Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Help!? Virus??

Thread Tools
 
Search this Thread
 
Old 23 June 2004, 01:05 PM
  #1  
RB5_245
Scooby Regular
Thread Starter
 
RB5_245's Avatar
 
Join Date: May 2003
Posts: 2,703
Likes: 0
Received 0 Likes on 0 Posts
Default Help!? Virus??

Hi,

I just got broadband yesterday, when I connect I get the problem

'LSA Shell (export version)' has a problem and needs to close.

Then after 20mins or so, I get a 1 min countdown and the thing re-boots.

5 this time damnit

Thanks Dave.
Old 23 June 2004, 01:11 PM
  #2  
RB5_245
Scooby Regular
Thread Starter
 
RB5_245's Avatar
 
Join Date: May 2003
Posts: 2,703
Likes: 0
Received 0 Likes on 0 Posts
Default

That was the first thing i typed after starting up, and i had crashed just after i finished.

I dowloaded a popup blocker, spyware remover and updated my anti-virus to try and fix it but nothing

Anyway, Thanks for any help anyone may have. Dave


Its windows xp by the way.

Can't even take it to the computer shop coz the scoob's broke too

Last edited by RB5_245; 23 June 2004 at 01:13 PM. Reason: forgot to mention.....
Old 23 June 2004, 01:25 PM
  #3  
messiah
Scooby Regular
 
messiah's Avatar
 
Join Date: Jul 2003
Location: Surviving as a soldier of fortune on the Los Angeles underground...
Posts: 7,181
Likes: 0
Received 0 Likes on 0 Posts
Default

sounds like sasser worm / ms blast or mydoom.

patches for all 3 from microsoft

when i got the sasser worm, i managed to stay online long enough byt not clicking on "warning" dialogue boxes - if I did, this seemed to trigger the 1 min countdown. So unless you're downloading the patch, don't click on any button labelled "yes"

hope that helps.

otherwise get to another pc to download what you need.
Old 23 June 2004, 01:29 PM
  #4  
andrewdelvard
Scooby Regular
 
andrewdelvard's Avatar
 
Join Date: Sep 2001
Location: Plymouth
Posts: 3,079
Likes: 0
Received 0 Likes on 0 Posts
Default

Sounds like the sasser worm to me.

Take a look here. http://www.microsoft.com/security/incident/sasser.mspx

Good Luck.
Old 23 June 2004, 01:30 PM
  #5  
Boro
Scooby Regular
iTrader: (1)
 
Boro's Avatar
 
Join Date: Jul 2003
Location: Cornwall
Posts: 7,222
Likes: 0
Received 0 Likes on 0 Posts
Default

click start, run shutdown -a

I think thats the command that will stop the comp shutting down.

Either that or shutdown -n

Theres a good topic in here about removal, use the Stinger tool.
Old 23 June 2004, 01:30 PM
  #6  
andrewdelvard
Scooby Regular
 
andrewdelvard's Avatar
 
Join Date: Sep 2001
Location: Plymouth
Posts: 3,079
Likes: 0
Received 0 Likes on 0 Posts
Default

LoL Messiah! Beat me to it!
Old 23 June 2004, 01:38 PM
  #7  
Boro
Scooby Regular
iTrader: (1)
 
Boro's Avatar
 
Join Date: Jul 2003
Location: Cornwall
Posts: 7,222
Likes: 0
Received 0 Likes on 0 Posts
Default

http://securityresponse.symantec.com...er.b.worm.html

REMOVAL TOOL

MICROSOFT PATCH

Look out for...



and

Old 23 June 2004, 02:49 PM
  #8  
RB5_245
Scooby Regular
Thread Starter
 
RB5_245's Avatar
 
Join Date: May 2003
Posts: 2,703
Likes: 0
Received 0 Likes on 0 Posts
Default

Thanks, That's the help I needed.

Boro, Those are the exact messages I'm getting. I downloaded the fix from symantec and it said it didn't find the worm. Mid you, it's not crashed yet either

Thanks for the help all, Dave
Old 23 June 2004, 06:50 PM
  #9  
Nick
Scooby Senior
 
Nick's Avatar
 
Join Date: Oct 1998
Location: Highlands
Posts: 2,805
Likes: 0
Received 1 Like on 1 Post
Default

Download the free McAfee stinger from here: http://vil.nai.com/vil/averttools.asp#stingerIt's small enough to fit on a floppy, so you can use another pc & then run it from the a: drive.
Old 23 June 2004, 08:11 PM
  #10  
stevebt
Scooby Regular
iTrader: (8)
 
stevebt's Avatar
 
Join Date: Sep 2002
Posts: 16,732
Received 33 Likes on 19 Posts
Default

if you dont disable system restore itll not get rid of the worm, plus there are loads of worms about, and those screens are a definate worm or trojan horse. when i has similars screens even norton didnt pick it up but youve definately got one
Old 24 June 2004, 06:01 PM
  #11  
RB5_245
Scooby Regular
Thread Starter
 
RB5_245's Avatar
 
Join Date: May 2003
Posts: 2,703
Likes: 0
Received 0 Likes on 0 Posts
Default

It's gone now, But I'm not quite sure how.

For a while there it was looking bad, No computer and all 3 1/2 cars off the road too

Hope fully it was just a short run of bad luck, now only got afew cars to fix

I'm not sure who's advice it was that fixed it but thanks anyway,

Dave.
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
Big RS Dave
ScoobyNet General
5
14 April 2001 08:12 PM



Quick Reply: Help!? Virus??



All times are GMT +1. The time now is 09:57 PM.