problem with my PC - could this be a virus?

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • MarcS
    Confirmed User
    • Aug 2002
    • 139
    #1

    problem with my PC - could this be a virus?

    Last night my computers CPU usage started to fluctuate between 20% and 80%. It goes up to 80% exatly every second.
    When it goes up my mouse gets stuck.
    I just found out that this all shit stops when I unplug my network cable from my PC. When I plug it back in it start again.
    The lights on my network adapter also show real high activity.

    Did anyone ever experience a similar problem?
    Does anyone have an idea how to fix that?
    Tags: None
    • keyDet79
      Confirmed User
      • Feb 2003
      • 1109
      #2
      Sounds like ddos attack, did you insult a script kiddie on IRC? Hit Ctrl+alt+del in Windows and check which process causes it. Also check networking (same place).

      Multihomed quality BW for less
      ICQ 51034232 - MSN [email protected] - Email keydet(at)vibehosting.com

        Comment

        • MarcS
          Confirmed User
          • Aug 2002
          • 139
          #3
          didn't insult anyone
          I went to see the F1 race yesterday and when I came back my machine did that.
          Maybe it doesn'T like Schumacher?

          I checked the processes tab in the task manager but it doesn'T show the process that takes that much CPU usage. Maybe it'S because it only happens for such a small period of time (half a second max) and then it starts again 1 second later.

          When I click on the networking tag the task manager crashes.

          This all happens even if I'm not connected to the internet. I unplugged my router and it still happens.
          As soon as I connect my networking calbe to the hub this shit starts

            Comment

            • RedBumper
              Confirmed User
              • Sep 2003
              • 1137
              #4
              Originally posted by MarcS
              didn't insult anyone
              I went to see the F1 race yesterday and when I came back my machine did that.
              Maybe it doesn'T like Schumacher?

              I checked the processes tab in the task manager but it doesn'T show the process that takes that much CPU usage. Maybe it'S because it only happens for such a small period of time (half a second max) and then it starts again 1 second later.

              When I click on the networking tag the task manager crashes.

              This all happens even if I'm not connected to the internet. I unplugged my router and it still happens.
              As soon as I connect my networking calbe to the hub this shit starts
              Sounds to me that your computer gets a bunch of unused information thruw your LAN (like an attack). Can you change your ip?


              Quality hosting at Phatservers

              Have something to sell? Do it on ADULTNETSALES for free!
              Want to make an extra us$ 100 a month for free? Click here!

                Comment

                • MarcS
                  Confirmed User
                  • Aug 2002
                  • 139
                  #5
                  my IP is dynamic so I get a new one each time I turn my computer on.
                  But as I said .. this also happens when I'm not conncted to the internet.
                  I have the DSL router plugged into my hub and the computer plugged into my hub.
                  When I unplug the DSL router it still happens.
                  But as soon as I unplug the networking cable from my hub it stops happening

                    Comment

                    • RedBumper
                      Confirmed User
                      • Sep 2003
                      • 1137
                      #6
                      Originally posted by MarcS
                      my IP is dynamic so I get a new one each time I turn my computer on.
                      But as I said .. this also happens when I'm not conncted to the internet.
                      I have the DSL router plugged into my hub and the computer plugged into my hub.
                      When I unplug the DSL router it still happens.
                      But as soon as I unplug the networking cable from my hub it stops happening
                      hhhmmmmm try to narrow it down... plug your dsl router directly to your card without the hub (although i don't see how a hub could do this but you never know). Doesn't seem like a virus to me but you might wanna do some heavy virus scanning also. Last it also could be your dsl router wich keeps sending huge datablocks to your LAN.
                      Don't know what else it could be, never seen anything like it.


                      Quality hosting at Phatservers

                      Have something to sell? Do it on ADULTNETSALES for free!
                      Want to make an extra us$ 100 a month for free? Click here!

                        Comment

                        • MarcS
                          Confirmed User
                          • Aug 2002
                          • 139
                          #7
                          well I tried connecting the DSL router directly to my PC but the same thing happened.
                          I connected antoher computer to the DSL router and everything was fine.

                          After restarting I was also able to access the networking tab and it showed no unusual activity

                            Comment

                            • RedBumper
                              Confirmed User
                              • Sep 2003
                              • 1137
                              #8
                              Originally posted by MarcS
                              well I tried connecting the DSL router directly to my PC but the same thing happened.
                              I connected antoher computer to the DSL router and everything was fine.

                              After restarting I was also able to access the networking tab and it showed no unusual activity
                              Only three options remain then:
                              - Network card problem (hardware acceleration?)
                              - Virus
                              - LAN soft problem


                              Quality hosting at Phatservers

                              Have something to sell? Do it on ADULTNETSALES for free!
                              Want to make an extra us$ 100 a month for free? Click here!

                                Comment

                                • raceman
                                  Confirmed User
                                  • Jul 2003
                                  • 1064
                                  #9
                                  I had a similar problem, and it was a hacker leaving stuff on my PC so he/she could use it for ddos attacks on IRC, I finally found the files in my route and the system32 folder, just check some of the date stamps on the files you might be supprised at what you find...... only a suggestion.


                                  RACEMAN
                                  "ILLEGITIMIS NON CARBORUNDUM" <-- "DON'T LET THE BASTARDS GRIND YOU DOWN"

                                  General Joe Stiwell

                                  ICQ: 213-684-158

                                    Comment

                                    • MarcS
                                      Confirmed User
                                      • Aug 2002
                                      • 139
                                      #10
                                      thanks for the tip raceman
                                      unfortunatly I didn't find any file that might have caused this

                                      this is really starting to piss me off

                                        Comment

                                        • keyDet79
                                          Confirmed User
                                          • Feb 2003
                                          • 1109
                                          #11
                                          Originally posted by MarcS
                                          thanks for the tip raceman
                                          unfortunatly I didn't find any file that might have caused this

                                          this is really starting to piss me off
                                          Open the command prompt and type netstat. If you see there is an active connection with an irc server (usually port 6666, 6667 or 7000) you have an IRC trojan.

                                          Multihomed quality BW for less
                                          ICQ 51034232 - MSN [email protected] - Email keydet(at)vibehosting.com

                                            Comment

                                            • MarcS
                                              Confirmed User
                                              • Aug 2002
                                              • 139
                                              #12
                                              I have 2 open connections
                                              localhost:3306
                                              localhost:3008
                                              shouldn't be anything wrong with that

                                              one thig I have just noticed ...
                                              I wanted to make sure that this is not the msblaster virus again and checked the Remote Procedure Call service.
                                              it says it is started but I can't stop it nor restart it. Those options are gray.
                                              But I did a virus scan earlier today and it didn'T find anything

                                                Comment

                                                Previous template Next
                                                Working...