Home | Community | Message Board


Kraken Kratom
Please support our sponsors.

Community >> The Pub

Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Jump to first unread post. Pages: 1
OfflineTheShroomHermit
Divine Hermit of the Everything
 User Gallery

Registered: 02/19/02
Posts: 7,575
Loc: border of Canada and Mexi...
Last seen: 2 years, 7 months
The computer worm that wouldn't die...
    #2350042 - 02/18/04 02:19 PM (14 years, 3 months ago)

My wonderful girlfreind, who is a computer support worker for a major US campus, downloaded a virus through Winmx. She used f-secure to remove the program. After she left, it came back! I've removed this thing about a dozen times since yesturday, and it doesn't show signs of stopping.
http://uk.trendmicro-europe.com/enterprise/security_info/ve_detail.php?Vname=WORM_BEREB.B&VSect=T
This thing apparently opens a backdoor to my computer, and so now I'm thinking that the virus scan just didn't detect this vunverability. And that a hacker is putting the virus onto my computer through the hole over and over again.

How do I stop this thing? My girlfreind won't help because she thinks that she got rid of the virus and it's my own stupid fault. For now, I'll be running Fsecure over and over again.
PS: It tampered with DOS, when I run IPCONFIG it immidiatly closes.


Post Extras: Print Post  Remind Me! Notify Moderator
OfflineMitchnast
Trial by Madness
Male User Gallery Arcade Champion: Mahjong

Registered: 10/28/99
Posts: 8,576
Loc: Okanagan Flag
Last seen: 2 days, 4 hours
Re: The computer worm that wouldn't die... [Re: TheShroomHermit]
    #2350109 - 02/18/04 02:33 PM (14 years, 3 months ago)

you probably have a program in your startup  that DLs and runs the virus.  not a virus itself, probably worse :smile:

that or its a tricky program that spawns its own viral files
which your scan deletes, then regenerates them.
but id say most likely it is hidden in the code of a more vital program, probably put there by a viral program (that respawns for automatic distribution to your contact list through your e-mail server, and is no longer treatable.
time to reformat.

the same probably goes for evrone on your contact list without a firewall.


--------------------


Post Extras: Print Post  Remind Me! Notify Moderator
Offlinerecalcitrant
My Own God

Registered: 04/20/02
Posts: 2,927
Loc: Canada West
Last seen: 2 years, 18 days
Re: The computer worm that wouldn't die... [Re: TheShroomHermit]
    #2350320 - 02/18/04 03:10 PM (14 years, 3 months ago)

Does the virus appear every time you start your computer?


--------------------

We have to answer our own prayers


Post Extras: Print Post  Remind Me! Notify Moderator
OfflineTheShroomHermit
Divine Hermit of the Everything
 User Gallery

Registered: 02/19/02
Posts: 7,575
Loc: border of Canada and Mexi...
Last seen: 2 years, 7 months
Re: The computer worm that wouldn't die... [Re: recalcitrant]
    #2350515 - 02/18/04 03:50 PM (14 years, 3 months ago)

It was supposed to do that, but I edited the list of programs that start upon load. The virus is not in full effect, it no longer has it's own folder with 269 copies of itself with interesting names and being shared by Winmx. However, I will run the virus scan and get nothing, and then run it again and an infected file called "restore002022929202229292 etc" on the C drive. I am guessing that this is a file that is supposed to undue the damage that my virus scanner had caused it. I've disinfected it a bunch of times, and I'm now trying to figure out how it's getting there over and over again.


Post Extras: Print Post  Remind Me! Notify Moderator
Invisiblenofind_um
Explorer ofEarth
 User Gallery

Registered: 06/30/03
Posts: 933
Loc: At work, at school, at my...
Re: The computer worm that wouldn't die... [Re: recalcitrant]
    #2350564 - 02/18/04 04:00 PM (14 years, 3 months ago)

first you need to disconnect from any type of LAN or inernet connection. Next depends on the O/S?? If it's windows ME or XP turn off system restore. Next run the removal tool. Next run your anti virus. Next run your anti spyware(adaware/spybot s&d). Next run a trojan removal tool. I always restart after each and every scan. Now run everything again. Connect to the LAN or internet connection. Pray it's gone. Rin through the removal process again. If not post back here, I'll figure something out.... NFum... Make sure you terminate the processes... First otherwise they remain in memory...

Are you following the removal procedure step by step....????


--------------------
My hunting partner is gone, I miss her so!


Edited by nofind_um (02/18/04 04:03 PM)


Post Extras: Print Post  Remind Me! Notify Moderator
OfflineMitchnast
Trial by Madness
Male User Gallery Arcade Champion: Mahjong

Registered: 10/28/99
Posts: 8,576
Loc: Okanagan Flag
Last seen: 2 days, 4 hours
Re: The computer worm that wouldn't die... [Re: nofind_um]
    #2351049 - 02/18/04 05:34 PM (14 years, 3 months ago)

its going to do a "updating system configuration. this may take a few minutes, please wait."
after that ^^^^^^
and it will take 10 min to  HALF HOUR  :frown:,
let it go.


--------------------


Post Extras: Print Post  Remind Me! Notify Moderator
Jump to top. Pages: 1

Community >> The Pub

Similar ThreadsPosterViewsRepliesLast post
* TELL ME PROGRAM LIKE KAZAA AND WINMX O_O T0aD 852 10 09/09/03 05:43 PM
by Tasty_Smurf_House
* What downloading program do you use?
( 1 2 all )
User Exists 2,030 24 12/21/02 11:45 PM
by matts
* "Reality" TV shows needs to DIE! ToTheSummit 990 7 02/28/03 12:21 PM
by JonnyOnTheSpot
* Your first computer
( 1 2 3 all )
HagbardCeline 2,278 41 01/11/04 06:00 PM
by justsmurfy
* Sometimes I fight with my computer. Little Shroom 1,549 17 07/24/03 05:45 PM
by oDin
* tonight i almost died.....i must smoke now
( 1 2 all )
notapillow 1,806 24 12/13/03 04:58 PM
by aje
* My Computer has HERPES! TODAY 603 9 05/04/04 06:18 PM
by Comfortably_Numb
* computer help Ripple 413 4 04/25/04 11:15 PM
by Ripple

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: Entire Staff
724 topic views. 11 members, 57 guests and 9 web crawlers are browsing this forum.
[ Toggle Favorite | Print Topic | Stats ]
Search this thread:
Myco Supply
Please support our sponsors.

Copyright 1997-2018 Mind Media. Some rights reserved.

Generated in 0.025 seconds spending 0.002 seconds on 16 queries.