I've got worms!

[FNG]

A little tip for avoiding worms with Kazaa Lite: make sure you select the media type you're searching for. Leaving "everything" checked will give you results of all file types.

If it's the software fixes mentioned don't work, you're gonna have to format and start over.

[Clack]

My computer was engaging in some risky behavior with Kazaa lite and it got herpes. Well worms really. How the hell do I get rid of this shit????

W32.spybot worm started it all. Then the randex worm hit, and they keep opening some door for the Trojan something or other.

Norton usually finds and kills them but I can’t get rid of whatever is letting these things in to attack.

I’ve followed all the instructions to eliminate them. Update virus defs, start in safe mode. Scan. Eliminate registry entries regarding the infected files, blah blah blah.

Anyone know of something that will really scourge the system. I need to go shinjuku on this motherfucker.

[Free Range Lobster]

run spybot s&d and adaware se

then pandasoftware activescan (online virus scanner)
www.pandasoftware.com its a free scan

[EPSkis]

But the "experts" say that's not possible with Kazaa Lite!

A healthy dose of:

Ad-Aware
Spybot S&D
CWShredder
BHODemon

(Google 'em as typed)

Download all 4 & stay happy. Start by UNinstalling the no spyware, no trojan version of Kazaa Lite you're using.

[iceman]

Hey EP, that BHODemon says it's for Internet Explorer, do you know if there's any point to downloading it if you run Mozilla?

[EPSkis]

Hey EP, that BHODemon says it's for Internet Explorer, do you know if there's any point to downloading it if you run Mozilla?

Good point ~ Sorry, because I'm a Microsoft-only IT guy, I always *assume* everyone's using the same eq'p I am.

To my knowledge, BHO's are an IE specific object...Not being real familiar with Mozilla, I'd have to dig a bit for that answer but I would say no - If you're using FoxFire / Mozilla, I would imagine the BHO Demon is unnecessary.

(I'd still recommend CWShredder tho - it's a .dll tracker/eraser. Works GREAT for browser hijacks..)

[13]

Am I the only one who thought:

"Oh shit, monster dump has monsters in his dumps?"

After reading the title of this thread?

[Spats]

The average Windows box will last about 10-20 minutes before it gets infected by another worm.

To fix this, turn off your network connection and go to Control Panel -> Network. Right-click on your network connection and choose "Properties". Uncheck everything but TCP/IP (Internet Protocol).

Then run your virus/worm checkers again. Now reconnect to your network.

Now go to windowsupdate.microsoft.com and install all the security fixes.

I don't even run a firewall and I've never been wormed.

[freshie247]

My friend Harry & I are starting a company called I've Got Worms.

[joshbu]

Another helpful tip: after you've got your latest Norton signatures and various other cleanup tools, yank your network cable while you clean up. That should help you nuke what you have now without worrying about picking up something new.

I personally only plug my wireless card into my notebook when I have a list of online chores. Which I always do from a user account with almost no privliges. Otherwise, I'm off the grid.

[iceman]

Spats or whoever knows, what's a "QoS Packet Scheduler"? Should I turn that off? It's the only thing checked besides TCP/IP.

[DBdude]

Use HijackThis

http://www.snapfiles.com/get/hijackthis.html

Analyze log file here
http://www.hijackthis.de/index.php

Be carefull. Read about this tool before you use it.

[DBdude]

Spats or whoever knows, what's a "QoS Packet Scheduler"? Should I turn that off? It's the only thing checked besides TCP/IP.

http://www.dslreports.com/faq/3688

QoS Packet Scheduler is a method of network bandwidth management that can monitor the importance of data packets and depending upon the priority of the packet, give it higher or lower priority or bandwidth levels.

How to get rid of it
http://support.earthlink.net/mu/1/ps.../6800.psc.html