:
      • Corsair CMK16GX4M2B3200C16R Vengeance LPX 16 GB
      • Storage:
      • Samsung 960 EVO M.2-2280 500GB (PCIe) + 1TB Sandisk Ultra II SSD (SATA)
      • Graphics card(s):
      • Asus NVIDIA GeForce GTX 1070 OC
      • PSU:
      • Corsair CS550M 550W Hybrid
      • Case:
      • NZXT Source 340
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • 34" Asus Designo Curve MX34VQ UWQHD Monitor
      • Internet:
      • Virgin Media Vivid 200
    MBR doesn't get formatted by a normal 'format'. Don't you have to use someting like 'fdisk /mbr'? Also, 'fixmbr' under recovery console of XP will also repair your MBR (but probably will not reformat it).

  8. #8
    Nox
    Nox is offline
    Vorsprung durch Technik
    Join Date
    Oct 2003
    Location
    Hampshire
    Posts
    2,023
    Thanks
    2
    Thanked
    2 times in 2 posts
    • Nox's system
      • Motherboard:
      • Yes
      • CPU:
      • Yes
      • Memory:
      • Yes
      • Storage:
      • Yes
      • Graphics card(s):
      • Yes
      • PSU:
      • Yes
      • Case:
      • Yes
      • Monitor(s):
      • Yes
      • Internet:
      • Yes
    Quote Originally Posted by Gr44
    Should of said, current running 'dodgy' processes -

    stsr32.exe
    spoolsv.exe ?
    mousehs.exe
    winhlpp32.exe
    smss.exe ?
    svchost.exe x 3?
    stsr32.exe - never heard of it
    spoolsv - this is the printer stuff
    mousehs.exe - http://www.bleepingcomputer.com/star....exe-9016.html
    winhlpp32.exe - http://securityresponse.symantec.com...gaobot.ao.html
    smss.exe - some system thing, doesn't mean it isn't infected tho
    svchost - these are literally anything...

    i like www.cai.com for virus info personally, have a browse I'm assuming it still tells you how to manually remove each virus.

    Nox

    Nox

  9. #9
    Mind that bus, what bus? Splat!
    Join Date
    Sep 2003
    Location
    Hertfordshire
    Posts
    1,440
    Thanks
    52
    Thanked
    21 times in 21 posts
    • Gr44's system
      • Motherboard:
      • Asus P5K Premium
      • CPU:
      • C2Q Q6600 G0 @ 3.68Ghz
      • Memory:
      • 4x1GB Crucial Ballistix PC8500+
      • Storage:
      • 2x 500GB Spinpoint
      • Graphics card(s):
      • 8800 Ultra
      • PSU:
      • Enermax 720w
      • Case:
      • Lian Li G70
      • Monitor(s):
      • 2x Dell 2408's
      • Internet:
      • Virgin 100MB
    Ok, last night i low level'd ( or wrote zeros to my drive, for the pedantic ones ) one of my hdd's and put an os on it, put a firewall on it before i even touched a cat5 cable and all seems well!

    Problem is the other one is still infected lol - think thats more of a tomorow job though :|

    Cheers for all your help guys!

  10. #10
    Studmuffin Flibb's Avatar
    Join Date
    Jul 2003
    Location
    Kent
    Posts
    4,904
    Thanks
    31
    Thanked
    324 times in 277 posts
    • Flibb's system
      • Motherboard:
      • Gigabyte GA-970A-UD3
      • CPU:
      • AMD FX-6300
      • Memory:
      • 16GB Crucial Ballistix DDR3 PC3-12800
      • Storage:
      • Samsung SSD 840 EVO 250G
      • Graphics card(s):
      • 3GB MSI Radeon HD 7950 Twin Frozr
      • PSU:
      • FSP
      • Operating System:
      • Win7 64bit
      • Monitor(s):
      • Deffl TFT thing
    You might also want to get some of this



    A bit of holy water from http://www.discountcatholicstore.com
    should prevent future infection from the cyber demons

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Is anti virus software worth it?
    By ives in forum Software
    Replies: 70
    Last Post: 17-08-2005, 06:43 PM
  2. Rundll32 virus!!
    By johnnr892 in forum Help! Quick Relief From Tech Headaches
    Replies: 8
    Last Post: 29-07-2004, 08:21 PM
  3. MP3 virus alert.
    By Dorza in forum General Discussion
    Replies: 16
    Last Post: 26-04-2004, 05:25 PM
  4. Netskyb virus...
    By streetster in forum General Discussion
    Replies: 18
    Last Post: 10-03-2004, 04:00 PM
  5. The AOL virus :D
    By Alex in forum General Discussion
    Replies: 2
    Last Post: 07-02-2004, 04:10 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •