Re: Viruses_Worms
From: Kristine (anonymous_at_discussions.microsoft.com)
Date: 01/19/04
- Next message: Patrick Casher: "Re: virus spam"
- Previous message: David H. Lipman: "Re: Virus???"
- In reply to: taff: "Re: Viruses_Worms"
- Next in thread: Bill Sanderson: "Re: Viruses_Worms"
- Reply: Bill Sanderson: "Re: Viruses_Worms"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 19 Jan 2004 09:21:03 -0800
After deleting the partition, draining all power from
memory, re-install and patch KB823980, it's fine.
It's some kind of worm for sure. Possibly not one known to
Microsoft or NAV.
Full system scans show nothing.
There aren't any fix tools for this worm, therefore any
infected computer must be re-installed. Sucks to be me
right now.
>-----Original Message-----
>Probably because the reformat and install was done
without switching
>the machine off and the problem is memory resident.
>Fdisk and a power down should clear it. Unless it is on
the install
>CD. Hmmmm.
>
>Taff........
>
>On Sat, 17 Jan 2004 14:43:29 -0500, "Bill Sanderson"
><Bill_Sanderson@msn.com.plugh.org> wrote:
>
>>I agree with your recommendations, although they should
also either disable
>>peer shares, or password protect them.
>>
>>However, she did say that the effect happens without
connecting to the
>>network, after the format and reinstall.
>>
>>"taff" <taff@the-valleys.com> wrote in message
>>news:0dri00588fi19q3hru146mhtlt4st7g7n6@4ax.com...
>>> When you format and re-install on one machine, the
virus is hiding on
>>> another, as soon as you connect to the internal
network, poof, the
>>> virus appears.
>>> Disconnect all network cables, fdisk all drives and
turn the machines
>>> off for a few minutes.
>>> Re-install the OS, install AV and check each machine.
THEN connect the
>>> network.
>>>
>>> Taff............
>>>
>>> On Sat, 17 Jan 2004 12:05:33 -0500, "Bill Sanderson"
>>> <Bill_Sanderson@msn.com.plugh.org> wrote:
>>>
>>>>You didn't mention the 5 machines before this.
>>>>
>>>>You also said:
>>>>-------------------------------------------------------
------------
>>>>Another funny thing...After complete format and re-
install
>>>>sypmtoms return promptly without network or internet
connection.
>>>>-------------------------------------------------------
-------------
>>>>I'm having some difficulty spotting where a virus
hides over such a
>>>>process.
>>>>
>>>>OK--maybe you didn't fdisk, and it's a boot sector
virus--those are mostly
>>>>pretty ancient critters, though!
>>>>
>>>>1-866-pcsafety for a direct line to Microsoft PSS--
this service is free
>>>>for
>>>>virus-related or security patch related issues.
>>>>
>>>>"Kristine" <anonymous@discussions.microsoft.com> wrote
in message
>>>>news:068201c3dcbb$b1c15b60$a101280a@phx.gbl...
>>>>> This smart guy that I work with, took it upon
himself to
>>>>> bring the PC that originally had these symptoms, that
>>>>> belonged to his Mother, in to the network internally.
>>>>> The very next morning, it spread.
>>>>> Right at this moment I have five PC's that are
infected.
>>>>> If not virus or worm, then what could it possibly
be??
>>>>>
>>>>> You cannot see content of log messages.
>>>>> You cannot ctrl-x, ctrl-v.
>>>>> After format and reinstall, the symptoms arrive
within
>>>>> small time frame.
>>>>>
>>>>> I'm deleting the partition, unplugging power,
>>>>> drain RAM, flash BIOS, and see what happens.
>>>>>
>>>>> Ran it past some Microsoft Guys this evening and
they have
>>>>> never heard of such a thing.
>>>>> We'll see here pretty soon.
>>>>> Thanks again..
>>>>> Somebody have a good weekend for me!!
>>>>>
>>>>>
>>>>>>-----Original Message-----
>>>>>>Not a virus or worm.
>>>>>>
>>>>>>You're in the wrong forum.
>>>>>>
>>>>>>What's the content of the log messages--you can
>>>>> highlight, CTRL-V and paste?
>>>>>>There are lots of different 7001's so the content and
>>>>> source matter.
>>>>>>Haven't looked at the rest--give us a selection
following
>>>>> a boot.
>>>>>>
>>>>>>You format, reinstall, when does this start
happening?
>>>>>>
>>>>>>
>>>>>>"Kristine" <anonymous@discussions.microsoft.com>
wrote in
>>>>> message
>>>>>>news:78ADB623-5BB2-497E-BD27-
5F7FBEF7BB1B@microsoft.com...
>>>>>>> Hey Bill,
>>>>>>> Thanks for being so helpful!!!
>>>>>>> Symantec--01/14/2004 rev.5 latest virus def files.
>>>>>>> Complete scans come up with "no viruses found"
>>>>>>> Another funny thing...After complete format and re-
>>>>> install
>>>>>>> sypmtoms return promptly without network or
internet
>>>>> connection.
>>>>>>> I have used removal tools for the following worms:
>>>>>>> Blaster, Blaster A-F, Welchia, and Swen: All come
back
>>>>> with nothing found.
>>>>>>> Any further assistance greatly appreciated.
>>>>>>> K
>>>>>>
>>>>>>
>>>>>>.
>>>>>>
>>>>
>>>
>>>
>>>
>>>
>>> www.sounds-pa.com | www.thecomputerworkshop.com
>>
>
>
>
>
>www.sounds-pa.com | www.thecomputerworkshop.com
>.
>
- Next message: Patrick Casher: "Re: virus spam"
- Previous message: David H. Lipman: "Re: Virus???"
- In reply to: taff: "Re: Viruses_Worms"
- Next in thread: Bill Sanderson: "Re: Viruses_Worms"
- Reply: Bill Sanderson: "Re: Viruses_Worms"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
