Unknown worm in network

[Guest yadavs.sanjay@gmail.com]

I hav got a network functioning at my home,,, which is giving

problem due to an unknown virus... the virus infact forces CPU usage

to 100%..... the PCs are not able to access web site and the response

of the computer also slows down a lot.....

 

 

Plz can any one help me..

 

Thanks in advance

[Guest Malke]

yadavs.sanjay@gmail.com wrote:

<span style="color:blue">

> I hav got a network functioning at my home,,, which is giving

> problem due to an unknown virus... the virus infact forces CPU usage

> to 100%..... the PCs are not able to access web site and the response

> of the computer also slows down a lot.....</span>

 

With so little information, I can only give you general advice. Disconnect

all computers from the Local Area Network (and the Internet of course)

before you start cleaning up. You'll need to get all tools/updates/etc.

from a different, known-clean machine that has never been connected to the

infected computers. Do not connect any of the infected computers back to

the LAN/Internet until you know for sure they are 100% clean.

 

Go through these general malware removal steps systematically -

http://www.elephantboycomputers.com/page2....emoving_Malware

 

Include scanning with David Lipman's Multi_AV and follow instructions to do

all scans in Safe Mode. Please see the special Notes regarding using

Multi_AV in Vista.

 

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://tinyurl.com/yoeru3 - download link and more instructions

 

You can also check to see if there are targeted removal steps for your

malware here:

Bleeping Computer removal how-to's -

http://www.bleepingcomputer.com/forums/forum55.html

Or here: Malwarebytes malware removal guides - http://tinyurl.com/5xrpft

 

When all else fails, get guided help. Choose one of the specialty forums

listed at the first link. Register and read its posting FAQ. PLEASE DO NOT

POST LOGS IN THE MS NEWSGROUPS.

 

Standard disclaimer: I can't see and test your computer myself, so these are

just suggestions based on many years of being a professional computer tech;

suggestions based on what you've written. You should not take my

suggestions as a definitive diagnosis. If you can't do the work yourself

(and there is no shame in admitting this isn't your cup of tea), take the

machine to a professional computer repair shop (not your local equivalent

of BigComputerStore/GeekSquad). Please be aware that not all local shops

are skilled at removing malware and even if they are, your computer may be

so infested that Windows will need to be clean-installed. If possible, have

all your data backed up before you take the machine into a shop.

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

[Guest David H. Lipman]

From: <yadavs.sanjay@gmail.com>

 

| I hav got a network functioning at my home,,, which is giving

| problem due to an unknown virus... the virus infact forces CPU usage

| to 100%..... the PCs are not able to access web site and the response

| of the computer also slows down a lot.....

 

 

| Plz can any one help me..

 

| Thanks in advance

 

High CPU utilization is not neccessarily the result of malware, viral or non-viral.

 

For example, It can be cause by SVCHOST in relationship to Wireless Fidelity.

 

It has also been seen related to the Windows Automatic Update Services, WUAUSERV.

 

You need to examine exactly WHAT process is causing high CPU utilization and research what

this is and why it is happening.

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Guest 1PW]

On 12/04/2008 06:44 AM, yadavs.sanjay@gmail.com sent:<span style="color:blue">

> I hav got a network functioning at my home,,, which is giving

> problem due to an unknown virus... the virus infact forces CPU usage

> to 100%..... the PCs are not able to access web site and the response

> of the computer also slows down a lot.....

>

>

> Plz can any one help me..

>

> Thanks in advance</span>

 

 

Download and execute HijackThis from:

 

http://www.trendsecure.com/portal/en-US/to...ools/hijackthis

 

Please, do _not_ post HJT logs to this newsgroup.

 

Here is where you can get good advice for HijackThis logs:

 

http://www.thespykiller.co.uk/index.php?board=3.0

http://www.spywarewarrior.com/viewforum.php?f=5

http://forums.tomcoyote.org/index.php?showforum=27

http://www.bleepingcomputer.com/forums/forum22.html

http://www.malwarebytes.org/forums/index.php?showforum=7

http://www.5starsupport.com/ipboard/index.php?showforum=18

http://www.theeldergeek.com/forum/index.php?showforum=29

 

Note well: Registration is required in any of the above mentioned

forums. Before posting a HJT log, read the 'stickies'

(instructions/guidelines) for the respective HJT forum.

 

Please post a follow-up with a summary as to what was found and any

further action.

 

While waiting for a HJT log analysis, please download, update and run

the freeware version of MBAM from:

 

<http://www.malwarebytes.org/mbam/program/mbam-setup.exe>

 

Please summarize anything significant that MBAM finds in a follow-up

post.

 

Good luck to you.

 

Pete

 

--

1PW

 

@?6A62?FEH9:DE=6o2@=]4@> [r4o7t]