( search forums )
Help with some virus
Soldat Forums - Misc - The Lounge
SuperKill
June 25, 2004, 7:05 pm
i have a serious problem:
whenever i connect, my internet gets really slow because something is probably using my connection to spread some information. (says the microsoft help dude)
whenever i run netstat (start, run, cmd, netstat)
i'm suppose to get like 10-20 processes.. but i'm getting above 500 (it doesnt stop listing them).
its probably a virus or some dialer..
anyone have any idea how to take care of this ? (spybod s&d and ad-aware arent any help here)

thx in advance.

Se7enWolf
June 25, 2004, 7:28 pm
most likely a trojan or an ad-ware, I suggest [URL]'s free trial of "spy sweeper", effective tool for adware, cookies, trojans, and spyware, also tells you which each thing did, hope this helps you [:D]

palloco
June 25, 2004, 7:31 pm
Well, try different antivirus... what else could we say.
Check those processes running? Which programs are? Where are they located? Erase them if u see they are not needed.

Deleted User
June 25, 2004, 8:39 pm
Try running msconfig from Run in Start menu, and check if any dialers are automatically loading on startup.

that fuking sniper
June 25, 2004, 9:16 pm
SpyBot: Search and Destroy. That can help ya. ZoneAlarm might help you too, since it reports *everything* it detects using your internet, though its an annoying program. If all fails, just format.

Chakra
June 25, 2004, 9:42 pm
look for a freeware programme called 'Hijack This' ...very helpful programme for spyware.

It's possible you have a few trojans, which give access to amatuer hackers (ie: children), so you'll need something like norton antivirus.

..if your spybot s&d doesn't load, thats 'cos the spyware has 'shafted' you. They're that full of it, that they block your anti-spyware loading. And Ad-aware really ain't healthy either apparently.

that fuking sniper
June 25, 2004, 11:06 pm
Uhh, sorry for straying a bit from the topic, but since theres already a thread about viruses and such I guess I'll just ask this here.

My Norton AntiVirus stopped loading today and nothing gets it back. I'm sick of it and I want a new anti-virus program, a free one. Can anyone point me in a good direction?

morpheus
June 25, 2004, 11:19 pm
http://www.avast.com/ <---- free

Noobile
June 25, 2004, 11:47 pm
theres always http://www.housecall.antivirus.com Trend micro operated, and free as candy from your kids on easter

BMF
June 26, 2004, 2:37 am
what Noobile said

Afkamm
June 26, 2004, 3:15 am
You can download HijackThis and run it. It'll list all the programs that run when your PC boots up and all the proccesses currently running. Save this to the log file and then post the contents here. I'll go through it and tell you what you need to delete.

You can also download Ad-Aware. This'll scan your whole PC and give you the option to remove anything that it picks up.

:)

Vigilante
June 26, 2004, 3:26 am
Afkamm, where'd you learn to read HT logs? You on an anti-spyware forums somewhere's? If not (or even if you are) come join the fight at forums.spywareinfo.com. You'd fit righ tin with us.

SuperKill
June 26, 2004, 9:25 am
i ment that ad-aware and spybot s&d are working properly but whatever they find and fix\delete, isnt stopping this ;S
downloading zone alarm now and thx everyone.

AerialAssault
June 26, 2004, 10:13 am
TROJAN MAN!!!

b00stA
June 26, 2004, 2:21 pm
Vigilante, I think after some time you'll know what belongs to your system and what doesn't (I'm talking about HiJackThis)

free virus scanners:
AntiVir XP
Avast
BitDefender

ad/spyware:
Ad-Aware
Spybot: Search&Destroy
HiJackThis

you should be careful with HiJackThis because you can easily mess up your system.

Vigilante
June 26, 2004, 2:34 pm
quote:you should be careful with HiJackThis because you can easily mess up your system.

Yeah, especially with O10s and O17s, peapole are always suspicious of them. I've been trying to get Meijn to change the label for O10s to something other than "broken internet access" because then people get scared, try to get HT to fix it, and end up really breaking their internet because they should've used LSPFix. Let me extend on your list a bit:

free virus scanners:
AntiVir XP
Avast
BitDefender
*AVG

ad/spyware:
*Ad-Aware
*Spybot: Search&Destroy (+immunization)
*HijackThis
*SpywareGuard
*SpywareBlaster
*IE-Spyads

Free Firewalls:
Sygate
*Kerio
ZoneAlarm

We're always looking for helpers at forums.spywareinfo.com if any y'all are interested.

SuperKill
June 26, 2004, 4:56 pm
ty people. (fixed)
tried zone alarm first, it said "PDched.exe" is trying to connect somewhere and blocked it.. and whoa suddenly my internet works like it should instead of 56k modem line :>
so i had to terminate and delete it from the registry.
its a shame that it doesnt say anything (atleast where i looked) about that file, it definetly creates a mess.

that fuking sniper
June 26, 2004, 8:43 pm
Yea but if you keep ZoneAlarm it'll drive you crazy. It reports *every single goddamn file that connects in some way to the internet*. Soon you'll scream at your monitor and delete it :P

It's good to have, though, when you want to find some trojan/virus that connects to the internet.

Afkamm
June 26, 2004, 11:15 pm
quote:Originally posted by Vigilante
Afkamm, where'd you learn to read HT logs? You on an anti-spyware forums somewhere's? If not (or even if you are) come join the fight at forums.spywareinfo.com. You'd fit righ tin with us.

Put quite simply, I know what is installed on my PC and can spot "the odd ones out" a mile away. :) I'm not any sort of expert on spy/ad ware, viruses, trojans, or worms, but I can normally spot them as they have weird names and are in weird locations. I also tend to search for the filename on Google to see if it has a history. :)

Afkamm
June 26, 2004, 11:18 pm
quote:Originally posted by SuperKill
ty people. (fixed)
tried zone alarm first, it said "PDched.exe" is trying to connect somewhere and blocked it.. and whoa suddenly my internet works like it should instead of 56k modem line :>

What was the path to the file, was it in the windows temp folder?

BManx2000
June 26, 2004, 11:30 pm
quote:Originally posted by that fuking sniper
Yea but if you keep ZoneAlarm it'll drive you crazy. It reports *every single goddamn file that connects in some way to the internet*. Soon you'll scream at your monitor and delete it :P


That's why you check "remember this setting" :P

Hitman
June 26, 2004, 11:47 pm
Meh, I just have McAfee Personal Firewall. Seems to be working so far..

wormdundee
June 27, 2004, 12:01 am
yeh, i do the same thing as bman up there

ive had zonealarm forever, just tell it to remember whatever you select and press your button of choice, and having it report every single thing once is actually good

DT
June 28, 2004, 3:52 am
Also porn sites are infested with viruses and spyware and many other things.. i know... heh..

that fuking sniper
June 28, 2004, 8:06 am
Depends if they're official or not. The official ones dont have viruses but require you to pay them, but then again, who in the hell would do that when you can get any porn you need from Kazaa for free? Then again almost everything thats porn from Kazaa has some malicious script on it.

DT
June 29, 2004, 3:27 am
AH I USED HIJACK THIS AND EVERYTHINGS AND ITS CRAZY!!!! I EVEN RESTOReD IT ALL BUT NOW ITS GOING CRAZY! AHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH ah.

N1nj@
June 29, 2004, 9:04 pm
lol...pwned

anyway, I just wanted to say avast is a really good antivirus program...it detects almost everything...lol