« previous next »
Pages: [1]   Go Down

Author Topic: Could it be a Virus?  (Read 397 times)

Offline Tumor

  • Platinum Member
  • ******
  • Posts: 4294
      • Wait For It
Could it be a Virus?
« on: October 03, 2003, 12:21:59 AM »
Left the house last night and my system was working fine, no problems at all, got home this morning and had major problems.

First thing I noticed was MSFS2004 wouldn't download the real-world weather updates.  Then I found out MSIE and Outlook Express refused to connect, then I find out McAfee (which wasn't running over night) couldn't get through to download virus sig updates.

Alrighty then... just for giggles I checked Aces High and was able to log on with no problems whatsoever. (checked MSIE/Outlook... still dead).  Then I tried Ping-Plotter... it worked!  Tried Kazaa... it worked too.  So I downloaded Netscape to my other system, transferred it over to the "broken" one and installed that.. it didn't work.

Downloaded the McAfee trial (hoping to snatch lates virus sig update) as well as something called "Cyber Soft Wave" Antivirus and ran them both on the system... The cyber wave thing found a file in system32 with a .msc extension calling it an HC&RA.trojan.. McAfee didn't find anything.  Deleted the "bad" file, rebooted and I still can't get to the internet.

Gonna format and rebuild unless one of ya'll experts have any better ideas.

Tumor
Logged
"Dogfighting is useless"  :Erich Hartmann

Offline Chairboy

  • Probation
  • Plutonium Member
  • *******
  • Posts: 8221
      • hallert.net
Could it be a Virus?
« Reply #1 on: October 03, 2003, 01:20:22 AM »
Go to http://security.symantec.com and run the virus scan there, in case there's something else missing.

BTW, simply deleting the file might have been a mistake.  Many viruses and trojans infect or replace a vital system file.  If you had a real antivirus program, it might have been able to repair the file.  I don't think you spelled the name of the trojan right, or it's a proprietary name by that AV program.  I can't find any info on it online.
Logged
"When fascism comes to America it will be wrapped in the flag and carrying a cross." - Sinclair Lewis

Offline BaneX

  • Zinc Member
  • *
  • Posts: 24
Could it be a Virus?
« Reply #2 on: October 03, 2003, 01:46:39 AM »
There is a recent trojan that is actually specifying a DNS in your TCP/IP settings. While this may not be what's affecting you it would hurt to look.  If it is being specified it might help by returning it to Obtain DNS Address automatically


ShrpShtr
Logged

Offline FOGOLD

  • Silver Member
  • ****
  • Posts: 1886
Could it be a Virus?
« Reply #3 on: October 03, 2003, 02:54:26 AM »
The word "Kazaa" made my blood run cold I have to say!
Logged

Offline Tumor

  • Platinum Member
  • ******
  • Posts: 4294
      • Wait For It
Could it be a Virus?
« Reply #4 on: October 03, 2003, 07:17:39 AM »
Quote
Originally posted by FOGOLD
The word "Kazaa" made my blood run cold I have to say!


Ya... hardly ever use it (the lite vs) but I was checking to see different things that do and don't work.

I've tried everything I can think of.... Oh well, been awhile since I rebuilt.

thanks

BANE!!  Woot you are the MAN!  Something had set my DNS to ... well I guess a dead DNS server address.  Man... I had my XP install disk in hand when I saw that!

BTW.. that file with the .msc extension does not reside anywhere on this computer is why I deleted it off the other one, and unfortunately I delelted it so I'm sorry but the above is the best description I have for it.  I do remember I found mention of it on some other BB where a guy was listing out "consoles" he'd found installed on hismachine without his knowledge.
« Last Edit: October 03, 2003, 07:26:46 AM by Tumor »
Logged
"Dogfighting is useless"  :Erich Hartmann

Offline MwXX

  • Copper Member
  • **
  • Posts: 323
Could it be a Virus?
« Reply #5 on: October 03, 2003, 12:53:55 PM »
Uh oh, had the same thing...except mine shut down.....after restarting....i lost all office 2000 access....then access to AH! tried to reload office and it told me that user has set policy to not intall programs....? I AM the ADMINISTRATOR!!! and it wont let me install office 2000!

had to reload adobe acrobat, attempt to offfice, no joy, and Aces high....

been trying to read if anything new out there is coming in...oh yeah..did I mention the "blue screen?" that was dumping my memory to 65disks? dont even know what the heck that was about....


:confused:

im with ya bud!!!!!!!!!!
Logged

Offline 214thCavalier

  • Silver Member
  • ****
  • Posts: 1929
Could it be a Virus?
« Reply #6 on: October 03, 2003, 02:09:46 PM »
Logged

Offline BaneX

  • Zinc Member
  • *
  • Posts: 24
Could it be a Virus?
« Reply #7 on: October 03, 2003, 10:15:40 PM »
Quote
BANE!! Woot you are the MAN! Something had set my DNS to ... well I guess a dead DNS server address. Man... I had my XP install disk in hand when I saw that!



Glad I could help.. been seeing alot of that at work. Doesn't require an XP fix.. just need to update your virus definitions. There are 3 variants on that particular virus and symantec has a fix on one, but unfortunately I don't have the URL for that.

As a side note anyone else who runs into it can try going to
24.213.60.67 for a possible fix.

Bane aka Shrpshtr
Logged
Pages: [1]   Go Up
« previous next »