Bloody worm hijack ?

[billynomates]

Not sure on this but I think one of my PC's may have been infected/hijacked with W32 spybot wormie thingy.

Can't load any pages relating to virus etc and its running really sloooooooow

Checked out various sites ie Norton etc and it looks like a complete restore

Is there another way round this prob? A patch I can download from my clean machine?

Running on XP.

HELP please

Regards Phil

[Big Al.]

Have you tried AVG checker, available from GRISOFT.com

Hope this helps

[posty]

go to trend's web site

look for house call, its under non commercila stuff

it's a java based av scanner that will give you a good hose down!!

[HarryW]

Similar ideas to the other posts, also try McAfee 'Stinger' free download, or a free on-line scan of your PC by Nortons (Symantec website).

Harry

[billynomates]

Thanks guys ---but as I say can't use the infected PC to check out anti virus stuff-- any search re virus pages will not load.

Tried connecting to free online anti virus scans but they are also blocked.

Even Norton will not run--PH works

I think/know the registry files have been altered.

What to do

[Bodo]

bodo@bulldog:~> host symantec.com
symantec.com has address 206.204.52.5
symantec.com has address 206.204.212.69
bodo@bulldog:~> host mcaffee.com
mcaffee.com has address 208.254.3.160

Enter above IP for the required website in case your hosts/lmhosts file is manipulated and you don't know how to correct it.


>>hang on, McAfee has a typo, it should be

bodo@bulldog:~> host mcafee.com
mcafee.com has address 216.49.88.12


>> Edited by Bodo on Monday 18th October 17:52

[Bodo]

one more:

bodo@bulldog:~> host hbedv.com
hbedv.com has address 217.11.63.51

This one should work with the normal domain: www.suse.co.uk

[billynomates]

Bump-- push--shove
Anyone out there ?

[pies]

Cant you load windows restore to an earlier point then gain access to the removal sites

>> Edited by pies on Monday 18th October 22:11

[billynomates]

Bodo said:

one more: bodo@bulldog:~> host hbedv.com hbedv.com has address 217.11.63.51 This one should work with the normal domain: www.suse.co.uk

Sorry mate missed your post.
Will take a look later.

Time to eat or die for me--bloody poooters.

Phil

[billynomates]

Update---Ive done a complete restore, run Norton and Im the sodding thing still there

[billynomates]

billynomates said:

Update---Ive done a complete restore, run Norton and Im the sodding thing still there

Cracked it --all I have to do change the registry.

Young Bill Mate help me now please.