Virus Attack? Maybe ?

[magicz69]

i'm asking on behalf for my fren... his computer is having this attack where it comes out a countdown everytime he on his computer ... he scanned for virus and adware and no virus or adware is ofund ... yet the countdown for shuttting down the computer is still there
one minute countdown.. any help ?

[gambler2611]

http://www.sewers.dk/index.php?page=Articles&id=60

[magicz69]

i doubt is msblast .. maybe is a new virus.. w32.sasser.worm...
screw those virus makers

[DanGrease]

Is he using Windows XP?
It could still be the blaster worm.
Does he have his Antivirus program updated?
Here you can get this removal tool, that will scan his computer to see if its infected with the blaster worm, and if it is it will remove it.
Also, make him use Windows Update to update his version of windows, since this is always recommended, and there is a patch from Microsoft to prevent him from getting the blaster worm ever again.

dan

[DanGrease]

It could also be the Sasser worm. I just read about it, and I didn't know it existed until now, since its a new worm.
Here is Microsoft's information and what actions to take if you get infected.

dan

[magicz69]

yup i scanned for him no virus found ... i'm now looking for cure for sasser worm.. maybe tatz the cause

[dusty825]

Go to the antivirus and get the latest updates and run them.
The company I work for got hit with a virus Friday night about 10pm. We run everything with computers so it really messed us up considering we have about 500pc's there. Not sure what virus it was though.

[Redwolf]

Some variants of blaster and sasser trick most anti-virus programs I believe. I would definately try running the removal program. It won't do any harm if it turns out there is no virus (which I doubt).

[Kimbo]

Trend Micro's Solution Detail for sasser might help.

Also, download McAfee Stinger dated 5/2/04 which lists the sasser worm as one of the virus/trojan variants it removes as well as blaster.

Kimbo

[ToiletPaperMCSE]

I´m getting really suspicious that there´s something brand new in the wild. Same symptoms as Sasser, but cannot be located. Systems are patched with latest virus definitions running W2K. What really worries me is that there are no suspicious programs shown in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Anyone else with these same affects? I´m not personally affected, but my neighbor at work (who´s machine is currently my test machine for this, lol) and at least 50 machines in our network at various sites (I´m just a Service Desk guy taking calls & trying to figure it out) have been affectee since roughly 2 hours ago.