My computers are rebooting themselves and I can't get to symantec.com ...ugh! - GoFuckYourself.com

Furious_Female · 01-13-2005, 01:19 PM

WTF? is there a new virus or exploit or worm? I can't get to www.symantec.com with IE, only AOL's browser. I have 4 remote computers and 1 of my computers at home that have rebooted themselves twice in the past 12 hours. All of these machines have different IPs and 2 completely different ISPs. I haven't downloaded anything on any of these machines or opened email etc etc, these machines aren't for "surfing", they are work horses, with SP2 and current updates ... WTF? I've been asking around and everyone is acting like I'm crazy. Anyone know what this is?

LiveDose · 01-13-2005, 01:21 PM

If it was only one I would say check the fans. Are they networked? Definitely sounds fishy if this started on all of them...

Paco, of Large Cash. · 01-13-2005, 01:23 PM

Try www.antivirus.com - they offer a FREE online scan. Use FireFox to access the site and if you cannot your system has been compromised.
As well, run the version of Spybot that I know you have running on your system with TeaTime running in the background.

As you state (" My computers ... ") this is happening on multiple machines you know it is not a hardware thing.

Furious_Female · 01-13-2005, 01:23 PM

Quote:

Originally Posted by LiveDose

If it was only one I would say check the fans. Are they networked? Definitely sounds fishy if this started on all of them...

That's what everyone has been saying, overheating but it's not that. There's no way in hell 4 machines miles away are rebooting just like one at my house because they all overheated at the same time. Ugh... this sucks

TheMob · 01-13-2005, 01:24 PM

god that sucks. simple solution...

www.imacmini.com

gangbangjoe · 01-13-2005, 01:24 PM

shutdown -a

Furious_Female · 01-13-2005, 01:27 PM

Quote:

Originally Posted by Paco, of Large Cash.

Try www.antivirus.com - they offer a FREE online scan. Use FireFox to access the site and if you cannot your system has been compromised.
As well, run the version of Spybot that I know you have running on your system with TeaTime running in the background.

As you state (" My computers ... ") this is happening on multiple machines you know it is not a hardware thing.

i can't get to antivirus.com on IE either... WTF! How did I get this

karlm · 01-13-2005, 01:31 PM

Could be overheating You cleaned it lately?

Check your temps

Magg · 01-13-2005, 01:33 PM

http://housecall.trendmicro.com

Basic_man · 01-13-2005, 01:46 PM

You're fuckin' owned by a damn virus !

Paco, of Large Cash. · 01-13-2005, 01:46 PM

Quote:

Originally Posted by Furious_Female

i can't get to antivirus.com on IE either... WTF! How did I get this

I do not wish to make you feel bad about your choice of browser but IE is just bad. So many exploits, even with SP2.

If you can hit other webpages but not Antivirus.com then you have herpes ... I mean some type of infection or intrusion.

Symantec and many of the well-known virus scanners are targeted and the malicious code knows to look out for them (Symantec is not enough, nor is any one program.) .

Use a recent virus removal tool such as the free one AVAST offers.

Once clean, download and install Spybot (not Adaware); update it; reconfigure it so it is using all the tools (like TeaTimer, as you will need it if you insist on running IE) and run a full scan.

Or, you can download the spyware tool MS is now offering here

Paco, of Large Cash. · 01-13-2005, 01:47 PM

Quote:

Originally Posted by Magg

http://housecall.trendmicro.com

the above is antivirus.com

brizzad · 01-13-2005, 01:48 PM

sounds like the sasser worm

do a quick google on it, or on lsass

Furious_Female · 01-13-2005, 01:57 PM

The thing that puzzles me is that I don't know how my machines got infected with this, because like I said, they don't surf, download, share connections, open email etc. This is just bizarre.

Mr Pheer · 01-13-2005, 02:19 PM

Quote:

Originally Posted by Furious_Female

The thing that puzzles me is that I don't know how my machines got infected with this, because like I said, they don't surf, download, share connections, open email etc. This is just bizarre.

People doing a port scan on your isp and finding your machines. trust me I've had the same shit happen.

First thing you need is a firewall, and then do the virus scans. The firewall keeps shit out while you clean up what you already have. Just doing virus scan & clean without a firewall is counter productive because it wont be long till you have the shit again.

Mr Pheer · 01-13-2005, 02:21 PM

Oh, I forgot one last thing....

badgers badgers badgers.......

Furious_Female · 01-13-2005, 02:32 PM

Quote:

Originally Posted by MrPheer

People doing a port scan on your isp and finding your machines. trust me I've had the same shit happen.

First thing you need is a firewall, and then do the virus scans. The firewall keeps shit out while you clean up what you already have. Just doing virus scan & clean without a firewall is counter productive because it wont be long till you have the shit again.

Yeah the remote machines I disabled the firewalls to make it easier for me to get in because I didn't feel like setting all the exceptions for every machine. So basically, my own laziness screwed me lol. Now I have to get this zombie worm off all my machines. yay

01-13-2005, 01:19 PM	#1
Furious_Female Confirmed User Industry Role: Join Date: Oct 2002 Location: Upstate, New York Posts: 8,187	My computers are rebooting themselves and I can't get to symantec.com ...ugh! WTF? is there a new virus or exploit or worm? I can't get to www.symantec.com with IE, only AOL's browser. I have 4 remote computers and 1 of my computers at home that have rebooted themselves twice in the past 12 hours. All of these machines have different IPs and 2 completely different ISPs. I haven't downloaded anything on any of these machines or opened email etc etc, these machines aren't for "surfing", they are work horses, with SP2 and current updates ... WTF? I've been asking around and everyone is acting like I'm crazy. Anyone know what this is? __________________ Skype: j3nn.com ICQ 160370494 My current favorite high-converting sponsor: CrakRevenue

01-13-2005, 01:23 PM	#3
Paco, of Large Cash. Confirmed User Join Date: Jun 2002 Location: --> . <-- Posts: 2,267	Try www.antivirus.com - they offer a FREE online scan. Use FireFox to access the site and if you cannot your system has been compromised. As well, run the version of Spybot that I know you have running on your system with TeaTime running in the background. As you state (" My computers ... ") this is happening on multiple machines you know it is not a hardware thing. Last edited by Paco, of Large Cash.; 01-13-2005 at 01:24 PM..

01-13-2005, 01:24 PM	#6
gangbangjoe Ronin Join Date: May 2004 Location: Live by the code Die by the code Posts: 17,693	shutdown -a __________________ NichePay - $30 on all trials - Killer Ratios .................................................. Female Ejaculation - Hairy - Shemale Puffy Nipples - Huge Clits - And More! ..................................................

01-13-2005, 01:31 PM	#8
karlm Confirmed User Join Date: Jun 2004 Location: UK Posts: 4,194	Could be overheating You cleaned it lately? Check your temps __________________ ICQ 584665926

01-13-2005, 01:46 PM	#10
Basic_man Programming King Pin Industry Role: Join Date: Oct 2003 Location: Montreal Posts: 27,360	You're fuckin' owned by a damn virus ! __________________ UUGallery Builder - automated photo/video gallery plugin for Wordpress! Stop looking! Checkout Naked Hosting, online since 1999 !

01-13-2005, 01:21 PM	#2
LiveDose Show Yer Tits! Industry Role: Join Date: Feb 2002 Location: Somewhere Out there... Posts: 25,792	If it was only one I would say check the fans. Are they networked? Definitely sounds fishy if this started on all of them...

01-13-2005, 01:24 PM	#5
TheMob Confirmed User Join Date: Jan 2003 Location: 2006 Posts: 8,584	god that sucks. simple solution... www.imacmini.com

01-13-2005, 01:33 PM	#9
Magg Confirmed User Join Date: Feb 2004 Location: ICQ: 132497047 Posts: 4,467	http://housecall.trendmicro.com

01-13-2005, 01:48 PM	#13
brizzad holla Join Date: Jul 2003 Location: KFC Posts: 11,769	sounds like the sasser worm do a quick google on it, or on lsass

01-13-2005, 01:57 PM	#14
Furious_Female Confirmed User Industry Role: Join Date: Oct 2002 Location: Upstate, New York Posts: 8,187	The thing that puzzles me is that I don't know how my machines got infected with this, because like I said, they don't surf, download, share connections, open email etc. This is just bizarre. __________________ Skype: j3nn.com ICQ 160370494 My current favorite high-converting sponsor: CrakRevenue

01-13-2005, 02:21 PM	#16
Mr Pheer Retired Industry Role: Join Date: Dec 2002 Posts: 21,254	Oh, I forgot one last thing.... badgers badgers badgers....... __________________ 2 lifeguards for Jessica