Computer help

[Xollence]

Hey guys, I've been having some trouble with my computer. Like every other minute or so I hear this clicking noise and then a little later this pop up opens and then keeps on opening 100s of them non stop. I've used the spyware killer and norton, nothing is wrong. Any idea what this is?

[villin]

Oh boy that sounds familiar. The thing that was causing that problem for me was a virus called 'welchia worm'. It is completely useless to use Norton against it and it even persisted after I formatted my hard drive(causing me to lose about 90GB of anime in the process http://www.gotwoot.net/forum/html/emoticons/mad.gif ). I finally found a fix through the microsoft online support chat room.

[Xollence]

Now I know where I got it from. It's an AIM profile virus. It puts a link on your profile and whenever someone clicks on it, it brings you to this website and you get infected. http://www.gotwoot.net/forum/html/emoticons/sad.gif

[hiroshi]

You say you tried Norton already? Hm... If Norton Anti-Virus cannot detect it, it means they either don't know, or it's a special virus which they can't implement the solution so easily on your AV.

Try checking the Symantec website here ('http://securityresponse.symantec.com/avcenter/tools.list.html'). This page displays a large list of tools for specific viruses which their Anti-Virus does not have solutions for. I am unsure why they keep such things separate... i guess it's because these specific viruses affect the Anti-Virus in some way too, in order to avoid detection. And thus a new tool from an external source is needed which isn't infected to get rid of the virus. (At least it makes sense right?)

They also supply information concerning each virus here, so you should be able to find your specific virus amongst these. Don't worry, the list isn't that big, so it shouldn't take you forever to go through them all.

If they do not have a tool for your specific problem, then try Alt+Ctrl+Del, and locate a process you don't recognise. Then attempt to find the file associated with that and send it to Nortons security response. If you are unable to find either a tool to fix your problem, or the file causing the problem, then type in as briefly as you can, what happens into a search engine. This will return results leading to many useful links for probably the specific virus you have.

EG: In your case, i would make a search such as:
AIM + Virus
or perhaps:
Virus + Popup

or something like that. Meh, sorry i can't help anymore on this problem =/

[hiroshi]

I made a quick search and found that there are actually a lot of AIM related Viruses. Please specify what your particular pop up boxes actually say for a more accurate result. However in regards to an AIM virus, Popup boxes, and a website, i returned a possible result. I hope it's what you're looking for: Here ('http://forums.theideaweb.com/t4935/s.html').

If it is not, please be more specific about what the Virus does, and i shall try better next time =P

[Xollence]

I tried all those things, still not working. http://www.gotwoot.net/forum/html/emoticons/mad.gif Thanks for all your help though. Hehe I can't believe you typed all that up. Only solution left is to just reformat my hd.

[hiroshi]

meh, sorry man =/
That sucks... wish i could be of help +_+;

Yeah i know about the typing lol. Whilst the FTP service is on Premium time, my bandwidth for downloading is barely being used at all. Even when i download off Kira's FTP, only about 20% of my download bandwidth is being used. Thus i have nothing better to do than to surf and stick around these forums.

Edit: hae corrected to have

[Xollence]

Also, this is what shows up....

http://www.xenogenesis.com/Images/task.gif

[hiroshi]

woah man that sucks.
IE is spamming you to death. I hate those types o_O;

First make sure your wallpaper hasn't been tampered with. Put a new background on, and then place your background back again. As you can have webpages set as your wallpaper, you may have one placed with a small refresh link to those popups. Also check your startup folder and delete anything which you don't recognise in it:

Start > Programs > Startup

Also check and empty all these directories, and clear all the dat files by opening them up in Notepad, Alt+A, Delete, Save. If it prompts you, just say yes and click save and say yes to overwrite.

For Win XP
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5
Clear out, and clean .dat
C:\Documents and Settings\Default User\Local Settings\Temp
Clear out.
C:\Documents and Settings\Default User\Local Settings\History\History.IE5
Clear out and clean .dat
C:\Documents and Settings\Default User\Cookies
Clear out, and clean .dat

Do the same to all the users, except for your own. When you come to your own user, you should login as a different person, then empty your user. As you will find hidden files you wouldn't be able to otherwise see or delete in your own user section if you were in your own user.

EG: My History folder has a folder called -
MSHist012003122220031223

These are the folders and files which Microsoft make in the background to help keep track of what your computer does for the authorities to use. Delete these folders, and don't worry about the .dat inside it. They automatically get re-created by windows anyway, except for the ones i mentioned earlier, which you clean as usual.

When you get to your own temp folder in your local settings folder, go to the Temporary Internet folder, and clean the dat file inside, do the same for the history and the cookies. LEAVE the msohtml folder alone. That dosn't need to be tampered with.

Go to your other Temporary Internet Files folder, located in the Local Settings folder, and clean out everything except the .dat file. Clean the .dat file.
Do the same for the Histroy Folder, clear out and clean the .dat and also go to up a few directories to:
C:\Documents and Settings\[user]\Cookies
Clean the .dat file.

ok. Well that's pretty thorough where the Internet is concerned. Also check your aim folders, considering it was through AIM you caught it. I don't use aim for those very reasons, so i don't know the structure and can't help you much on that. I only use AIM through Trill =P

Now i have my FTP running, making a search for the solution seems like a lot of hassle. Sorry, but you have to stand on your own two feet if this dosn't work =P
Make a quick search, it shouldn't be that hard to find a solution on the net. ^^'

[Elite Hentai]

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (villin @ Dec 18 2003, 06:56 AM)</td></tr><tr><td id='QUOTE'> (causing me to lose about 90GB of anime in the process http://www.gotwoot.net/forum/html/emoticons/mad.gif ) </td></tr></table><div class='postcolor'>
And I freaked out like never before when I lost 10 GB when my computer crashed...

[Xollence]

Thanks Sunt that helped a lot. It picked up 2 infected files (WORM SDDROP A) and (BKDR SDBOT F) but it says they&#39;re non-cleanable.

Oh and it also found (ADW SCANPORTA) and 100 other non cleanables.

[SuntUrioN]

I&#39;d suggest you first run Ad-aware ('http://www.lavasoftusa.com/support/download/') to remove all spyware and other crap from your system.

Then visit Housecall ('http://se.trendmicro-europe.com/enterprise/products/housecall.php'). Its one of the best AntiVirus scanners and it&#39;s alot faster and most of the time better than Norton.
Especially when you already accuired a virus.

When it&#39;s done scanning. Remove the virusses and reboot. Your system should be free from virusses.