Thread: What is this virus?

  1. #1
    Registered User
    Join Date
    Sep 2003
    Posts
    133

    What is this virus?

    My friend's PC is now lagging very badly on startup. His PC seems to have alot of processor activities that he cant even start any application. When his processor finally stops processing, the system restart by itself.

    I am quite sure this is a virus problem as i think i heard of such symptons b4, but i cant recall what virus is it.

    Does anyone have any idea?

  2. #2
    and the hat of int overfl Salem's Avatar
    Join Date
    Aug 2001
    Location
    The edge of the known universe
    Posts
    39,659
    Start in safe mode
    Run a virus checker / spybot search&destroy / hijackthis

  3. #3
    PC Fixer-Upper Waldo2k2's Avatar
    Join Date
    May 2002
    Posts
    2,001
    Most likely it's just spyware...which means it's not doing anything harmful, but it will eat up resources like that. Spyware seems to be much more rampant these days that viruses. Let us know what happens, there's steps you should take to help prevent it from happening again.
    PHP and XML
    Let's talk about SAX

  4. #4
    Registered User
    Join Date
    Sep 2003
    Posts
    133
    He claimed he opened an unknown e-mail. There were two attachments but he didnt opened it. It crashed his pc and then that's how everything happened. I told him to restart in safe mode and scan his pc now

  5. #5
    and the hat of int overfl Salem's Avatar
    Join Date
    Aug 2001
    Location
    The edge of the known universe
    Posts
    39,659
    Tell him to get a better email client than m$-lookout

  6. #6
    Registered User
    Join Date
    Sep 2004
    Posts
    124
    Most likely it's just spyware...which means it's not doing anything harmful, but it will eat up resources like that
    Spyware steals information such as your bank details. I personally call that extremely harmful.
    Browser hijackers, which are often misclassified as 'spyware', redirect your homepage and search assistant to unwanted sites, including family-hostile sites.
    Again, I call that extremely harmful.

    Update your virus definitions and run a full virus scan.
    Get hold of Spybot Search and Destroy 1.3 from here. Install it, and update it immediately.
    Have it scan your system and get it to fix everything it identifies in red as a problem. If it requires to continue across a reboot, do so.

    Then get hold of HijackThis and unzip it into its own folder. Please do not run it directly from the zipped location, Temporary Internet Files location, or the Desktop.

    Run it, and click on Scan. After a few seconds, the data area will fill with information and Scan will change to Save Log. Click on that and save the logfile anywhere convenient. A Notepad session will open up containing the scan results.

    Post the entire contents of that logfile into this thread, and we'll take it from there.
    I think you can put a signature here.

  7. #7
    essence of digital xddxogm3's Avatar
    Join Date
    Sep 2003
    Posts
    589
    sorry to ask something as a side thread.
    is spy sweeper comparable to the spybot search and destroy?
    i have spy sweeper and nortons, and always keep them up to date.
    i'm also assuming nortons internet security 2005 is sufficient also?
    this may be excessive, but i check for updates and scan twice a day.
    once in the morning and once at night.
    This is the first i have ever heard of hijackthis.
    is there a document that summarizes the entries (good/bad) that hijackthis will list?
    i'm assuming i can google them, but is there a centralized data base of possible bad ones?
    "Hence to fight and conquer in all your battles is not supreme excellence;
    supreme excellence consists in breaking the enemy's resistance without fighting."
    Art of War Sun Tzu

  8. #8
    Registered User
    Join Date
    Jun 2004
    Posts
    722
    If everyone used Opera, Mozilla, Netscape (sorry if a disregarded any browsers you may like. ), the internet would be a much safer place. Spy/Adware wouldn't spread as it does now.

  9. #9
    Registered User jimboob's Avatar
    Join Date
    Jun 2004
    Posts
    40
    Go Opera!
    Mozillas good too though. (And it's free!)

  10. #10
    Registered User
    Join Date
    Sep 2004
    Posts
    124
    Whatever browser you use, make sure you pay regular visits to Windows Update and keep everything up to date.

    In particular, ensure you are always current with the latest security and critical updates, including (especially) those for Internet Explorer, even if you don't use IE at all.

    You must use IE for that process.

    is spy sweeper comparable to the spybot search and destroy?
    If you're referring to the Webroot one, then it's a good solution.

    One basic tool in every user's toolbox of software ought to be an anti-spyware scanner. There are several excellent anti-spyware scanners available -- some free, some for pay. These include (but are not limited to):

    Ad-aware
    GIANT AntiSpyware
    Pest Patrol
    Spybot Search & Destroy
    Webroot Spy Sweeper
    See here for full details:

    Spyware Warrior: List of Rogue (and Good) anti-spyware solutions

    is there a document that summarizes the entries (good/bad) that hijackthis will list?
    i'm assuming i can google them, but is there a centralized data base of possible bad ones?
    HijackThis is a tool we use a lot in the antispyware community as an aid to get rid of the more persistent malware that slips through mainstream anti-spyware programs.

    If you're not happy with editing the Registry and changing settings at the OS level of your system, then it's an extremely bad idea to 'go it alone' and fix things with HijackThis. Certainly, whatever you do, DO NOT try to fix your system on a "what happens if I try this?" basis as you could end up with an unusable system.

    The author of HijackThis, Merijn, has written this tutorial to help people understand the logs it produces.

    For those who are interested in this stuff, check out the Alliance of Security Analysis Professionals where you'll find links to good forums and sites with respect to spyware.
    Last edited by Driver; 12-05-2004 at 04:05 AM. Reason: Answer second part of question
    I think you can put a signature here.

  11. #11
    Deleting... VOX's Avatar
    Join Date
    Oct 2004
    Location
    VA
    Posts
    94
    If you have any wierd extra tasks running, go to Answers That Work and look at their task list. If you find something not on the list, or if you do find it and it says you have spyware or a virus, then well, at least you know you have something wrong.

    I use IE, but to keep it safe I have it so that it doesn't run any Active X controls no matter what. No auto-downloads or anything, and cookies are always either blocked or on high protection. And java is turned off.

    I also use webmail wich is much safe than anything you can download. It's safe because when viewing your e-mail, any viruses or attatchments you don't choose to download yourself are downloaded to the server computer, wherever that is.

    If you find any tasks that you don't want anymore, but start at at startup, go into safe mode, and click "run" in the start menu. Then type "msconfig" press enter, and go to the startup tab.
    Boy you stink, go take a shower before you continue to code. Better do your laundry and spray your chair too.

    The one and only resource for finding information.

    Next version of windows released!!!!

  12. #12
    PC Fixer-Upper Waldo2k2's Avatar
    Join Date
    May 2002
    Posts
    2,001
    >>Spyware steals information such as your bank details.

    no, they don't.
    PHP and XML
    Let's talk about SAX

  13. #13
    Registered User
    Join Date
    Sep 2004
    Posts
    124
    Waldo2k2,

    Spyware is software or hardware installed on a computer without the user's knowledge which gathers information about that user for later retrieval by whomever controls the spyware.

    Spyware can be broken down into two different categories, surveillance spyware and advertising spyware.

    Surveillance software includes key loggers, screen capture devices, and trojans. These would be used by corporations, private detectives, law enforcement, intelligence agencies, suspicious spouses, etc.
    What is spyware?

    What do keyloggers do? You go to enter your credit card details to make a payment for something, and a keylogger is there, recording every keystroke and sending that information back to a server somewhere.

    Vox, Answers That Work is an excellent site also. I'm always referring back to their startup list.
    Last edited by Driver; 12-05-2004 at 03:01 PM. Reason: Augment the supplied information
    I think you can put a signature here.

  14. #14
    PC Fixer-Upper Waldo2k2's Avatar
    Join Date
    May 2002
    Posts
    2,001
    Keyloggers were considered viruses long before spyware was even a term. Trojans are not spyware, that site mixes terminology quite a bit. Trojans are software that disguise themselves as something else to the operating system (like a packet that was requested, etc.), or to the user (such as readme.txt.exe formats your hard drive), and then execute their own code. Trojans are neither viruses nor spyware, they are programs that deliver either viruses or spyware.

    >>Surveillance software includes key loggers, screen capture devices, and trojans. These would be used by corporations, private detectives, law enforcement, intelligence agencies, suspicious spouses, etc.

    more misinformation. Yes those could be used by those parties, but in that situation, that's not spyware. You wouldn't use the term spyware when you install VNC in a corporation would you? You wouldn't put a trojan on the suspects computer to capture evidence, you knock down their door and take the freaking hard drive.

    Most people I know, and most people around here, tend to be referring to adware when speaking of spyware (despite what the particular site you pointed out may say). And when speaking of viruses they usually include malware into that lot (which would be keyloggers and the like). Most people also consider browser hijackers to not be malware...some boobies popped up in front of your four year old when they type a search into the address bar, that's easily dealt with. Someone running your bank account down to nothing is not so easily fixed.

    That's why I said what I did. I'm not trying to flame you or anything, I was going to originally clarify myself more but ran out of time. There are many different interpretations of the meaning of spyware, I'm just letting you know what most people around here (considering you're new here) refer to it as.
    PHP and XML
    Let's talk about SAX

  15. #15
    train spotter
    Join Date
    Aug 2001
    Location
    near a computer
    Posts
    3,868
    >>You wouldn't put a trojan on the suspects computer to capture evidence, you knock down their door and take the freaking hard drive.

    so what is Carnivore and DIRT for?
    "Man alone suffers so excruciatingly in the world that he was compelled to invent laughter."
    Friedrich Nietzsche

    "I spent a lot of my money on booze, birds and fast cars......the rest I squandered."
    George Best

    "If you are going through hell....keep going."
    Winston Churchill

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Trojan horse generic
    By crvenkapa in forum Tech Board
    Replies: 8
    Last Post: 06-04-2007, 08:49 PM
  2. Virus in Commercial Download - Can anyone confirm this?
    By Davros in forum A Brief History of Cprogramming.com
    Replies: 6
    Last Post: 08-03-2004, 05:07 PM
  3. virus help
    By Benzakhar in forum Tech Board
    Replies: 9
    Last Post: 01-20-2004, 12:28 AM
  4. Virus Warning!
    By Hillbillie in forum A Brief History of Cprogramming.com
    Replies: 19
    Last Post: 08-17-2001, 01:22 AM