cmcek
asked on
The same thing is suddenly happening to 2 computers at my office. These 2 computers had received unexpected email from craiglist on approximately the same day the computers started acting up.
Computer freezes when going to my ducuments or connecting to IE
The same thing is suddenly happening to 2 computers at my office. These 2 computers had received unexpected email from craiglist on approximately the same day the computers started acting up. I don't know if there is a connection but it's the only coincidence I could think of.
The same thing is suddenly happening to 2 computers at my office. These 2 computers had received unexpected email from craiglist on approximately the same day the computers started acting up. I don't know if there is a connection but it's the only coincidence I could think of.
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Run ad-aware first and see if that finds anything.. Also make sure that the virus defenitions on these machines are up to date.. That should take care of your issue...
ASKER
Unfortunately, after I ran spybot, I lost all TCPIP connectivity and I can't figure out how to get it back. So now I'm in worse shape than before because now I can't even connect to my LAN.
Ed
Ed
Hi cmcek,
If you are still having internet connection issues try Winsockfix.
WinsockFix to restore internet connectivity.
http://www.spychecker.com/program/winsockxpfix.html
The Winsockfix Utility will:
· Detect your current Operating System
· Release the IP address, taking you "Offline"
· Reset the TCP stack using Netsh.exe (Windows XP only)
· Delete the current Registry TCP and Winsock Values
· Import new "Working" Registry Values
· Backup any Current "Hosts" file
· Replace the "Hosts" file with a default one
· Reboot the Computer
Instructions:
http://www.home-network-help.com/winsockfix.html
Then download, run, and upload a HijackThis log for review. If you still can't get a network connection download HJT on another PC and put on a flash drive.
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
Click on "Do a system scan and save a log file" button. Post the text from the log file. Do not have HJT fix anything at this point.
Please do not post the log into the comment window. Use "Attach File" under the comment window to post the log.
If you are still having internet connection issues try Winsockfix.
WinsockFix to restore internet connectivity.
http://www.spychecker.com/program/winsockxpfix.html
The Winsockfix Utility will:
· Detect your current Operating System
· Release the IP address, taking you "Offline"
· Reset the TCP stack using Netsh.exe (Windows XP only)
· Delete the current Registry TCP and Winsock Values
· Import new "Working" Registry Values
· Backup any Current "Hosts" file
· Replace the "Hosts" file with a default one
· Reboot the Computer
Instructions:
http://www.home-network-help.com/winsockfix.html
Then download, run, and upload a HijackThis log for review. If you still can't get a network connection download HJT on another PC and put on a flash drive.
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
Click on "Do a system scan and save a log file" button. Post the text from the log file. Do not have HJT fix anything at this point.
Please do not post the log into the comment window. Use "Attach File" under the comment window to post the log.
That Spybot removed/quarantined some winsock file (or other:-) rather clearly (although perhaps not conclusively... Only you know what it said about the files and reg settings it removed) that your computer suffered an infection.
Even if the tool removed the trojan or whatnot, there is *no* way of being certain of the state of the machine... There might still be numerous infections lurking about (rootkit or just not detected by that particular tool).
I would recommend a reinstall of the computer.... from scratch (format etc etc).
I will note that there are other OS:es that might be more resilient (like ... Linux... Easy one is either latest Ubuntu or Mandriva), and leave the rest to your imagination:-):-)
Cheers
-- Glenn
Even if the tool removed the trojan or whatnot, there is *no* way of being certain of the state of the machine... There might still be numerous infections lurking about (rootkit or just not detected by that particular tool).
I would recommend a reinstall of the computer.... from scratch (format etc etc).
I will note that there are other OS:es that might be more resilient (like ... Linux... Easy one is either latest Ubuntu or Mandriva), and leave the rest to your imagination:-):-)
Cheers
-- Glenn
ASKER