I've got worms!

[Spicoli]

and they won't go away.

My UPdated Norton AV won't detect 'em and the Sasser, Welchia, Blaster removal tools don't find 'em either. Can't stay online long enough to update Windows. Fuck these fucking fuckers and their fucking worms.

(even though I got a 133 on that IQ test, I'm still dumber than a worm)

[EPSkis]

Keep yo chit updated, mang.

Get to another 'puter & download the following:

Ad-Aware (finds things SpyBot doesn't) Do the update immediately & get all the most recent files.

SpyBot (finds things Ad-Aware doesn't) Ditto.

Install those & clean it up first, then try to get your Windows Update again.

I'd also recommend ZoneAlarm & update THAT.

If you've done all this already, blow out your HD & start fresh.

[JR]

We've been doing scads of these and found that if you can get it to install the KB835732 update from windows, it seems to overwrite the infected file and voila, you're cured. It has not "always" worked, but it has in the majority of cases.

If you are having trouble staying up long enough, we have also found that if you bring up the task manager window, it seems to delay the shutdown long enough to get the update done.

Burning that update to disk may increase your chances also.

[Spicoli]

Originally posted by EPSkis
Keep yo chit updated, mang.

Get to another 'puter & download the following:

Ad-Aware (finds things SpyBot doesn't) Do the update immediately & get all the most recent files.

SpyBot (finds things Ad-Aware doesn't) Ditto.

Install those & clean it up first, then try to get your Windows Update again.

I'd also recommend ZoneAlarm & update THAT.

If you've done all this already, blow out your HD & start fresh.

Yea, ran Ad-aware and a couple others. I’m leaning towards Format C: [enter]

Originally posted by JR

If you are having trouble staying up long enough, we have also found that if you bring up the task manager window, it seems to delay the shutdown long enough to get the update done.

Burning that update to disk may increase your chances also.

I’ll give it a shot

[DougW]

What I did which seemed to work was I could download the update file but didn't have enough time to install. So after shut down I pulled internet plug and installed the files.

[InspectorGadget]

['puter jong]

I haven't encountered the worm problem, but I just loaded and ran the Lavasoft Ad-Aware program. Yikes, 71 suspect items quarantined!

Should I also install SpyBot, ZoneAlarm, others?

What is the difference between ad-ware and spy-ware?

[Telenater]

What' you're dealing with is the Sasser virus. You are not infected, but what is happeing is that another computer is sending a signal that fucks with a vulnerability in your OS and causes the computer to reboot. Download the patch and then disconnect you computer from the internet. This will stop the reboot process so that you can have time to instal the patch.

[grrrr]

Get Panda. Got it, haven't had a successful attack on my net since. Auto updats daily, and it is invisible to all my workstations - which means no more worries about who's forgetting to update.

[Schmear]

Here's a question: I run Ad-Aware at every start-up, and each time it uncovers a few datamining files. I don't click on pop-ups and I delete spam email. Where do the new files come from each day? How do they make into my system?

[InspectorGadget]

Originally posted by grrrr
Get Panda.

Now that I've downloaded and run Spybot, ZoneAlarm and Ad-Aware I'm wondering if I need all three. I've already had numerous ZoneAlarm pop-ups; which drives me nuts, only because I'm not sure what to do about them.


Will Panda serve as my one-stop defense against the dark arts?

[Tippster]

Originally posted by Schmear
Here's a question: I run Ad-Aware at every start-up, and each time it uncovers a few datamining files. I don't click on pop-ups and I delete spam email. Where do the new files come from each day? How do they make into my system?

You don't need to click on a pop-up ad for it to leave a little sumpin' on your drive. Download and install the Google Toolbar!!! It has an amazing pop-up blocker. You'll neer have to worry about whether or not you clicked on one again.

Also, do you Kazaa? If so, you're facked until you uninstall it and clean all the spyware it's bundled with off your compooper. If you really don't want to lose your filesharing ability (HEH!) find and download KazaaLite K++ 2.43 or 2.45. These are hacked versions of Kazaa that are supposedly CLEAN.

[Snow Dog]

Originally posted by InspectorGadget
Now that I've downloaded and run Spybot, ZoneAlarm and Ad-Aware I'm wondering if I need all three. I've already had numerous ZoneAlarm pop-ups; which drives me nuts, only because I'm not sure what to do about them.

You can turn off the ZoneAlarm Alerts. They serve no useful purpose (for most people).

[EPSkis]

IG ~

As I said earlier, I run both AA & SB simply because each one finds files that the other doesn't. It's only a 1.3 or 1.7 meg file, so having 'em both won't hurt.

ZoneAlarm is a firewall. It blocks outside traffic from getting to your pc. Yes, it also has built-in blocks on some of the more well-known browser hijackers..

Once again - another friendly reminder. If you ever get a popup box asking to install something, NEVER click the "No" or "Cancel" button. Either click the "x" in the top-right corner to close, or kill that window from the task manager (If the "x" isn't clickable.) If you hit No or Cancel, you're installing it anyways.

[InspectorGadget]

Thank you EP and Snow Dog, I appreciate your help.

[irul&ublo]

http://www.med.sc.edu:85/parasitolog...sLifeCycle.gif

Worms???

Don't eat shit.

[Dexter Rutecki]

So isn't anyone else wondering whether or not this is the true Spicoli?

[fez]

Many of these programs are a bitch to remove when they are running. And of course its hard to stop them from running.

I usually try to boot into safe mode (usually F8 before windows splash will do it) then run adaware. You should also be able to connect to windows update from safe too.

If adaware keeps finding a file every time you reboot, find the name of the file from adaware and run a find. Then manually delete it.

[powslut]

and i was getting excited to relate by telling my amoebic dysentary story...

[Spicoli]

Originally posted by Dexter Rutecki
So isn't anyone else wondering whether or not this is the true Spicoli?

G'head ax me a question...g'head

[snowsprite]

Originally posted by Spicoli
and they won't go away.

My UPdated Norton AV won't detect 'em and the Sasser, Welchia, Blaster removal tools don't find 'em either. Can't stay online long enough to update Windows. Fuck these fucking fuckers and their fucking worms.

(even though I got a 133 on that IQ test, I'm still dumber than a worm)

This worked for me on a few computers:

sasser stuff

Heh, I got a 133 too. (quick--you better change your score)

Sprite

[Dexter Rutecki]

Originally posted by Spicoli
G'head ax me a question...g'head

OK...unfortunately, as you might not know if you are him, most of the original archives were erased, so I can't come up with a particularly good question right now.

Who did you suggest was getting money from penis enlargement donations?
This was almost 3 years ago, so if you don't know it won't prove you're not him, but if you do know I'll be pretty convinced.

[Spicoli]

Originally posted by Dexter Rutecki
OK...unfortunately, as you might not know if you are him, most of the original archives were erased, so I can't come up with a particularly good question right now.

Who did you suggest was getting money from penis enlargement donations?
This was almost 3 years ago, so if you don't know it won't prove you're not him, but if you do know I'll be pretty convinced.

I believe that would be found in the classic, “Gaffney’s small wee wee" thread. A true gem and a must read. I do wonder how it turned out sometimes. Maybe it’ll show up on an episode of “Xtreme Makeovers”

[iceman]

Unfortunately that answers nothing, that thread is still there (and I just bumped it if you really want to see how it ended).

What piece of apparel did I send to you when you were retired for the first time?

[Dexter Rutecki]

Good one, that should settle it.
Unless this is the guy who's keeping Spicoli in his basement and assuming his identity.

[Spicoli]

Originally posted by snowsprite
This worked for me on a few computers:

sasser stuff

Heh, I got a 133 too. (quick--you better change your score)

Sprite

Click Start, click Run and then in the Open field type: shutdown -a

This prevents the system from automatically restarting long enough for you to download and install the Microsoft security update

KEWL!

(oops! it was 13.3)