Register | Sign In


Understanding through Discussion


EvC Forum active members: 65 (9162 total)
3 online now:
Newest Member: popoi
Post Volume: Total: 915,817 Year: 3,074/9,624 Month: 919/1,588 Week: 102/223 Day: 13/17 Hour: 0/0


Thread  Details

Email This Thread
Newer Topic | Older Topic
  
Author Topic:   HELP
Lindum
Member (Idle past 3397 days)
Posts: 162
From: Colonia Lindensium
Joined: 02-29-2004


Message 16 of 35 (121877)
07-04-2004 5:01 PM
Reply to: Message 15 by mike the wiz
07-04-2004 4:49 PM


hmmm.... mike can you try this: go to start, run... and type "shutdown -a" without the quotes and enter/press ok.
This won't fix the cause of the problem, but may stop it rebooting so you can spend more time online to find a cure.
If it doesn't work there is a slightly more long winded method of preventing the shutdown which I can email you...

This message is a reply to:
 Message 15 by mike the wiz, posted 07-04-2004 4:49 PM mike the wiz has replied

Replies to this message:
 Message 17 by mike the wiz, posted 07-04-2004 5:06 PM Lindum has not replied

  
mike the wiz
Member
Posts: 4752
From: u.k
Joined: 05-24-2003


Message 17 of 35 (121878)
07-04-2004 5:06 PM
Reply to: Message 16 by Lindum
07-04-2004 5:01 PM


Hey Lindum, thanks it worked, that has bought me more time.
Interestingly, Jar's link in message 11 seems to match up with the number given on the shut down message.
BTW, how long will I be given this "extra time"? . Naughty boys are allowed atleast some extra time. lol.

This message is a reply to:
 Message 16 by Lindum, posted 07-04-2004 5:01 PM Lindum has not replied

Replies to this message:
 Message 18 by jar, posted 07-04-2004 5:10 PM mike the wiz has replied

  
jar
Member (Idle past 394 days)
Posts: 34026
From: Texas!!
Joined: 04-20-2004


Message 18 of 35 (121880)
07-04-2004 5:10 PM
Reply to: Message 17 by mike the wiz
07-04-2004 5:06 PM


Are you running windows 2000?

Aslan is not a Tame Lion

This message is a reply to:
 Message 17 by mike the wiz, posted 07-04-2004 5:06 PM mike the wiz has replied

Replies to this message:
 Message 19 by mike the wiz, posted 07-04-2004 5:13 PM jar has replied

  
mike the wiz
Member
Posts: 4752
From: u.k
Joined: 05-24-2003


Message 19 of 35 (121881)
07-04-2004 5:13 PM
Reply to: Message 18 by jar
07-04-2004 5:10 PM


xp. But the number given in your link is the same as the one that comes on my screen. How significant that is I don't know.
I've been online for 10 minutes thanks to Lindum's little trick.

This message is a reply to:
 Message 18 by jar, posted 07-04-2004 5:10 PM jar has replied

Replies to this message:
 Message 20 by jar, posted 07-04-2004 5:30 PM mike the wiz has not replied
 Message 21 by Lindum, posted 07-04-2004 5:37 PM mike the wiz has replied

  
jar
Member (Idle past 394 days)
Posts: 34026
From: Texas!!
Joined: 04-20-2004


Message 20 of 35 (121882)
07-04-2004 5:30 PM
Reply to: Message 19 by mike the wiz
07-04-2004 5:13 PM


That's very significant. The problem I posted about was fixed in XP Professional (But not ME).
It sounds like you have a virus infection.
Please try this. First go to Trend Micro and run their online virus scan. It should detect which virus your have (most likely a sasser varient) and clear things up. Next make sure that you get a good AV program with the latest definitions. KEEP THE DEFINITIONS UPDATED AT LEAST WEEKLY.

Aslan is not a Tame Lion

This message is a reply to:
 Message 19 by mike the wiz, posted 07-04-2004 5:13 PM mike the wiz has not replied

  
Lindum
Member (Idle past 3397 days)
Posts: 162
From: Colonia Lindensium
Joined: 02-29-2004


Message 21 of 35 (121884)
07-04-2004 5:37 PM
Reply to: Message 19 by mike the wiz
07-04-2004 5:13 PM


Glad that worked, Mike - but remember it hasn't fixed the problem. As others have mentioned, what you really need is a decent firewall... The free version of zonealarm is here. Not sure if you have to buy it after 30 days, but it will get you up and running until you sort something permanent in that case.
One thing you can (and should) do now you have the time is run a windows update from http://v4.windowsupdate.microsoft.com/en/default.asp and apply any of the critical updates.
[edit to add:] I echo Jar's comments about having upto date AV, too. Sadly these days, a firewall and antivirus are essential if you spend anytime online.
This message has been edited by Lindum, 07-04-2004 04:40 PM

This message is a reply to:
 Message 19 by mike the wiz, posted 07-04-2004 5:13 PM mike the wiz has replied

Replies to this message:
 Message 22 by mike the wiz, posted 07-04-2004 5:56 PM Lindum has not replied

  
mike the wiz
Member
Posts: 4752
From: u.k
Joined: 05-24-2003


Message 22 of 35 (121885)
07-04-2004 5:56 PM
Reply to: Message 21 by Lindum
07-04-2004 5:37 PM


Thanks for all the help guys. I am grateful. I ran the online check Jaar...it didn't find a virus though.
I have downloaded zonealarm Lindum and will now set that up.

This message is a reply to:
 Message 21 by Lindum, posted 07-04-2004 5:37 PM Lindum has not replied

Replies to this message:
 Message 23 by jar, posted 07-04-2004 6:01 PM mike the wiz has replied

  
jar
Member (Idle past 394 days)
Posts: 34026
From: Texas!!
Joined: 04-20-2004


Message 23 of 35 (121886)
07-04-2004 6:01 PM
Reply to: Message 22 by mike the wiz
07-04-2004 5:56 PM


Did you turn off the restore function before you ran the AV check?

Aslan is not a Tame Lion

This message is a reply to:
 Message 22 by mike the wiz, posted 07-04-2004 5:56 PM mike the wiz has replied

Replies to this message:
 Message 24 by mike the wiz, posted 07-04-2004 6:30 PM jar has not replied

  
mike the wiz
Member
Posts: 4752
From: u.k
Joined: 05-24-2003


Message 24 of 35 (121893)
07-04-2004 6:30 PM
Reply to: Message 23 by jar
07-04-2004 6:01 PM


Dunno Jarry boy, I've a memory like a siv. But now I've got this zonealarm program, the problem hasn't occured, and I denied a program access....so I'm already a little pc Hitler. Hahaha!
So you and Lindum are real champions!!!!
I think the problem is solved for now, but I won't become complacent. Thanks to everyon who helped!

This message is a reply to:
 Message 23 by jar, posted 07-04-2004 6:01 PM jar has not replied

Replies to this message:
 Message 26 by Trixie, posted 07-05-2004 4:02 AM mike the wiz has replied

  
johnfolton 
Suspended Member (Idle past 5591 days)
Posts: 2024
Joined: 12-04-2005


Message 25 of 35 (121967)
07-05-2004 12:00 AM


I'm barely computer literate, so I need all those help programs to cure problems, like Norton System Works, but while not a virus, it cures registry problems, makes a computer run faster.
On another note there is several free programs that you can update to remove advertiser bots that draw on computer resources slowing down a computer, Google has a free pop up blocker that you can download to run along with Lava and spybot search and destroy.
Get Ad-Aware from Adaware: The Best FREE Antivirus & ad block. The free version (called simply "Ad-Aware")
Get Spybot Search and Destroy from: Page Not Found - CNET Download It's also free.
I never used this but it sounds like another free virus detector check, via symantec.
http://security.symantec.com/sscv6/home.asp?j=1&langid=ie...
This message has been edited by whatever, 07-04-2004 11:35 PM

  
Trixie
Member (Idle past 3706 days)
Posts: 1011
From: Edinburgh
Joined: 01-03-2004


Message 26 of 35 (122017)
07-05-2004 4:02 AM
Reply to: Message 24 by mike the wiz
07-04-2004 6:30 PM


Sorry Mike
Got all ready to send the e-mail, posted my message on the board and we got a power failure. Whole area out for four hours. I missed the European Championship Final!!!!!!!!!!!!!!!!!!!
Anyway, have had a look at the Sasser worm and there are six different versions of it, each one requiring a different fix tool. If you go to
Symantec Security Center
you can download them all. Sasser causes LSASS.EXE to crash, so it sounds like Sasser.
Download all the fix tools then run them one at a time, taking care to follow the instructions EXACTLY.
DON'T FORGET TO TURN OFF THE SYSTEM RESTORE FUNCTION IN XP. THE WORM WILL BE PRESENT IN ALL THE RESTORE POINTS THAT HAVE BEEN SAVED SINCE YOU GOT THE WORM. IF YOU RESTORE FROM ANY OF THESE YOU GET THE WORM BACK!!!!!
As soon as you're happy your system is clean, set a manual restore point.
The home version of ZoneAlarm is totally free, the ZoneAlarm Pro is a 30 day trial, but if you choose not to get it, you can still have the personal version. Also, Whatever's suggestion of getting Ad-aware is a great one too. Ad-aware removes sypware on your puter - programs that spy on you and send reports back to their "master". They can use up alot of your system resources and some are classified as "High Risk" because they act a bit like a worm. Ad-Aware will remove them all. I run it after EVERY connection to the net and usually find half a dozen or so of these wee blighters. I cleaned my friend's puter and she had 1081 of them, about a third of which were high risk - Aureate, Radiate, RedSherrif - you name it she had it and she'd only been online for 3 months!!!

This message is a reply to:
 Message 24 by mike the wiz, posted 07-04-2004 6:30 PM mike the wiz has replied

Replies to this message:
 Message 27 by mike the wiz, posted 07-05-2004 1:37 PM Trixie has replied
 Message 28 by mike the wiz, posted 07-05-2004 3:58 PM Trixie has not replied

  
mike the wiz
Member
Posts: 4752
From: u.k
Joined: 05-24-2003


Message 27 of 35 (122133)
07-05-2004 1:37 PM
Reply to: Message 26 by Trixie
07-05-2004 4:02 AM


Re: Sorry Mike
Wow, thanks for that tidbit Trixie babe. I will indeed make a manual restore oint so it doesn't come back. Just incase you missed my earlier babblings, zonealarm seems to have fixed my recent virus. But I will definitely take yours ans whatevers advice and rig up a mean sucker in due course.

This message is a reply to:
 Message 26 by Trixie, posted 07-05-2004 4:02 AM Trixie has replied

Replies to this message:
 Message 29 by Trixie, posted 07-05-2004 4:27 PM mike the wiz has not replied

  
mike the wiz
Member
Posts: 4752
From: u.k
Joined: 05-24-2003


Message 28 of 35 (122167)
07-05-2004 3:58 PM
Reply to: Message 26 by Trixie
07-05-2004 4:02 AM


Re: Sorry Mike
I downloaded ad-aware. It detected 43 as "recognized". I then proceeded in deleting them nasties. Just shows how much accumulated junk happens unwittingly. And that's after reinstalling windows a couple of days ago. So I'm not surprised your friend was attacked that much from them. My system was previously shouting, "come get me".
Thanks for the link Whatever
This message has been edited by mike the wiz, 07-05-2004 02:59 PM

This message is a reply to:
 Message 26 by Trixie, posted 07-05-2004 4:02 AM Trixie has not replied

Replies to this message:
 Message 30 by coffee_addict, posted 07-06-2004 12:25 AM mike the wiz has replied

  
Trixie
Member (Idle past 3706 days)
Posts: 1011
From: Edinburgh
Joined: 01-03-2004


Message 29 of 35 (122176)
07-05-2004 4:27 PM
Reply to: Message 27 by mike the wiz
07-05-2004 1:37 PM


Re: Sorry Mike
Mike, if you've still got a worm on board, you can block its attempts to get out using ZoneAlarm, but it will still be there. Even though your problem seems to have gone away, download and use the fix tools. They'll screen your system for the six versions of the worm and remove any they find. Good luck. Oh and don't forget both ZoneAlarm and Ad-aware need to be updated regularly just like antivirus software. I do mine fortnightly, but I used to do it nearly daily. Also make sure your XP firewall is operating as well as ZoneAlarm - it gives you an extra layer of protection, just in case. I'm a cheapskate so I run AVG antivirus which is a free for personal use one. You'll find it at grisoft. Also, there's a wee thing on the web you can use to check your security. Go here
Shields UP!! — System Error
Then click on "All Service Ports"
It determines your IP address then tries to "hack" your puter. If you've got ZoneAlarm configured correctly your puter will be in stealth mode and the port probe can't even detect that there's a puter at the address you've given. That means that a hacker wouldn't even bother trying to get in so you're much safer than just using a blocker. I've just done it on mine because I updated my ZoneAlarm and wanted to check it was configured correctly. It works like a dream!
It's one of the best things I've found on the web for security checking. It's run by Steve Gibson of the Gibson Research Corporation. If you just go to
  Home of Gibson Research Corporation  
You can read up loads on security and what baddies try to do.

This message is a reply to:
 Message 27 by mike the wiz, posted 07-05-2004 1:37 PM mike the wiz has not replied

  
coffee_addict
Member (Idle past 477 days)
Posts: 3645
From: Indianapolis, IN
Joined: 03-29-2004


Message 30 of 35 (122298)
07-06-2004 12:25 AM
Reply to: Message 28 by mike the wiz
07-05-2004 3:58 PM


Re: Sorry Mike
Mike, if you just reinstalled windows a few days ago, why not just reformat your entire hard drive and reinstall your os again? That is, if you want an easy way out.
By the way, how did you reinstall your windows last time? Did you format the hard drive first?

The Laminator

This message is a reply to:
 Message 28 by mike the wiz, posted 07-05-2004 3:58 PM mike the wiz has replied

Replies to this message:
 Message 31 by mike the wiz, posted 07-06-2004 1:30 PM coffee_addict has replied

  
Newer Topic | Older Topic
Jump to:


Copyright 2001-2023 by EvC Forum, All Rights Reserved

™ Version 4.2
Innovative software from Qwixotic © 2024