Virus?!! Help!

[Bret4207]

Ok, so my Dell Dimension with Pentium 4 , 75 G HD, something like a 2.8 processor- hope I have the terms right, I'm not a geek. The thing was working great for a couple years. Fast, fast, fast. Maybe a month ago it started slowing down. It got real bad over the past week. My McAfee and Windows automatic updates are turned on and I've checked to make sure I'm as up to date as I can be, or at least I think I am. I've run the diagnostic programs the computer came with, run System Mechanic and made sure the scheduled defragmentation, clean up and what not are done, repaired any broken shortcuts etc, got rid of saved internet pages, cookies, etc, ran Window Washer, Trendmicros Housecall which had a few hits that I think I took care of, Spybot, Ad-aware, and had our local geek Wesleyen Minister come over and spend 3 hours trying to fix it. We found some firewall type programs were down, and some settings were way off. I also renewed my McAfee subscription and down loaded the latest stuff from them. It's a little better, at least the screen isn't flickering like it's gonna die, but there's still something wrong. If I run Task Manager (control/alt/delete) under Processes I see "System Idle" is running at anywhere from 85-99 under the CPU heading. Near as we can figure there's a virus that won't let McAfee or anything else see it. I did a Google and found a program called "Stop Sign" that scanned the computer and found several spyware programs and one Trojan that the other programs didn't find, so I sent them my $$$ and ran it. Still no change.

BTW- this isn't slow just on the 'net. Start up, Quicken, everything is slow.

Anybody got an idea on my next move? Short of taking it to someone and letting them charge me $50.00 an hour to play with it I mean?

[fatnhappy]

wipe the hard drive and re-install. You might want to disconnect from your internet access, physically unplug, and then boot up and wait. Normally if you have an undetected trojan or malware it'll try to find a port. Windows should then have a pop-up telling you xxx process needs internet access.


you should also open task manager and take a good look at the processes that are running.

[Pepe Ray]

Trpr.Bret,
I,m NO geek either but I had a similar problem a couple years ago. Try shutting off the PC when not using it, like while your asleep. Stay aware of the status, watch to see if it comes on by itself. It may take a week to catch the varlet in action.
There's a place in your software that tells you if your the only user. But I don't know how to find it. Some hackers will invade your PC and use it for their own crap. They dont like it when it's OFF. I finally had to resort to pulling the plug. They surly cant use it w/o AC:twisted:
BTW, I'm convinced the hacker came aboard when I first joined the Leverguns web site. It's a long story. The hacker is either gone now or changed his name but IEC I have a different PC now, and better security.
Good luck. Pepe Ray

[Old Ironsights]

Here's a biggie: IF YOU ARE ABSOLUTELY CERTAIN YOU DON'T HAVE A VIRUS

Go into your "System Restore" folder (under System Utilities) and turn it off. This will clear your MASSIVE system restore point database. You can turn it back on again if you want to. I suggest clearing your restore-point database at least monthly.

GET RID OF MACAFEE ANTIVIRUS - It's a HUGE system hog, and makes your system slower with every update. Get a low overhead antivirus package like Computer Associates EZ-Antivirus. That's what I use on all my corporate machines. Not virus 1 gets through.

[454PB]

There are a lot of things that can cause this, it's pretty tough to troubleshoot from a distance. I agree with Old Ironsights, I quit using Macafree and Norton years ago....too high maintenance, resourse hogs, and expensive. I now use AVG free antivirus, Zone Alarm free firewall, and Spybot. I haven't had a problem since doing this switch, but they must be kept updated. AVG does automatic updates daily, and they only take a minute or less.

In addition, you should do your virus scans in "safemode". This insures that no other unneccesary programs are running. Let me know if you are unfamiliar with how that is done.

You can also delete all but the last system restore point, as Old Iron sights recommended. The old ones serve no purpose and use up a lot of disk space. Any virus, spyware, and malware can hide in these old restore points and re-infect the system. As he said, turn off the system restore temporarily while you find the culprits.

If your CPU is running 90% all the time, it is going to overheat and possible damage itself.

[KYCaster]

By no stretch of the imagination can I be considered a computer geek, but since I got rid of MS Internet Explorer, MS Outlook Express, AOL, Yahoo, McAfee and Norton and started using Firefox and AVG, I've had ZERO PROBLEMS.

Jerry

PS....and stay away from those PORN SITES.....no tellin' what you'll catch there.:roll:

[C A Plater]

You have your work cut out for you. From the description of the symptoms, you probably have one of the nastier bits of malware varieties that is very hard to remove. With your firewall being disabled, that leaves you wide open for port scanners that can infect your computer by being connected to the internet compounding the problem. Unfortunately, most anti-virus software is 95% successful at finding and removing the offending software. That last 5% is what kills ya.

If I were to work "hands-on" the problem, I would most likely use a live-cd rescue disk something like UBCD4win to scan, clean the system and make backups of valuable data. Once cleaned and before reconnecting to the internet, I alway put a router between me and the cable/dsl modem setting it up to filter out the port scanners so they never see your PC. Costs about $40 and worth every penny.

Next, lose IE6 and Outlook Express, they are way to vulnerable to use on anything connected to the net. Firefox, Mozilla and Opera are good safe browsers and available for free. Thunderbird and Eudora are many times safer than OE as a mail client and also free for the download. Others have mentioned some of the better anti-virus and spy ware tools to help keep the rif-raf out once things are cleaned up.

If you want to play with some alternatives to Windows, I recomend trying Puppy Linux. It runs off a CD and is about 60MB in total. It will not affect Windows other than you can save your preferences in a single file if you wish when exiting. Being CD based it is immune from viruses and is blazingly fast on modern hardware. Two of my computers run it full time. If you need a copy and don't want to download, PM me and I'll mail you a mini-cd with the latest version.

Yes, I am what some would call a computer geek. Been making a living with them for more than 25 years.

[Ricochet]

and had our local geek Wesleyen Minister come over and spend 3 hours trying to fix it.

Have him exorcise it.

[Bret4207]

Thanks guys, I've heard alot about Firefox and it's all good. I figured I'd say thanks and ask a couple questions while the 'puter seemed to be working. By "wiping the hard drive" I assume we're talking "reformating" and reloading Windows XP? Does Firefox and their e-mail system work within Windows then? I just downloaded IE7 and unfortunately also just re-subscribed to McAfee for $80.00 give or take. Too bad I ddin't realize I had options in the whole thing.

So if I do this, I need to save my valuables, like Quicken, photos, emails, etc. to disc or floppy or what ever? Then the whole Windows XP is uninstalled and reloaded? Then I would load Firefox, a better anti virus/spyware, and whatever else I needed? Sounds like I need a pro. The router idea was mentioned by Pastor Jim since we leave the 'puter on 24/7. An external hard drive to back everything up was also mentioned.

Looks like I need to do some research. Any more suggestions?

[C A Plater]

Firefox, Thunderbird, Opera and Mozilla will all work just fine on Windows. Wiping is reformatting. Wipes out the previous data. Backing up to floppies is painful and time consuming. Better would be to use a USB hard drive or a CD/DVD burner to copy your valuable data and compress (zip) it. You only need to backup your data and programs you do not have the install CD. Best to disconnect from the internet too when you do a system clean and backup and make sure your firewall is working before reconnecting. It takes only a few minutes for an unprotected MS system to be infected. These pages have some good general information that may help you understand what you're up against. http://software.silicon.com/security/0,39024655,39164025,00.htm?r=1

Good luck.

[454PB]

Thumbs up on the external hard drive. I got one a while back, and use it for backup, as well as storage for my thousands of digital photos and MP3 files. I was in Target the other day, and they had a 160 GB external HD for $89! We have several computers that are not networked, so the external hard drive is great for moving large files between them.

I've just recently begun using Opera as a browser. I like it, but it is a bit of a learning curve, it's quite a bit different from I.E. or Netscape. Mozilla Firefox is my current favorite, very user friendly and similar to I.E. if that's what you are used to.

[Bret4207]

Thanks guys, lucky I have my work laptop to use when the 'puter at home screws up. I'll look into the ideas you've given me. Fee free to offer up and other ideas.

Thanks again- I knew the Cast Boolit boys would have some answers!

[OldBob]

Tpr.Bret,

Contact me, I repair/build them in my "spare" time, have some good malware/spyware removal programs and also Firefox and Thunderbird, my charges are a whole lot less than most.... 'specially if theres cast boolits involved ! Or I can try to talk you thru it free............or ???

[waksupi]

Maybe someone can help me out with Thunderbird. I just changed to it, and am having problems sending messages. it requests my password, but refuses it. am I missing something here? I figured I would call my local ISP nerd squad in the morning, and have them walk me through it, if I can't find a solution here.

[C A Plater]

Maybe someone can help me out with Thunderbird. I just changed to it, and am having problems sending messages. it requests my password, but refuses it. am I missing something here? I figured I would call my local ISP nerd squad in the morning, and have them walk me through it, if I can't find a solution here.

Go to "Account Settings" and select "Outgoing Server (SMTP)". You will need the server settings from your ISP but most are similar. Check to be sure the server is the correct one and if your ISP requires TLS or SSL, the box is checked. Next see your user name is correct. Some just use a name, others require the full email address as user name.

[Topper]

Trp Bret.
Your getting some very good information here.
If infected and you run what ever cleanup program you have within the OS, then on reboot the system is reinfected by system restore. You must disable this "feature lol" before running you cleanup app.
If your ready to just wipe the drive and reinstall the OS, there may be a simpler option versus wiping the drive, loading the OS, installing the drivers, then the application.
After backing up all data including your address book, favorites, reboot the unit and hit <CTRL> + <F11> when you see the blue bar loading accross the screen.
You should be able to select [dependent upon year & model] "restore system to factory defaults" or some other like lingo. This will bring the unit back to the first time you powered it on.
Afterward, DO NOT CONNECT to the internet until you have a firewall installed.
When you do connect, download all security updates from microsoft.
The restore option is FAST, no need to load driver or apps.
Works from a compressed image off the drive.
Note: this will only work if the hard drive has never been replaced or repartioned and formatted.
Good luck sir.

[zuke]

Go here http://www.ccleaner.com/ and chose to run c cleaner. I got it from a porn site [smilie=1: . I ran it and it cleaned out a LOT of crap, hence the name c cleaner.
It does work nicely.
I also run Ad aware and it catch's it fair share.

[Bret4207]

'Nother question- Does the modem for my DSL act as a router? A local tech weenie says yes. If so, wouldn't my issue be more likely to be corrupted files or conflicting programs?

[nelson133]

Get help on a good computer help board. I suggest www.helponthe.net (cute isn't it. There's a program that willl detect anything called hijackthis. It's a very complex tool but the people there will help you interpret it. I know becausethey have helped me before.

[Topper]

Does the modem for my DSL act as a router?
Trooper, you can look up the model number and should be able to access the user's guide online.
Terms might not be completely accurate but most DSL router do use DHCP - acronym which means it functions as the server and holds the IP address from your ISP provider and provides your computer an address that is masked from the world wide web using NAT (network address translation).
The big problem is if you've gotten a trojan and haven't removed it, it will open a backdoor behind the firewall from the infected system.
So, if your sure you don't have a trojan grabbing all your band width, then something else may be eating up resources, or it may be something as simple as unpluging your DSL router for a few secs and plugging it back in to renew the IP address.

[hobbles]

Mornin Tpr. Bret
Want to sea if your ports are open to hackers? Go here,
http://www.grc.com/x/ne.dll?rh1dkyd2
Then run "COMMON PORTS", "ALL SERVER PORTS", "FILE SHARING" Green is good,,

[Bret4207]

Thanks to all. At this point going online from the problem computer is slower than my Comodore 64 was! It's either a virus/malware issue of some sort, a problem with McAfee fighting with it's different versions, or a processor issue per my local tech geek. I think it's going to be a 4 or 5 hour fight for him to find the problem. We'll see what happens.

Thanks to all who have tried to help. I'll be back eventually.

[Scrounger]

I don't have a virus as far as I know but I do have an itch I want scratched. About a week ago Microsoft downloaded the new 7.0 version of Internet Explorer on me, whether I wanted it or not. I'm getting used to it and I see no improvement over 6.0 but maybe they know of things I don't. What I do miss is Outlook Express. I do still have the program but there is no shortcut on the new browser like there used to be. Anyone know how to get an Outlook Express button on Internet Explorer 7.0? And please don't tell me Mozilla is better; I have it, I tried it, and I still prefer IE.

[BeeMan]

I have a license from work to use McAfee on my home PC, but has been a performance drag on my older PC. I downloaded and installed the AVG antivirus mentioned above then disabled McAfee. The PC runs much better now. I sincerely hope it will provide the same level of protection. McAfee did manage to keep both the office network and my home PC clean for years.

[crazy mark]

I don't have a virus as far as I know but I do have an itch I want scratched. About a week ago Microsoft downloaded the new 7.0 version of Internet Explorer on me, whether I wanted it or not. I'm getting used to it and I see no improvement over 6.0 but maybe they know of things I don't. What I do miss is Outlook Express. I do still have the program but there is no shortcut on the new browser like there used to be. Anyone know how to get an Outlook Express button on Internet Explorer 7.0? And please don't tell me Mozilla is better; I have it, I tried it, and I still prefer IE.

Try: click start then search and type in outlook express. If not found in the start menu try the C drive. Should be a shortcut there you can copy and paste onto your desktop. Mark

[DuncaninFrance]

Well I can only speak from my experience but I have used AVG Pro for the last 4 years and been more than happy with it. I also run Kerio fire wall not the Microsoft one. So far so good!
As for IE7, well I have not used IE for 2 years and much prefer Firefox. It was much faster than IE when I had dial up and works with all the ISPs I contact.

[Reality Czech]

Tpr. Bret
If I run Task Manager (control/alt/delete) under Processes I see "System Idle" is running at anywhere from 85-99 under the CPU heading.

System Idle shows what percentage your CPU is unused so at 85-99 it is basically free to process.
When your puter is running slow, open Task Manager and see if something is knocking the System Idle down to near 0%,.......If you spot something using alot of the CPU, do a Google search on it and if it's a nasty, there might be a removal tool for it.

[C A Plater]

A very good programs for checking on what is running on your computer is procexp.exe. It was recently aquired by Microsoft as is still available at http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx MS also took over tcpview that shows what processes are communicating and is available here http://www.microsoft.com/technet/sysinternals/utilities/TcpView.mspx

[Bret4207]

Well, at this point I think someone, maybe me, maybe the kids, deleted or changed something in the setup thats causing the problem. We're looking at reformating. I got Mcafee back up after it disappeared, got some good tips from bleepingcomputer.com, etc. At least I can get online now. The thing sure is slow.

Thanks again to all.

[C1PNR]

Best to you Bret! After earlier trouble I finally reformatted, added ZoneAlarm and now AVG 7.5. Feel much better.:-D

[Bret4207]

Well boys, the 'puter is off to the fix-it shop. Hope the voodoo they do will fix it. Now to see if the kids can survive the weekend without the thing being available!

[Bret4207]

FWIW- I dug out the old circa 1998 Gateway we used to use that we had reformated, but never worked after that. It's been sitting for 2 years and must have decided it wanted to work. Sucker runs great! I got Quicken downloaded, solitare and a few games for the kids. I think hitching to the DSL is out 'cuz it doesn't have the right "outlet" for the ethernet cable, hope thats the right term. Maybe there's an adapter made.

I'm thinking if I can run 2 units off the same DSL line I can just use the "new one" for Mom and Dad and the kids can use the old Windows 98 unit for the games. Does that sound workable?

[Old Ironsights]

FWIW- I dug out the old circa 1998 Gateway we used to use that we had reformated, but never worked after that. It's been sitting for 2 years and must have decided it wanted to work. Sucker runs great! I got Quicken downloaded, solitare and a few games for the kids. I think hitching to the DSL is out 'cuz it doesn't have the right "outlet" for the ethernet cable, hope thats the right term. Maybe there's an adapter made.

I'm thinking if I can run 2 units off the same DSL line I can just use the "new one" for Mom and Dad and the kids can use the old Windows 98 unit for the games. Does that sound workable?

Very. You can get an ethernet card for $10 and a cheapy 10 megabit ethernet "workgroup hub" (think Netgear or Linksys brands) for about $25 - or less if you have a Used Computer Junk store.

[Scrounger]

Very. You can get an ethernet card for $10 and a cheapy 10 megabit ethernet "workgroup hub" (think Netgear or Linksys brands) for about $25 - or less if you have a Used Computer Junk store.

The older one probably has a much slower processor than the newer one; Won't that be a handicap when running video games?

[Old Ironsights]

Depends on the game... ;)

Those "reader rabbit"/magic schoolbus kind of games don't require DOOM3/Unreal rendering capabilities.

Besides, who wants the kids playing Madden 24/7? :D

But you are correct, the older one would probably be most suited for "Demilitarized Zone" Web Surfing.

[Bret4207]

I'm thinking "Oregon Trail", Pinball, etc as far as games go. I think the kids use a Yahoo games site too. Some of the games, like O.T., aren't on the 'net and run great. I'm thinking having a spare would be nice, and I wouldn't have to worry about losing info if they never, ever touch the unit.

The only "big" game is Diablo Sir Whines A Lot plays. That one "NEEDS" the new, fast computer, or so hey claims. I'm nt so sure the DSL wouldn't make up the difference in speed.

If I do this I'm thinking of trying AVG anti virus and Fire Fox browser since Windows 98 isn't supportted by Microsoft anymore. Does that sound like a good idea?

[RayinNH]

Tpr. Bret, AVG antivirus and Firefox are always a good idea :-D...Ray

[Bret4207]

Bought the ethernet card at Wally World. Tried loading the program. No go. Keeps telling me to insert the CD-ROM. Guess I'll have to call the techies at the company. Thanks for the info guys.

[OldBob]

I've run AVG for several years and no problems with virus, Firefox is great, the latest version has a nice add blocker that wipes out those annoying (to me) flashing, blinking adds. Opera browser is another good one, both are far better than Internet Explorer as far as I am concerned. Trpr Bret, you might also want to consider running Spyware Blaster and/or Spybot Search and Destroy, both freebies and they help keep out the spyware/malware garbage.

[Lee]

Guys, please don't think you need a Cray-X15-Duo2 supercomputer to connect to the Internet or get any work done.
As an example; a Pentium II 300Mhz with 128MRAM and a 20GHDD is more than adequate to connect to this forum.
No, it won't play the overpriced crap for sale today, but who cares?
No, it won't be the fastest machine on the block, WHO CARES?
No it won't run "Vista" (microcraps newest money seperator) BUT WHO CARES?
DO YOU REALLY WANTA DROP $50.00 FOR THE LATEST NRA BIG-GAME HUNTER CD-ROM???(Cmon give me a break!!!!!!!!!)
45 years ago I made up my own games with the neighbor kids, I wasn't fat and lazy and overweight...................nevermind....I can see where this is going............have a good day...........................Lee:)
P.S. keep the virus thread going...now THATS good info!!!!.................Lee:)

[felix]

Well, now, I am glad to see someone else knows of the Cray machines. I have had many days of fun on those critters in the days gone by. Starting with the early CDC machines doing military simulations, later oil well stuff. ... felix

[Topper]

Has anyone thought of using remote desktop to take a look at Tropper Bret's system?
All you need is a msn Instant messenger account on both units.

[Bret4207]

The Prime Minister of Tech says the 'puter is ready to pickup and is working fine. We'll see tonight if I'm lucky. Thanks to all.

[Bret4207]

No workee, fustration mounts. AHHHHHHHHHHHHRRRRRRRGGGGGGGHHHHHHHH!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!

[Bret4207]

Well it works, but it's still slower than heck. I may try Firefox just to see if it's XP or my DSL or something else. Darn thing!

[zuke]

Do a search for "CCleaner" work's like a charm, and it sound's like you've nothing to loose.....:Fire:

[shooter2]

Games... I bought a new HP this past summer and it came with scads of games. Not my bag, but I left them on. Over time it took longer and longer to start the system in the morning (I turn it off every night). This morning I removed nearly every game on the system. Perhaps three dozen. I Just do not have time for that. I use Norton Antivirus and zone alarm (free version) and they seem to do the job. No viruses (knock, knock). Only three cookies that I could find.

[Bret4207]

I looked at Ccleaner. I have other programs that do the same thing. I think I have a hardware issue.

[RayinNH]

How about defragmenting your hard drive to reorganize the bits and pieces that have been strewn about...Ray

[Lee]

Did your computer store reformat the HDD and reinstall the Windows system?
If they did, then you can't get any faster than that.....UNTIL you start adding your favorite programs back in. THEN it will slow down. Try uninstalling programs you don't need or use. See if that helps. And if you have already heard all this before...sorry. And if they did not, well then they should have......
Your hardware description should yield a reasonably fast machine.......
My original XP install was blazing fast 3 years ago. Now it takes longer to boot, it is still pretty fast. But I "KNOW" I have a lot of detritus in the WIN Registry that NO cleaner will ever get out. (Believe me, I've looked) It is about time to save all my important stuff and do the reformat dance.......
One other thought would be to bite the boolit[smilie=1: and replace the RAM memory and/or HDD. I have seen cases where the replacement of either/both finally solved the slow problems. And don't believe the freebie HDD and RAM memory test programs you find out there. They WILL NOT show all the issues you might have with either piece of hardware. (Been there, know that)..................Lee:)