GandalfTheOld
|
|
« Reply #17 on: May 28, 2004, 01:06:43 AM » |
|
Uh... kay... seems that one of the comps on this LAN got infected with a new strain of worm... problem? the whole LAN's protected by a router.
tried starting up the comp, the system process SVCHOST.EXE starts to take up 100% of the CPU usage and nothing moves an inch. force-delete with the Task Manager, another instance of the SVCHOST.EXE starts to take up about 30-40% of the CPU usage, force-delete again. once that's done, things seem to finally continue... or so you might think.
Norton Antivirus failed to start-up properly, it brings up an error message that it cannot do e-mail protection. What's more, the computer cannot view websites. Neither can programs access the internet, and nadda. Although it seems that the computer can still access the network, and be accessed from the network.
I go into Safe Mode, I do a thorough search... 5-6 instances of a trojan, that's fine, they're deadmeat. nothing else comes up, so I restart the comp, and see if it starts up properly.
IT DOESN'T. The same symptoms occur again.
So, 1 out of 4 comps down on this LAN, and I'm betting this WinXP server that I've been running for 31wks 5days 11hrs 25mins will also die if I attempt to restart it. A version of Norton Antivirus killed my entire access to the internet, including virus definition updates themselves, so I haven't had a proper antivirus program running for that long.
Oh yeah, it's fun. Probably too late to put up a firewall on this comp... Take care, everyone, apparently routers aren't enough to stop this new strain, and I'm wondering if firewalls can stop it.
So far, I'm trying to find out what I can about this new worm/virus... if anyone has info, lemme know.
EDIT: The problem has been solved. Found out why nothing special appeared on Norton AntiVirus... it WASN'T a worm/virus. A freakin bunch of spyware crap simply took over most of the bandwidth between that comp and the router... or something along those lines. Still don't understand why the comp couldn't view websites while it could still access other comps on the same LAN... Mind you, I was able to send files to the comp, and view files through the LAN. Wonderful lesson on running spyware-detecting programs, eh?
|