Author Topic: WORM hangover??  (Read 417 times)

Offline WhiteHawk

  • Parolee
  • Silver Member
  • ****
  • Posts: 1815
WORM hangover??
« on: August 19, 2003, 11:02:58 AM »
After disenfcecting from the blaster wormlast week, I ran an AVG check and low and behold, I had 4 more infected files on my computer.
  I have reinstalled the winXP patch, (I upgraded the patch after the first infection), just to make sure.  But maybe wise to recheck your system for the lovsan worm (I think this is the same as blaster worm??).
  I had a copy hiding in c:\windows\system32\yuetyutr.dll.
I had to remove the yuetyutr.dll file manually.  
  I have firewall and avg running constantly now, even when on AH, I believe this thing is saturated the servers.

Offline dracon

  • Nickel Member
  • ***
  • Posts: 539
      • http://myweb.cableone.net/decon14/
WORM hangover??
« Reply #1 on: September 01, 2003, 04:59:55 PM »
It is recommended for XP that you shutoff System Restore and in the case of Broadband disconnect fronm the internet.  Now remove the virus infected files, restart and do it again, 2nd time to make sure you're clean.  Now turn on System Restore and Re-connect to the internet.

*****NOTE****** You BEST READ This!!

If you disable "System Restore" it REMOVES all you Restore Points!!  You can't get them back!!  Understand this before you do this.

My Best,

Offline DrDea

  • Gold Member
  • *****
  • Posts: 3341
WORM hangover??
« Reply #2 on: September 01, 2003, 05:27:02 PM »
So what ya trying to say there?
The Flying Circus.Were just like you.Only prettier.

FSO 334 Flying Eagles. Fencers Heros.

Offline dracon

  • Nickel Member
  • ***
  • Posts: 539
      • http://myweb.cableone.net/decon14/
WORM hangover??
« Reply #3 on: September 01, 2003, 05:30:59 PM »
What do I need to be more clear on??

Offline DrDea

  • Gold Member
  • *****
  • Posts: 3341
WORM hangover??
« Reply #4 on: September 01, 2003, 06:00:22 PM »
It was tripple posted.I was ........Um.......nothing.
The Flying Circus.Were just like you.Only prettier.

FSO 334 Flying Eagles. Fencers Heros.

Offline dracon

  • Nickel Member
  • ***
  • Posts: 539
      • http://myweb.cableone.net/decon14/
WORM hangover??
« Reply #5 on: September 01, 2003, 06:19:11 PM »
Not all boards work like this.  Some you can edit simply by backing up (back-button).  You can, however, edit multiple posts here as I did :)

I didn't know which to respond to, my triple post, or the info I was trying to pass on.....


Offline DrDea

  • Gold Member
  • *****
  • Posts: 3341
WORM hangover??
« Reply #6 on: September 01, 2003, 09:57:13 PM »
Ive done it myself.Not sure how it happens but I felt compeled to yank that chain:)
The Flying Circus.Were just like you.Only prettier.

FSO 334 Flying Eagles. Fencers Heros.

Offline dracon

  • Nickel Member
  • ***
  • Posts: 539
      • http://myweb.cableone.net/decon14/
WORM hangover??
« Reply #7 on: September 01, 2003, 10:32:05 PM »
LOL Consider it apporpriately yanked, and I will be more careful in th future...


Draconian