I think i have a real virus

[Snake Solid]

anyway i still have a little bit of problems, but doesnt relate to the virus, im pretty sure it relates to spyware & spamware. here is a pic of my connection status AS SOON AS I CONNECT. i opened firefox right after connection cuz there is a bug if i open firefox before connecting it wont show any pages. but anyway here is a pic!



Obviously i got some kind of spamware/spyware so any1 know any free programs around that works real good and helped the war against lag?

OH GOD I STILL HAVE SASSER! it stayed away for what, 20 hours? less? or maybe its just that the lsass.exe error message just came back to haunt my computer? i hate microsoft, DAMN YOU BILL GATES! i do love xbox though, well until they make a virus for it.

[Raype]

It may have backup up into your Registry or something. Try starting in safe mode and also check websites for info on where Sasser stores it's files. You can try to remove them manually in safe mode, getting rid of the files in the process. You can look up that info on your AV's webpage, and Safe mode startup should be included in your windows help file. I'm not too familiar with Windows 2000, but if it has restore points, be sure to disable them before removing the worm. Also, disconnect from the net for a while afterwards and totally shut down your computer (no restarts for maybe 5 mins). That may help.

[corycorycory]

or you could just backup your stuff and write zeros to your hard drive with a seagate hard drive disk or something like that. it might take awhile but you will be sure to have NO more viruses or anything on your HDD. sorry if this is a bit irrelevent to the topic but im just trying to help.

[polobunny]

Lol, virus because of that?
You know you connection received only 20kb of information, that's rather usual...

[Raype]

Read the rest of the post. He's still getting errors and believes sasser may have reinstalled.

EDIT- And I believe it's 200KB, not 20. That does seem a little high.

[Snake Solid]

oh you should see what it is after a couple hours of connectivity, the difference between sent and recieved is VERY FAR APART, like sent is 5x more then received, and i was searching alot of pages and downloading stuff.... but anyway im using Spybot search and destroy, and im hoping this gets rid of the problem.


OMG YOU WONT BELIEVE THE RESULTS OF IMMUNIZATION!



man people who make spyware love me

guess its time to play legend of legaia, so ill be back if i need more help and if the lsass.exe comes back.

[polobunny]

It might be only your p2p program that you left open. You know, limewire uploads things...

[((KvN))]

Holy crap. Well, could you also post the results of your scans (most recent) of programs you've downloaded, so I can see what is up?

[polobunny]

Scan with HijackThis!, upload the log here.
http://www.merijn.org/files/hijackthis.zip

Also it's normal Spybot does this the firs ttime you run it, nothing to worry about...

[corycorycory]

holy moly. thats a frig load of spyware man.!. maybe you should scan more often or some thin. i had a problem once with a virus that had like a german name and i deleted it with everythin but id scan straight after and the same one was still there.

[Raype]

*notices ssnakes' results* OMFG!!! ...p0rn much?

Here is an protection setup and discussion. It may help prevent problems in the future. Prevention is the key to stopping these issues. Make sure you keep your computer secure.

http://forums.emuparadise.org/showth...t=39363&page=1

Hijack this is a great program and should be considered. Worms are a real pain to remove, so don't expect it to go down without a fight. Also, for the backup plan listed by corycorycory, wouldn't backing up the computer essentially back up the virus/worm/spyware/adware? It always seemed to do that from my experience (guess helping people who had these problems is why I've got such a good security setup). I'm not familiar with the program/hardware he recommended, so maybe I'm wrong. (He seems to be saying to do a full backup then format the HDD then use the backup, but I may be wrong)

[Sprung]

Just be careful with Hijack-This. It's easy to kill your antivirus, firewall, printer/scanner/camera/etc drivers, etc.

[corycorycory]

no no no. sorry man idont mean backup everythin just your personal docs and stuff that you dont want to lose like a picture or a song maybe? then use a boot disk that you can download from here http://www.seagate.com/support/seatools/ and use it to wipe everything from your hdd then re-install windows or linux or watever u were running. sorry im bad at explaining stuff. i think this program may not work on some hdd's. it worked for me on a samsung and a WD so maybe.

[cyclefiend2000]

if you really want to wipe your harddrive (any harddrive) you could try darik's boot n nuke. or one of the other freeware programs found on the ultimate boot cd...

http://www.ultimatebootcd.com/

i have used dbnn before. takes quite a while, but EVERYTHING is completely wiped out!

[malice2501]

Jesus, 7k in bad items??? Wtf have you been doing? I'm not being a smart-ass, im really asking what have you been doing? I used my fathers PC to surf porn and other questionable sites daily. I ran some of tha stuff and only had 520 items ( i actually went and tried to catch some just to see how bad it would get).

But 7k is no goddamn joke man, and that sasser worm can be a bitch. This may be a pain in the ass, but i recommend re-installing windows (i love windows, maybe im alone on this ) because removing all of that crap can be damn near impossible. Sometimes they have hidden files that automatically reloads them into your startup registry. Try using a program like Tweaknow Powerpack to stop the startup problem and run the cleaners again. If that doesnt work, wipe it.