Hello,

I upgraded my computer to a P4 and installed WinXPpro (service pack1)
on Sunday. I couldn't connect to the internet due to the cable
software compatibility problem with XP but the cable modem was still
plugged in though. (My ISP - telstra bigpond system forces its cable
modem users to use its prop software to connect to the internet) I
installed my antivirus program VET that had the latest patch and went
to sleep. On Monday when the software problem was resolved, I then
proceeded to patch WinXP using windowsupdate.

But then I found that my computer was acting up. The CPU temperature
was going from 47 -59 and the CPU or powersupply fan was making made
high pitched noises. For a few seconds, I even heard an ugly grinding
noise coming from the CPU. The internet connection was also cutting
out and the cable modem lights - RD was flashing wildly and the TD
light was on 100%. The computer programs were very slow, typed words
took a few seconds to appear.... WTF????

My anti-virus program - CA's VET - fully updated - did not find any viruses.
I emailed them and a few days later they replied and told me to get trojan
hunter to fix the problem.
I thought that there were teething problem with the new hardware or
the windows update had screwed up. But then I found wuamgrd.exe and
wuacuclt.exe running in the background. All this in less than 6
hours??? I did the google search and went to sophos.com and followed
their instructions to remove wuamgrd but I couldn't remove wuauclt.exe
so I formated the core drive. I unattached the cable modem,
reinstalled WinXP pro, installed my personal copy of zone alarm pro,
reconnected the cable modem,
then proceed to update and patch XP. I also went to blackviper.com and
followed
his instructions to remove Window's stupid moronic default file
sharing and network programs. The people at Microsoft should get a
good kick in the groin for creating a hacker friendly OS.

Everything seems 100% perfect now. But.... however! I'm worried that
my computer's (data and storage) D: and E: hard drives harddrives,
which were connected, might be infected with the damned virus.

I did a search on wuamgrd but only trendmicro and sophos carry any
information about it. VET, my old av and grisoft do not.

So two questions - 1 - which is the best anti-virus software Sophos or
Trendmicro or any others? And should I be worried that my other
harddrives were infected?

Thanks and sorry for the long post!

Cheers,

Crimson
--
_____________________________
Everybody gets so much information all day long that they lose their common
sense.
Gertrude Stein (1874 - 1946)

On Thu, 03 Jun 2004 16:05:25 GMT, "Crimson Castle"
<(E-Mail Removed)> wrote:

>Hello,
>
>I upgraded my computer to a P4 and installed WinXPpro (service pack1)
>on Sunday. I couldn't connect to the internet due to the cable
>software compatibility problem with XP but the cable modem was still
>plugged in though. (My ISP - telstra bigpond system forces its cable
>modem users to use its prop software to connect to the internet) I
>installed my antivirus program VET that had the latest patch and went
>to sleep. On Monday when the software problem was resolved, I then
>proceeded to patch WinXP using windowsupdate.
>
>But then I found that my computer was acting up. The CPU temperature
>was going from 47 -59 and the CPU or powersupply fan was making made
>high pitched noises. For a few seconds, I even heard an ugly grinding
>noise coming from the CPU. The internet connection was also cutting
>out and the cable modem lights - RD was flashing wildly and the TD
>light was on 100%. The computer programs were very slow, typed words
>took a few seconds to appear.... WTF????
>
>My anti-virus program - CA's VET - fully updated - did not find any viruses.
>I emailed them and a few days later they replied and told me to get trojan
>hunter to fix the problem.
>I thought that there were teething problem with the new hardware or
>the windows update had screwed up. But then I found wuamgrd.exe and
>wuacuclt.exe running in the background. All this in less than 6
>hours??? I did the google search and went to sophos.com and followed
>their instructions to remove wuamgrd but I couldn't remove wuauclt.exe
>so I formated the core drive. I unattached the cable modem,
>reinstalled WinXP pro, installed my personal copy of zone alarm pro,
>reconnected the cable modem,
>then proceed to update and patch XP. I also went to blackviper.com and
>followed
>his instructions to remove Window's stupid moronic default file
>sharing and network programs. The people at Microsoft should get a
>good kick in the groin for creating a hacker friendly OS.
>
>Everything seems 100% perfect now. But.... however! I'm worried that
>my computer's (data and storage) D: and E: hard drives harddrives,
>which were connected, might be infected with the damned virus.
>
>I did a search on wuamgrd but only trendmicro and sophos carry any
>information about it. VET, my old av and grisoft do not.
>
>So two questions - 1 - which is the best anti-virus software Sophos or
>Trendmicro or any others? And should I be worried that my other
>harddrives were infected?

The wuacuclt.exe may have been spyware, BTW. Do you use AdAware and
Spybot?

Both Trend and Sophos are quite good. I recommend KAV and F-Secure as
"top notch". Do you use a firewall? You need one with XP.

See my web site for some further suggestions.


Art
http://www.epix.net/~artnpeg

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Thu, 03 Jun 2004 16:05:25 GMT, "Crimson Castle"
> <(E-Mail Removed)> wrote:
>
> >Hello,
> >
> >I upgraded my computer to a P4 and installed WinXPpro (service pack1)
> >on Sunday. I couldn't connect to the internet due to the cable
> >software compatibility problem with XP but the cable modem was still
> >plugged in though. (My ISP - telstra bigpond system forces its cable
> >modem users to use its prop software to connect to the internet) I
> >installed my antivirus program VET that had the latest patch and went
> >to sleep. On Monday when the software problem was resolved, I then
> >proceeded to patch WinXP using windowsupdate.
> >
> >But then I found that my computer was acting up. The CPU temperature
> >was going from 47 -59 and the CPU or powersupply fan was making made
> >high pitched noises. For a few seconds, I even heard an ugly grinding
> >noise coming from the CPU. The internet connection was also cutting
> >out and the cable modem lights - RD was flashing wildly and the TD
> >light was on 100%. The computer programs were very slow, typed words
> >took a few seconds to appear.... WTF????
> >
> >My anti-virus program - CA's VET - fully updated - did not find any
viruses.
> >I emailed them and a few days later they replied and told me to get
trojan
> >hunter to fix the problem.
> >I thought that there were teething problem with the new hardware or
> >the windows update had screwed up. But then I found wuamgrd.exe and
> >wuacuclt.exe running in the background. All this in less than 6
> >hours??? I did the google search and went to sophos.com and followed
> >their instructions to remove wuamgrd but I couldn't remove wuauclt.exe
> >so I formated the core drive. I unattached the cable modem,
> >reinstalled WinXP pro, installed my personal copy of zone alarm pro,
> >reconnected the cable modem,
> >then proceed to update and patch XP. I also went to blackviper.com and
> >followed
> >his instructions to remove Window's stupid moronic default file
> >sharing and network programs. The people at Microsoft should get a
> >good kick in the groin for creating a hacker friendly OS.
> >
> >Everything seems 100% perfect now. But.... however! I'm worried that
> >my computer's (data and storage) D: and E: hard drives harddrives,
> >which were connected, might be infected with the damned virus.
> >
> >I did a search on wuamgrd but only trendmicro and sophos carry any
> >information about it. VET, my old av and grisoft do not.
> >
> >So two questions - 1 - which is the best anti-virus software Sophos or
> >Trendmicro or any others? And should I be worried that my other
> >harddrives were infected?
>
> The wuacuclt.exe may have been spyware, BTW. Do you use AdAware and
> Spybot?
>
> Both Trend and Sophos are quite good. I recommend KAV and F-Secure as
> "top notch". Do you use a firewall? You need one with XP.
>
> See my web site for some further suggestions.
>
>
> Art
> http://www.epix.net/~artnpeg

Sophos is a great package but is really designed for networks. (mostly large
ones at that) For example, the full blown version's minimum # of licenses is
25. They have recently released a Small Business package that is a great
deal, but it is still not really a package you would want to purchase for a
single machine.

Best anti-virus is not Norton

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> >so I formated the core drive. I unattached the cable modem,
> >reinstalled WinXP pro, installed my personal copy of zone alarm pro,

> The wuacuclt.exe may have been spyware, BTW. Do you use AdAware and
> Spybot? Both Trend and Sophos are quite good. I recommend KAV and F-Secure
as
> "top notch". Do you use a firewall? You need one with XP.
> See my web site for some further suggestions. Art>
http://www.epix.net/~artnpeg

Yes I have been using Zone Alarm Pro for 2 years already. I don't think much
about VET - its performance in detecting new viruses is OK but not up
there.In my experience it has missed several worms like the wuamgrd.exe -
and I don't get much help or courtesy from their support desk.

"Jibefan" <(E-Mail Removed)> wrote in message
> Sophos is a great package but is really designed for networks. (mostly
large
> ones at that) For example, the full blown version's minimum # of licenses
is
> 25. They have recently released a Small Business package that is a great
> deal, but it is still not really a package you would want to purchase for
a
> single machine.

Thanks, I am attracted to Sophos only because it provided the details and
the solution to solve this new virus. Maybe I'll get TrendMicro or is there
something else called nods?

On Thu, 03 Jun 2004 23:50:07 GMT, "Crimson Castle"
<(E-Mail Removed)> wrote:

>"Jibefan" <(E-Mail Removed)> wrote in message
>> Sophos is a great package but is really designed for networks. (mostly
>large
>> ones at that) For example, the full blown version's minimum # of licenses
>is
>> 25. They have recently released a Small Business package that is a great
>> deal, but it is still not really a package you would want to purchase for
>a
>> single machine.
>
>Thanks, I am attracted to Sophos only because it provided the details and
>the solution to solve this new virus. Maybe I'll get TrendMicro or is there
>something else called nods?

Making your decision on the basis of which vendors happened to have
descriptions available is a very peculiar criteria It's likely that
many av products had and have detection.


Art
http://www.epix.net/~artnpeg

"Crimson Castle" <(E-Mail Removed)> wrote in message
news:9%Hvc.4161$(E-Mail Removed)...
> Hello,
>
> I upgraded my computer to a P4 and installed WinXPpro (service pack1)
> on Sunday. I couldn't connect to the internet due to the cable
> software compatibility problem with XP but the cable modem was still
> plugged in though. (My ISP - telstra bigpond system forces its cable
> modem users to use its prop software to connect to the internet) I
> installed my antivirus program VET that had the latest patch and went
> to sleep. On Monday when the software problem was resolved, I then
> proceeded to patch WinXP using windowsupdate.
>
> But then I found that my computer was acting up. The CPU temperature
> was going from 47 -59 and the CPU or powersupply fan was making made
> high pitched noises. For a few seconds, I even heard an ugly grinding
> noise coming from the CPU. The internet connection was also cutting
> out and the cable modem lights - RD was flashing wildly and the TD
> light was on 100%. The computer programs were very slow, typed words
> took a few seconds to appear.... WTF????
>
> My anti-virus program - CA's VET - fully updated - did not find any
viruses.
> I emailed them and a few days later they replied and told me to get trojan
> hunter to fix the problem.
> I thought that there were teething problem with the new hardware or
> the windows update had screwed up. But then I found wuamgrd.exe and
> wuacuclt.exe running in the background. All this in less than 6
> hours??? I did the google search and went to sophos.com and followed
> their instructions to remove wuamgrd but I couldn't remove wuauclt.exe
> so I formated the core drive. I unattached the cable modem,
> reinstalled WinXP pro, installed my personal copy of zone alarm pro,
> reconnected the cable modem,
> then proceed to update and patch XP. I also went to blackviper.com and
> followed
> his instructions to remove Window's stupid moronic default file
> sharing and network programs. The people at Microsoft should get a
> good kick in the groin for creating a hacker friendly OS.
>
> Everything seems 100% perfect now. But.... however! I'm worried that
> my computer's (data and storage) D: and E: hard drives harddrives,
> which were connected, might be infected with the damned virus.
>
> I did a search on wuamgrd but only trendmicro and sophos carry any
> information about it. VET, my old av and grisoft do not.
>
> So two questions - 1 - which is the best anti-virus software Sophos or
> Trendmicro or any others? And should I be worried that my other
> harddrives were infected?
>
> Thanks and sorry for the long post!

I'm not a virus professional, but, I am a heavy user, a professional graphic
artist and Access Database developer on my own, as well as Admin. Assistant
to a Dept head of a major light rail transit operation in So. Cal. I
currently use the AVG6 Free version for my active AV, and F-Prot DOS for my
on-demand AV on my home computer, and I am happy with the way they work.
But, if AVG6 Free failed to provide proper active protection, I would get
Nod32 or KAV.

Additionally, consider that there's more to selecting an AV besides great
detection, such as how compatible it is with your system, how it impacts
your resources in that it is not a resource hog, that it is not so full of
bloat that it is oppressive to your system, that it is not prone to give a
lot of false virus alerts, etc. When you search for an AV, think of how it
is going to work on *your* system, now how it works on mine or anyone
else's. I have WinME. :-)

Jan

"Crimson Castle" <(E-Mail Removed)> wrote in message
news:9%Hvc.4161$(E-Mail Removed)...
> Hello,
>
> I upgraded my computer to a P4 and installed WinXPpro (service pack1)
> on Sunday. I couldn't connect to the internet due to the cable
> software compatibility problem with XP but the cable modem was still
> plugged in though. (My ISP - telstra bigpond system forces its cable
> modem users to use its prop software to connect to the internet) I
> installed my antivirus program VET that had the latest patch and went
> to sleep. On Monday when the software problem was resolved, I then
> proceeded to patch WinXP using windowsupdate.
>
> But then I found that my computer was acting up. The CPU temperature
> was going from 47 -59 and the CPU or powersupply fan was making made
> high pitched noises. For a few seconds, I even heard an ugly grinding
> noise coming from the CPU. The internet connection was also cutting
> out and the cable modem lights - RD was flashing wildly and the TD
> light was on 100%. The computer programs were very slow, typed words
> took a few seconds to appear.... WTF????
>
> My anti-virus program - CA's VET - fully updated - did not find any
viruses.
> I emailed them and a few days later they replied and told me to get trojan
> hunter to fix the problem.
> I thought that there were teething problem with the new hardware or
> the windows update had screwed up. But then I found wuamgrd.exe and
> wuacuclt.exe running in the background. All this in less than 6
> hours??? I did the google search and went to sophos.com and followed
> their instructions to remove wuamgrd but I couldn't remove wuauclt.exe
> so I formated the core drive. I unattached the cable modem,
> reinstalled WinXP pro, installed my personal copy of zone alarm pro,
> reconnected the cable modem,
> then proceed to update and patch XP. I also went to blackviper.com and
> followed
> his instructions to remove Window's stupid moronic default file
> sharing and network programs. The people at Microsoft should get a
> good kick in the groin for creating a hacker friendly OS.
>
> Everything seems 100% perfect now. But.... however! I'm worried that
> my computer's (data and storage) D: and E: hard drives harddrives,
> which were connected, might be infected with the damned virus.
>
> I did a search on wuamgrd but only trendmicro and sophos carry any
> information about it. VET, my old av and grisoft do not.
>
> So two questions - 1 - which is the best anti-virus software Sophos or
> Trendmicro or any others? And should I be worried that my other
> harddrives were infected?
>
> Thanks and sorry for the long post!
>
> Cheers,
>
> Crimson

Microsoft has a free trial that is good for a year,
It includes etrust antivirus and a firewall.
www.my-etrust.com/microsoft/

"Jan Il" <(E-Mail Removed)> wrote in message news:8UPvc.19503
> Additionally, consider that there's more to selecting an AV besides great
> detection, such as how compatible it is with your system, how it impacts
> your resources in that it is not a resource hog, that it is not so full of
> bloat that it is oppressive to your system, that it is not prone to give a
> lot of false virus alerts, etc. When you search for an AV, think of how
it
> is going to work on *your* system, now how it works on mine or anyone
> else's. I have WinME. :-)

Thats good advice there.

I am using XP PRO with Zone Alarm Pro and Grisoft's AVG at the moment.

At the moment everything seems dandy. I think the firewall helps to keep out
a lot of the trojans.

I use mailwasher to scan all my emails - I delete all the spam and sus
emails before it even reaches my outlook express.

I only thought of Trend Micro because it provided documentation and a
solution for the new virus. Their online scanner also picked up the virus.
Vet had nothing on it and could not detect the virus. But Vet only came up
with a solution about two weeks ago.