frogboy5
asked on
IE Attacks?
Hello,
I have recently installed a small home network with one WIn2K server and two Win98 PC's.
If I leave Internet Explorer running overnight on the Win2K server, I return to find it covered in unsolicited web-pages. Additionally, it opens up loads of DOS boxes full of messages such as:
c:\winnt\web\printers\imag
This shared resource does not exist.
More help is available by typing NET HELPMSG 2310.
c:\winnt\web\printers\imag
The Computer Browser service is not started.
More help is available by typing NET HELPMSG 3521.
etc...
I don't have a Firewall installed (I probably should - any suggestions as to which?). However, neither do the Win98 PC's, but they don't suffer from these problems.
Any ideas to resolve this would be appreciated.
Cheers
I have recently installed a small home network with one WIn2K server and two Win98 PC's.
If I leave Internet Explorer running overnight on the Win2K server, I return to find it covered in unsolicited web-pages. Additionally, it opens up loads of DOS boxes full of messages such as:
c:\winnt\web\printers\imag
This shared resource does not exist.
More help is available by typing NET HELPMSG 2310.
c:\winnt\web\printers\imag
The Computer Browser service is not started.
More help is available by typing NET HELPMSG 3521.
etc...
I don't have a Firewall installed (I probably should - any suggestions as to which?). However, neither do the Win98 PC's, but they don't suffer from these problems.
Any ideas to resolve this would be appreciated.
Cheers
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
i had that virus once, its a mean one at that, i got it from kazaa i think, it inbeeds itself into the c:\windows\explorer.exe right? it automiatcally attaches itself to any files you send, ex. through msn messenger, icq, etc. the only thing i can suggest to get rid of it is delete it and reinstall windows nt without formatting, it will keep all your setting etc.
i am not sure if windows nt has it like windows me which allows you to reinstall windows with the disk. its like in c:\windows\setup\cab\setup
i am not sure if windows nt has it like windows me which allows you to reinstall windows with the disk. its like in c:\windows\setup\cab\setup
You've certanly have got an virus infected your computer.
Here's a free service to find out what it is, and how to clean it:
1. Start your browser
2. Input the following in address line, and press ENTER
http://housecall.antivirus.com/housecall/start_corp.asp
3. Choose Country and press GO
4. Answer Yes to security warning about Trend Micro inc.
5. Wait
6. Mark all drive letters in My Computer, ie. drive C:
7. Mark Auto Clean
8. Press SCAN
9. Wait
Remember to buy an anti-virus-program with automatically updates from internet.
Some vira can't be cleaned automatically. If so, search for the virus found by housecall:
http://www.trendmicro.com/vinfo/virusencyclo/
Look for clean-up.exe download
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open
Here's a free service to find out what it is, and how to clean it:
1. Start your browser
2. Input the following in address line, and press ENTER
http://housecall.antivirus.com/housecall/start_corp.asp
3. Choose Country and press GO
4. Answer Yes to security warning about Trend Micro inc.
5. Wait
6. Mark all drive letters in My Computer, ie. drive C:
7. Mark Auto Clean
8. Press SCAN
9. Wait
Remember to buy an anti-virus-program with automatically updates from internet.
Some vira can't be cleaned automatically. If so, search for the virus found by housecall:
http://www.trendmicro.com/vinfo/virusencyclo/
Look for clean-up.exe download
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hello everyone,
I actually seem to have got rid of this virus by doing the following:-
1) Scanning and cleaning everything using Norton Antivirus.
2) In Tasks, stopping the Explorer process, then deleting
Explorer.exe.
Since doing the above, I haven't been hit and Norton doesn't detect any viruses.
Thought I'd try this before re-loading Windows or attempting the other suggestions.
Thanks anyway - will let you know if it returns.
Cheers
I actually seem to have got rid of this virus by doing the following:-
1) Scanning and cleaning everything using Norton Antivirus.
2) In Tasks, stopping the Explorer process, then deleting
Explorer.exe.
Since doing the above, I haven't been hit and Norton doesn't detect any viruses.
Thought I'd try this before re-loading Windows or attempting the other suggestions.
Thanks anyway - will let you know if it returns.
Cheers
frogboy5:
This old question needs to be finalized -- accept an answer, split points, or get a refund. For information on your options, please click here-> http:/help/closing.jsp#1
EXPERTS:
Post your closing recommendations! No comment means you don't care.
This old question needs to be finalized -- accept an answer, split points, or get a refund. For information on your options, please click here-> http:/help/closing.jsp#1
EXPERTS:
Post your closing recommendations! No comment means you don't care.
I hope that we were able to assist...
kevin
kevin
ASKER
just an update on this - I seem to have been hit with a virus that creates a file called explorer.exe. I've installed and run Norton, which detects this file as a virus, but won't quarrantine or delete it (not very useful!). I can't delete it manually, as I get access denied - even though no tasks seem to be running.
I can't believe I need to go through the pain of reformatting and reinstalling - again.
Anyone seen this before?