Notices
Non Scooby Related Anything Non-Scooby related

Suspected Virus, Any help please...

Thread Tools
 
Search this Thread
 
Old 30 September 2001, 08:24 PM
  #1  
polarbearit
Scooby Regular
Thread Starter
 
polarbearit's Avatar
 
Join Date: Feb 2001
Location: Wiltshire
Posts: 2,583
Likes: 0
Received 0 Likes on 0 Posts
Question

Ok,

I have enclosed a nice pic of my current current tasks, basically one of my PC's is constantly poling at 100% CPU, it lets other programs run but quite slowly. I use a fully live updated NAV (7.51.848) and it finds no viruses! Also I just SP2'd W2k on the machine and it is only since then the problems started, is this common?

I was really not sure what is going on so I downloaded Iparmor 5 demo which said -

"Trojan found.
Suspect Trojan found active in memory.
!Only a registered Iparmor can auto-disable and rename suspect process.
Suspect Trojan found active in memory.
Only a registered Iparmor can auto-disable and rename suspect process."

Now why hasn't NAV found this? I have just mailed them to see what they say, but does any one else have any idea what the problem is so I can get on and fix it.

If anyone has any suggestions I'd love to know, it isn't affecting any of the other machines I have yet, but I am naturally worried.

Also it doesn't start until I dial up to the internet! But when I disconnect it doesn't stop.

I've looked though the usual antivirus websites and have yet to find anything like it...

Thanks

Jon


Old 01 October 2001, 12:03 AM
  #2  
JackClark
Scooby Senior
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Post

Could be a false from Iparmor, could be a miss by Symantec. You could download another reputable scanner and try that, I'd recommend having a go with McAfee from here
Old 01 October 2001, 09:40 AM
  #3  
polarbearit
Scooby Regular
Thread Starter
 
polarbearit's Avatar
 
Join Date: Feb 2001
Location: Wiltshire
Posts: 2,583
Likes: 0
Received 0 Likes on 0 Posts
Question

Does anyone have any idea's, nothing back from symantec yet!

Jon
Old 01 October 2001, 01:10 PM
  #4  
polarbearit
Scooby Regular
Thread Starter
 
polarbearit's Avatar
 
Join Date: Feb 2001
Location: Wiltshire
Posts: 2,583
Likes: 0
Received 0 Likes on 0 Posts
Exclamation

Worrying if it a virus, but I can't really see what else is causing it! I was going to download McAfee, but thought that generally NAV and McAfee would be about as good as each other, I'll see what happens.

Not sure how good Iparmor is and I was sceptical as there are no real details, looked like a ploy to make you buy the product!

Thanks

Jon
Old 01 October 2001, 01:53 PM
  #5  
JackClark
Scooby Senior
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Post

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:<HR>Originally posted by polarbearit:
<B>I was going to download McAfee, but thought that generally NAV and McAfee would be about as good as each other, I'll see what happens.
[/quote]

&lt;cough, splutter, cough&gt; Not a chance! They're good but we give their detection rates a spanking, I won't even mention cleaning.

Latest figures for the engine written and produced in good old Aylesbury, Bucks.

FIRST in detection of unknown viruses - July 2001 University of Hamburg test.

100% DETECTION in ALL categories - July 2001 Virus Bulletin test.

FIRST in detection of viruses and malware - April 2001 University of Hamburg test.

100% DETECTION of viruses in compressed files - April 2001 University of Hamburg test.

'PERFECT' false alarm record, with ZERO false alarms - April 2001 University of Hamburg test.

VB100% award - April 2001 Virus Bulletin.

Old 01 October 2001, 10:49 PM
  #6  
polarbearit
Scooby Regular
Thread Starter
 
polarbearit's Avatar
 
Join Date: Feb 2001
Location: Wiltshire
Posts: 2,583
Likes: 0
Received 0 Likes on 0 Posts
Post

Well it would appear I have no viruses!

Bugger Just download McAfee, tried the Dos version and No Viruses, so I downloaded the Windows version, fully updated it and still no virus...

Very Strange!

Any Ideas would be great!

Jon
Old 01 October 2001, 11:51 PM
  #7  
JackClark
Scooby Senior
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Post

Can you uninstall the service pack? Might be a start.
Old 02 October 2001, 10:18 AM
  #8  
polarbearit
Scooby Regular
Thread Starter
 
polarbearit's Avatar
 
Join Date: Feb 2001
Location: Wiltshire
Posts: 2,583
Likes: 0
Received 0 Likes on 0 Posts
Post

Jack,

I didn't tick back up existing files when I installed the SP as it worked ok on another machine I have (which is Identical with same build on it, hmm)

So looks like a rebuild is called for...

Jon
Old 02 October 2001, 05:21 PM
  #9  
Scrappy
Scooby Newbie
 
Scrappy's Avatar
 
Join Date: Jun 1999
Posts: 6
Likes: 0
Received 0 Likes on 0 Posts
Post

Sounds like a dodgy service to me. Try stopping each service in turn and checking task manager after each one (svchost.exe controls services). Anything interesting in event viewer?
Old 02 October 2001, 08:30 PM
  #10  
polarbearit
Scooby Regular
Thread Starter
 
polarbearit's Avatar
 
Join Date: Feb 2001
Location: Wiltshire
Posts: 2,583
Likes: 0
Received 0 Likes on 0 Posts
Lightbulb

Well I'll be buggered,

I was just surfing, when I noticed a new Bios for this PC, rebooted and installed... Just for fun, never really fixes anything usually!

Anyway, as the PC only shows this problem after it connects to the web I decided to take before and after screenshots. So I did the before shot and it connected. And the problem did not occur

Tried alsorts off combo's and I still can't repeat the problem

Bloody computers

Jack, Scrappy, thanks for the help.

Jon
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
SwissTony
Wanted
23
04 October 2015 10:55 PM
alcazar
Other Marques
9
09 September 2015 05:42 PM
Cambs_Stuart
Driving Dynamics
0
07 September 2015 12:49 PM
a2jcy
ScoobyNet General
3
30 May 2001 12:38 PM
Big RS Dave
ScoobyNet General
5
14 April 2001 08:12 PM



Quick Reply: Suspected Virus, Any help please...



All times are GMT +1. The time now is 06:35 AM.