Sorry to let "real life" intrude, but I got snagged by this earlier on...
Any and all Win NT/2000/XP users should IMMEDIATELY go to
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp and download the patch within (especially, but not exclusively if you've been getting "Remote-Procedure-Call" errors that have been forcing restarts. Then, its a cure, otherwise its preventative).
Next, update your anti-virus software and run a full system scan.
Look here for more info, or if you don\'t have an updatable anti-virus program installed .
Some birthday...
You're a good man, Charlie Brown.
*sigh*
Don't the worthless fucks who write these viruses have better things to occupy their time? They've gotta be the only lifeform lower than telemarketers...
Hrrmmm.... .I d/l the worm removal thingie, but it says I should turn off my system restore option before running it, but I can't seem to figure out where to go to do that ....
and I promise, I've really looked...
System Restore option in Windows Me/XP
Users of Windows Me and Windows XP should temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.
Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.
Also, in some cases, online scanners may detect a threat in the System Restore folder even though you scanned your computer with an antivirus program and did not find any infected files.
For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles:
How to disable or enable Windows Me System Restore.
How to turn off or turn on Windows XP System Restore.
For additional information and an alternative to disabling Windows Me System Restore, read the Microsoft Knowledge Base article, "Antivirus Tools Cannot Clean Infected Files in the _Restore Folder (Q263455)."
Whoops, those links did't carry. Sorry. Here they are. Note: the two symantic links are getting page cannot be displayed errors as I type this, they are probably just getting POUNDED at the moment.
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239 http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239 http://support.microsoft.com/default.aspx?scid=kb;EN-US;q263455
Thanks --- that was most helpful!
So, if you disable this Restore System thingy, and something goes wrong during the virus cleanup, are you gonna be screwed? I'm only asking cuz I'm gonna have to try this tonight, and I'm just wondering what I might be in for
This is exactly the problem I was having last night.
Thanks, Sanity or Madness. I'll try to fix it tonight.
Originally posted by Princess Crujectra:
So, if you disable this Restore System thingy, and something goes wrong during the virus cleanup, are you gonna be screwed? I'm only asking cuz I'm gonna have to try this tonight, and I'm just wondering what I might be in for I don't know what might happen if something happens during the cleanup, but I d/l the worm killer thingie, disabled my restore system default, ran the program, rebooted and ran the program again -- the second time I ran it, it said that the worm wasn't found (the first time I ran it it said that it had found and deleted 1 file (the worm presumably)). Then I put the restore program thing back on.
I know that I'm just being a big baby, but this whole thing has got me feeling sick to my stomach. I hate computer problems. Even though it will probably be fine, the anxiety of not knowing is making me almost nauseous. I really need to make some computer-literate friends that live nearby
Once you remove the virus, don't forget to download the patch, or you're just going to get it again. This isn't an attachment-type virus-- you can pick it up just by getting on the internet, if it's spread to your provider. What a bitch.
I have to run over to my Mom's after work-- My sisters' computer is infected. Luckily, a guy here at work walked me throught the process, and gave me floppies with the removal and patch programs.
There really ought to be public executions for virus writers...
So, if I downloaded the patch last night, I have to download it again after cleaning the virus?
I'm assuming NO. Once the patch is in place, it should prevent reinfection; you just need to get rid of the virus, and you'll be all set.
I think, just to be on the safe side, I will back up a few files onto a CD before trying the virus removal. I'm sure everything will be fine, but I'm just so afraid that something will happen and I'll lose these files that I don't have anyplace else.
Boy... I'm gonna end up giving myself an ulcer before this is done
An update for Cru:
I just finished removing the virus, installing the patch and rerunning the removal program to verify my sisters' PC is virus-free. YAY! All in all, pretty painless-- took about 25-30 minutes, all told. The scariest part was turning off the System Restore; doing so erases any restore ppoints you've created previously. But I just set a new restore point after installing the patch and turning the SR back on.
Piece o' cake, stop yer worrying already!
MWAAAH!
--------------------
"Just try it, Proty!"--Kid Prime