Virus attack

[At0miC]

last week I got some virus attacks, the computer was totaly down, and now the harddisc has been made clear by an computer-expert, so all the virus and trojans, all my programs and drivers etc everything are gone etc. then he installed my computer again

Now I connected my computer to the internet and in every 10 minutes my virus scanner found about 10 virusses. I'm sure they are virusses: sasser, spybot.worm etc.
I think that those f*cking stuff (srry) will be send automaticly to my IP, it's not a program in the computer that asks for virusses because the computer was clean.

I need to change my IP so this problem is over, but I dont know how, i got adsl.

Can someone plz help me with this problem before I need to clean my harddisc again? cleaning is really expensive

Don't give me links for example pestpatrol or lavasoft, they will not work for this problem, because it's not the computer that search for the virusses.

ThNx At0miC

[M&M]

Can someone plz help me with this problem before I need to clean my harddisc again? cleaning is really expensive

well ,i dont know whats very expensive about

Code: Select all

FORMAT C:

1st of all :ur trying to solve ur problem the hard way .which is to change ur ip address ,if u still want to do that than explain the situation to ur isp and ask for an ip number change .

but if u want to solve it the easy way .just put some good protection up ,firewalls,antiviruses ....etc .
if u have good protection ,those viruses either cant be dloaded on ur comp .or if downloaded wont be effective since the antivirus deals with them .

also,why dont u ask this "computer expert" to find a solution to this problem . i.e to find a way to stop the viruses ,either by protecting ur comp ,or busting the source .

[cassidy]

Now I connected my computer to the internet and in every 10 minutes my virus scanner found about 10 virusses. I'm sure they are virusses: sasser, spybot.worm etc.

Those trojans/worms get into your computer through security holes in your operating system. So, once you get infected, you first "patch" the hole and then use an antivirus to clean your system of the virus that breached your perimeter

If you don't download the microsoft security patches, you're bound to get those things into your computer every time you connect to the internet.

Changing your IP is not going to help you. Only solution to download the patches. You can use microsoft's auto-update, if you find it tiring checking every couple of weeks for a critical security update.

Here's the link to the security bulletin for the sasser worm
http://www.microsoft.com/technet/securi ... 4-011.mspx

and here is the place to check for the updates
http://windowsupdate.microsoft.com/

(just download the critical updates)


hope it helps

ps: do not go/pay computer experts. This is the first thing to do in case your computer is infected (applying the patch from microsoft), i cannot imagine why a technician wouldn't do that and why on earth he would attempt to format your hard drive in the first place. I suppose you can ask for your money back, as he didn't do anything for you, other than erasing any work, personal data you had on that hard drive.

[M&M]

i cannot imagine why a technician wouldn't do that and why on earth he would attempt to format your hard drive in the first place

cause he isnt a computer expert .if he was he would have solved the problem from its routes instead of taking the easy way out .formatting is really a very easy operation .and charging alot of money for it is imo considered theft .

[blue60007]

See, the (*#&$*&%@*(#&(#&@*($&(#&*#*@&(#$&#*&$@(&%)(%$*$))$%$ idiots who write virus and crap got a hold of his IP, do a search on google, I think there are some programs the hide your computer and scramble your IP. Also consider getting a firewall, like Norton, I think it's like 20 US bucks, and crank the level up to high, like I do... Sometimes the freebees aren't the best...

I know there are some programs the hide and scrample your IP from the world, search around.

Also consider switching ISP's if there's another in your area, or I guess you could move...

[cassidy]

Scramble your ip in what way? Sounds a bit odd.

Anyway, 99,9% no hackers have got hold of his ip or anything. This is just the way these worms work. Once they manage their way into an unpatched system, they use that computer to find others too. They just use random IPs,
Eg, if your IP is 177.209.112.142 they will then attack 177.209.112.143 , 144 and so on. They might even use a more complex algorithm. And this will all be coming from your own infected computer. Point is, these are not h4x0rs attacking or whatever, it's other computers that have that virus too (and at present time, that sasser worm is all over the place).

And as said before, antivirus software (like norton) can only get rid of the virus once it's gotten to you, if you don't patch your system you'll be getting the same virus each time you get online. Since you have a static IP, it would be wise to use a Firewall as well.

And thing is, the patches come out 2-4 weeks before the viruses spread. If people would pay attention and install them in time, there would hardly be any problems at all.

ps: erase e-mail from unknown recipients, especially when they have attachments on them

[blue60007]

Try this

http://www.sa6ry.com/surfanonymous/

I don't know if its any good or not.

[cassidy]

This program doesn't actually "distort" your IP itself. It helps you find proxy servers that you can use, as far as i understood at least.

Proxy servers are servers that fetch webpages for you, so that the target website doesn't know you're accessing it, it only sees the proxy's IP instead of yours (not all proxies do that, only the "anonymous" ones). It is useful if you're afraid of websites making a file on you, eg with what articles you're reading or how often. The main reason one would use a proxy server is internet performance though (check an internet dictionary for more info, or ask your ISP if they have one that you can use).

Hadn't thought much of it till now, but since you have a static IP address, it could easily be linked to your name and home address. So suddenly the use of an anonymous proxy sounds like a great idea. By all means, if you're interested in using a proxy contact your ISP first, it might be a service they're already offering to their costumers.

As for the trojans/viruses, the proxy isn't gonna help much. Take a look at http://www.symantec.com/avcenter/venc/d ... caldetails to see how the sasser worm tries to find new computers, especially paragraphs 7,8!

[M&M]

Anyway, 99,9% no hackers have got hold of his ip or anything. This is just the way these worms work. Once they manage their way into an unpatched system, they use that computer to find others too. They just use random IPs

yes thats how worms work .blaster worm used almost the same technique .

looking at that link and reading about that worm ,seems like this guy who programmed it reall yput alot of effort in it .not that i like it ,but at least i respect him for it

anyways,i wonder y atomic hasnt replied yet ,i hope he hasnt done another system format !!!

[At0miC]

LoL no

The problem is over, I had to download 27 windows xp updates :/
The "computer expert" had allready installed norton anti virus 2004 prof.
And the reason why he had to clean the harddisc was because the system in my computer was totaly down.
So the "computer expert" had to clean the Hdisc with an other system, the pc was too down to format c: by it self. It was not possible for me to do it by myself okay.. .....I'm not stupid lmao
The way why I had to pay for it because it's his job and he need money to get something te eat , he had to install all kind of programs because I don't have the cd's.

And I alway's got ad-aware and pestpatrol.

At0miC

[M&M]

The way why I had to pay for it because it's his job and he need money to get something te eat , he had to install all kind of programs because I don't have the cd's

well,u could save ur money so u can eat something better
or buy the cds with .
also,the system slowed down because of the worm
i dont think the worm affects ur comp in dos mode .so all he needed to do ,is get a startup disk then type format c: (formatiing drive c only) should solve the problem

[blue60007]

I'm glad you got it working