Possible virus problem?

[Manish]

Hi all

suddenly my computer shuts off on its own.
i have the following installed on my computer

Sygate
Spybot
Ad-Adware
AVG Anti-virus

2 days back AVG found 2 viruses and i deleted them.
right now i am scanning it again for viruses
but i doubt if it will find any.

so is this happening again cuz of viruses..
is this BlasterWorm?

how do i get rid of it?

 

[Alias]

AVG won't pick up everything. Go to www.trendmicro.com and run their free
virus scan.

Alias

 

[Guest]

is there any type of shutdown message, like nt authority
or rpc service?
if so then you have the blaster.
continue on if blaster....

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.
-----------------------------------------------------------
Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/
(To enable the built-in firewall, go to:
Control Panel, double-click Networking and Internet
Connections, then click Network Connections. Right-click
your connection, then Click Properties, and on the
Advanced tab, click the option "Protect my computer and
network..." Note: the built in firewall only monitors
incoming traffic not outgoing (ie spyware, trojans, etc..
you may have on your system).)

Special note if you use AOL:
America Online installs its own connection settings that
override the ones that come with Windows XP. America
Online's connection settings don't include a way to turn
on Windows XP's built-in firewall.


What You Should Know About the Blaster Worm and Its
Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm
infections from computers that are running Windows 2000 or
Windows XP
http://support.microsoft.com/?kbid=833330

A security issue has been identified that could allow an
attacker to remotely compromise a computer running
Microsoft Windows and gain complete control over it. You
can help protect your computer by installing this update
from Microsoft.
http://www.microsoft.com/downloads/details.aspx?
FamilyId=2354406C-C5B6-44AC-9532-
3DE40F69C074&displaylang=en

Above courtesy of MVP Carey
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

***Install a good firewall. ZoneAlarm is a free one you
can install.
Install a good anti-virus program making sure you keep
it's definitions up to date! ***
- - - - - - - - - - - - -
Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
..html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
..removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32
..welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm
..removal.tool.html

 

[Malke]

AVG won't pick up everything. Go to www.trendmicro.com and run their
free virus scan.

Alias

Hi, Manish. If your AVG is up-to-date, then you probably don't have any
viruses. Of course, it won't hurt to go to an online virus scanner like
the one at TrendMicro. However, you might also have hardware issues.
Sudden shutdowns can be caused by overheating, bad RAM, and other
hardware failures. Here are some generic hardware troubleshooting tips:

1) open the computer and run it open, cleaning out all dust bunnies and
observing all fans (overheating will cause system freezing); 2) test
the RAM - I like Memtest86 from www.memtest86.com - let the test run
for an extended (like overnight) period of time - unless errors are
seen immediately; 3) test the hard drive with a diagnostic utility from
the mftr.; 4) the power supply may be going bad or be inadequate for
the devices you have in the system; 5) test the motherboard with
something like TuffTest from www.tufftest.com. Testing hardware
failures often involves swapping out suspected parts with known-good
parts. If you can't do the testing yourself and/or are uncomfortable
opening your computer, take the machine to a good local computer repair
shop (not a CompUSA or Best Buy type of store).

Malke

 

[Manish]

Hi
Thx for the reply
but i don't think i ahve any hardware issues
i cleaned my system just 2 days back.. even the PS is brand new

i ahd a similar problem of my computer shutting down previously,but it got
solved when i cleaned my pc and also changed the PS

and now it is haunting me again

 

[Manish]

hi

It doesn't give any mesaage while shutting down.

 

[Plato]

opening your computer, take the machine to a good local computer repair
shop (not a CompUSA or Best Buy type of store).

[grin] But they do got their A+ certs

 

[name]

Disable all power management features in the BIOS and in XP.
Also, run "msconfig" and look for any unusual startup programs and look for
any unusual processes in task manager
But, more thank likely it's a hardware problem, disable you video and run in
vga mode--see what happens. You can selectively disable other hardware, you
may find the problem.
And, lastly, boot into safe mode and see if the problem occurs there too.

 

[Alex Nichol]

Thx for the reply
but i don't think i ahve any hardware issues
i cleaned my system just 2 days back.. even the PS is brand new

That can sometimes be the cause of hardware problems - especially if you
disturbed RAM modules

 

[Alex Nichol]

suddenly my computer shuts off on its own.

so is this happening again cuz of viruses..
is this BlasterWorm?

If there are no messages, it probably isn't - and is likely to be
hardware or drivers. But you have *something* that is crashing and the
system's 'automatically restart' is cutting in. Turn this off: in
Control Panel - System - Advanced, click Settings in the Startup and
Recovery section. There uncheck 'automatically restart'. You can also
usefully change the 'write debugging information' to (none). You may
now get a Blue screen failure instead, but at least will get some
guidance as to what is happening. In particular if it is a driver that
ought to show as a something.sys at the bottom of the screen. If the
address of he failure is pretty constant, suspect RAM

 

[Manish]

Hi all

Thx for all the replies
actually i ran the online trendmicro.com virus scan and i found out that 3
files were infected with

javabyte nocheat A
javabytever A

Trendmicro deleted 2 files but when i try to delete the the last one it
says that it can't be deleted cuz it is still in use
by deleting did i get rid of the viruses permanently?

and 1 more issue

i had NAV installed previously, but i like AVG better so i installed it,
and when i try to uninstall NAV it gave me a message saying
'navnt.isu" is missing.. cannot be uninstalled.
so i went to symantec and removed the NAV by their uninstall tool.
when it ran it siad that"unable to initialize nav engine"
but now i do not see NAV in my startup progarm

did it remove it completely?do i have to do anything else?

 

[name]

If you try to remove a file and you get a "file in use" message' boot into
safe mode and remove it their.
Also, for future reference, any leftover files from an app
uninstall can be romoved this way.