Forum Home
Press F1
 
Thread ID: 45993 2004-06-09 09:10:00 Virus problems Chemical Ali (118) Press F1
Post ID Timestamp Content User
243114 2004-06-09 09:10:00 How to get rid of a virus??
My brother-in-law has been infected with a virus and is regularly losing his internet connection -- what is the best way to get rid of it?
I suggested he go to Symantec's website, ascertain the exact name of the virus and download the appropriate fixit tool but his internet connection nevers stays up for long enough to enable him to accomplish this!
Any suggestions??
Chemical Ali (118)
243115 2004-06-09 09:20:00 is he running win 2000 or XP ? if so it sounds like sasser worm.

search sasser will give you the answers.

Steve
Steve Askew (119)
243116 2004-06-09 09:56:00 What version of Windows is he running? If Windows XP and if he has the Sasser or Blaster worm he needs to activate the firewall in order to prevent reinfection after removing the worm/virus. He may also need to obtain the removal tool from Symantec from another non-infected computer to install from a floppy disk onto his own computer. tommy (2826)
243117 2004-06-09 10:01:00 Does sound like the msblaster or the Sasser worms., if it is 2K or XP.
First go ..start-run .. and enter the following :- shutdown -a
Then activate/get a firewall.
then go online, download Stinger (vil.nai.com)
and do a Windows update, or, download the patch/fix from www.microsoft.com
Pheonix (280)
243118 2004-06-09 10:28:00 Actually it sounds a hell of a lot more like NetSky.

Symantec Removal Tool Page (securityresponse.symantec.com)

Try that and let us know.
whiskeytangofoxtrot (438)
243119 2004-06-09 10:35:00 I didn't hear anything about an anti virus program....

maybe he should get one, update it, scan with it, etc. this could be spyware too.
Growly (6)
243120 2004-06-09 11:05:00 Oh yeah, I suggest you download the removal tool already linked above, and also grab Stinger from McAfee

Stinger (vil.nai.com)

Put them on a disk for him and mail/courier/drop it to him - I'm pretty certain it's probably NetSky. If it ain't Stinger will pickup most of the common ones running about at present.

Alternatively give the guy the links if he's got access to net at work/schoo/uni/interweb cafe.
whiskeytangofoxtrot (438)
243121 2004-06-09 11:07:00 Oh yeah.... one more thing.

Then get him to download and install a virus scanner...

ClamWin - http://www.clamwin.net
AVG - http://www.grisoft.com
AntiVir - http://www.freeav.com

And chastise him for randomly running attachments and not getting Windows Update yada yada yada
whiskeytangofoxtrot (438)
243122 2004-06-09 11:08:00 Netsky, the mass mailing virus...shutting down the Internet connection?
New symptom I have not come across.
Pheonix (280)
243123 2004-06-09 11:16:00 > Netsky, the mass mailing virus...shutting down the
> Internet connection?
> New symptom I have not come across.

Yes, NetSky the mass mailing virus. I definitely didn't mistype it.

Blaster/Sasser shut down the PC, not just the internet connection, and there was no mention of that happening.

Let's just say that I've sent the NetSky removal tool to well over 140 people, and that is an extremely common symptom of NetSky infection.

Jim B will vouch for that if he's around.

It is also common after it is removed for there to be a marked delay between opening OE/IE and the dial-up presenting itself - not sure quite how/why it does that yet.
whiskeytangofoxtrot (438)
1 2