worms/ virus

[ben88]

as some of you may know i have been having a problem of my computer automatically shutting down with a 1 minute time, well i have tried all the measures suggessted by you and none of them have worked.

 

 

i have noticed one thing, and that is when ever i run my antivirus program it detects the worm agabot 94208. is there any way i can stop this worm infecting my system because i have a feeling that it is the thing to blame for my problems.

how do i set up a firewall.

 

[ 15. September 2004, 08:38 PM: Message edited by: ben88 ]

[dunc85]

Why doesn't your antivirus delete or quarantine the file?

 

Anyway, download Sygate personal firewall:

http://soho.sygate.com/download/download.php?pid=spf

 

and whenever something asks to connect to the net, you can deny it access if you dont recognise it. Then, research the file name on google to see if it's a legitamate file or not.

 

do you use kazaa or something similar? have network shares, open dodgy emails? there's many ways you could be infected.

 

[ 15. September 2004, 08:32 PM: Message edited by: dunc85 ]

[ben88]

yeah i use kazaa but not very often, i seem to get reinfected every day. my antivirus prompts me and i delete the file evey time.

 

i also use msn messenger a hell of a lot.

 

any way chers for the help.

[dunc85]

What's the location of the file that keeps being detected as a virus

[Gazza_Wakey]

Ben just had a look on the symantec site but nothing showing for the worm you mentioned it sounds more like the "sasser virus"

send me an email and i will send the removal tool

[Newt]

As long as you have Kazaa installed on your PC (and probably 2 or 3 other things it brought along) you have hung a sign on the PC saying to baddies on the internet, "Welcome, come on in".

 

WinMX is probably the safest of that particular flavor of application these days.

 

This is probably the critter you are seeing mentioned though. You goofed the spelling a little.

 

ben88, I'm guessing your PC is in pretty bad shape and a full cleaning is way beyond what we need to be doing on AN. For sure do use the sasser remover Gazza_Wakey mentioned but after that, do yourself a favor and post about the problem to a forum like www.windowsbbs.com that has a section devoted to security/virus/spyware problems and has some experts who can help.

 

Before you post, download a copy of the latest version of Hijackthis (v1.98.2 as of right now), save it to a folder of it's own (maybe c:hjt), run a scan and create a scan log then post the contents of that scan log to whatever forum you decide on. Don't try to fix anything from the HJT scan yourself but post the log so someone with good knowledge of spyware & virus problems can tell you what needs fixing and exactly how.

[dunc85]

Try going:

 

My Computer> Shared Documents and disabling sharing on it.

 

I noticed that this folder is shared by default

(why m$?) and as such, viruses can write to it. They reappear even when deleted and the only way to stop it is to disable sharing.

I had this problem with agobot/gaobot until i did as described above.

[ben88]

dunc the check box to make the folder private is blanked out???

 

i will post details of the location to the file as soon as it is detcted again.

 

would completely rebooting my harddrive get rid of the virus??

 

the version of kazaa i have installed is kazaa lite++ downloaded form www.majorgeeks.com it is advertised as no spyware.

[dunc85]

the checkbox that you need to ensure is unchecked is

"Share this folder on the network".

 

Reformatting would get rid of the virus, and all your other files and programs. But rebooting is just restarting your computer.

 

The problem with kazaa/kazaa lite is that it's easy to download viruses by mistake.

[Peter Sharpe]

I have had Kazaa-lite on my computer for several years now and have never picked up a single bug from it. Mind you, I only download mp3s. If you download games or software you are asking for trouble.