My Computer's Gone Berserk!

Bird · Oct 23, 2003

Re: My Computer\'s Gone Berserk!

Thanks, Bill, I printed that post out and will have a look. Everything seems to be running normally right now, with the pop-up blocker beeping frequently.

BIGUN · Nov 5, 2003

Re: My Computer\'s Gone Berserk!

( AdAware is good software, however in my opinion SpyBot Search and Destroy is better. Also free. Suggest you download SpyBot and run it behind AdAware to see what else it finds, betcha get some. )
Bird,
I agree with Dieselsmoke. I didn't read through all the post here so you may have already installed Spybot S&D. If not, get it, update often and run it at least once a week. You will probably be surprised at what all it finds. /forums/images/graemlins/smile.gif

Bird · Nov 5, 2003

Re: My Computer\'s Gone Berserk!

I've been out of town for a week; just got back yesterday, so hope I'm making some progress, although I doubt that I'll ever understand this machine. Naturally, I had run my Norton Anti-Virus regularly (and never had any indication of having a virus on this computer), but was just using Windows' firewall. So just before going out of town, I installed the Norton firewall, then yesterday I updated Norton SystemWorks since it hadn't been done for a week, then I ran a virus scan; 12 infected files /forums/images/graemlins/shocked.gif It quarantined some, deleted some, but has one it can't do anything with; "access denied"; a Trojan Horse at E:\WINDOWS\System32\XheTsn03.exe (my hard drive is "E" instead of "C"). So I've printed out some instructions from Symantec and hope to have time tomorrow to work on it. Oddly enough, I couldn't do hardly anything yesterday on the Internet because of an extra window popping up continuously, and now this morning everything seems to be working normally right now.

I am running Ad-aware (which one of the software engineers where my daughter works says is worthless junk) and Popup Stopper Basic, but have not tried the SpyBot; guess I need to get rid of this Trojan Horse first. If all else fails, I'll let my daughter take the computer to work and they've got some folks who will clean it out, but I'd be without the computer a few days, and I'm too hardheaded to want to give up on doing it myself. /forums/images/graemlins/frown.gif

I appreciate everyone's help and suggestions.

Bird · Nov 6, 2003

Re: My Computer\'s Gone Berserk!

Well, yesterday Symantec had more updates to my Norton SystemWorks and this time it says it cleaned out my Trojan Horse, so my computer finally seems to be operating pretty normally. It may be too soon to know for sure that all the problems are gone, but I'm happy with it for now. /forums/images/graemlins/cool.gif

RonL · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Bird

Seems like Symantec may be filtering out anything from NRA. If you are a defender of Second Amendment rights you may want to consider another virus protection software.

RonL

Bird · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Maybe I'm a little slow this morning, Ron, but I don't understand what you're saying there. Norton's firewall is still frequently blocking what it says is "Backdoor/SubSeven Trojan horse" attempts from several different IP addresses. So I don't really know what's going on, but at least I'm able to use my computer normally.

GaryM · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Some FILTERING software, not anti virus, apparently filters access to the NRA website.

Bird · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

OK, Gary, I don't have any filtering kind of software running as far as I know. /forums/images/graemlins/wink.gif /forums/images/graemlins/laugh.gif

dieselsmoke1 · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Your IP address has been placed on a list of "known working" addresses and is being pounded along with countless others probably many times a day. Most of these attacks originate in other countries. It's common for them to use spoofed IP addresses tp mask their location and identity. If they were to be successful at installing subseven on your PC, it would allow them to run remote programs or commands at will.

It would be interesting to look at your firewall log to see where the attack originates.

As long as Norton is blocking the perps, all is well. Nothing more than an aggravation.

Bird · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

( It would be interesting to look at your firewall log to see where the attack originates )

Of course I don't know how to find out where they originate, but I've gotten it from several IPs; the most frequent being 68.34.63.204 (how do you find out who that is?).

It's also come from 4.10.74.41 and 165.247.61.21 and 24.169.152.173.

And what does the other number after those indicate; i.e., 68.34.63.204 :58763 or :51506 ?