My Computer's Gone Berserk!

Bird · Oct 23, 2003

Re: My Computer\'s Gone Berserk!

Thanks, Bill, I printed that post out and will have a look. Everything seems to be running normally right now, with the pop-up blocker beeping frequently.

BIGUN · Nov 5, 2003

Re: My Computer\'s Gone Berserk!

( AdAware is good software, however in my opinion SpyBot Search and Destroy is better. Also free. Suggest you download SpyBot and run it behind AdAware to see what else it finds, betcha get some. )
Bird,
I agree with Dieselsmoke. I didn't read through all the post here so you may have already installed Spybot S&D. If not, get it, update often and run it at least once a week. You will probably be surprised at what all it finds. /forums/images/graemlins/smile.gif

Bird · Nov 5, 2003

Re: My Computer\'s Gone Berserk!

I've been out of town for a week; just got back yesterday, so hope I'm making some progress, although I doubt that I'll ever understand this machine. Naturally, I had run my Norton Anti-Virus regularly (and never had any indication of having a virus on this computer), but was just using Windows' firewall. So just before going out of town, I installed the Norton firewall, then yesterday I updated Norton SystemWorks since it hadn't been done for a week, then I ran a virus scan; 12 infected files /forums/images/graemlins/shocked.gif It quarantined some, deleted some, but has one it can't do anything with; "access denied"; a Trojan Horse at E:\WINDOWS\System32\XheTsn03.exe (my hard drive is "E" instead of "C"). So I've printed out some instructions from Symantec and hope to have time tomorrow to work on it. Oddly enough, I couldn't do hardly anything yesterday on the Internet because of an extra window popping up continuously, and now this morning everything seems to be working normally right now.

I am running Ad-aware (which one of the software engineers where my daughter works says is worthless junk) and Popup Stopper Basic, but have not tried the SpyBot; guess I need to get rid of this Trojan Horse first. If all else fails, I'll let my daughter take the computer to work and they've got some folks who will clean it out, but I'd be without the computer a few days, and I'm too hardheaded to want to give up on doing it myself. /forums/images/graemlins/frown.gif

I appreciate everyone's help and suggestions.

Bird · Nov 6, 2003

Re: My Computer\'s Gone Berserk!

Well, yesterday Symantec had more updates to my Norton SystemWorks and this time it says it cleaned out my Trojan Horse, so my computer finally seems to be operating pretty normally. It may be too soon to know for sure that all the problems are gone, but I'm happy with it for now. /forums/images/graemlins/cool.gif

RonL · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Bird

Seems like Symantec may be filtering out anything from NRA. If you are a defender of Second Amendment rights you may want to consider another virus protection software.

RonL

Bird · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Maybe I'm a little slow this morning, Ron, but I don't understand what you're saying there. Norton's firewall is still frequently blocking what it says is "Backdoor/SubSeven Trojan horse" attempts from several different IP addresses. So I don't really know what's going on, but at least I'm able to use my computer normally.

GaryM · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Some FILTERING software, not anti virus, apparently filters access to the NRA website.

Bird · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

OK, Gary, I don't have any filtering kind of software running as far as I know. /forums/images/graemlins/wink.gif /forums/images/graemlins/laugh.gif

dieselsmoke1 · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Your IP address has been placed on a list of "known working" addresses and is being pounded along with countless others probably many times a day. Most of these attacks originate in other countries. It's common for them to use spoofed IP addresses tp mask their location and identity. If they were to be successful at installing subseven on your PC, it would allow them to run remote programs or commands at will.

It would be interesting to look at your firewall log to see where the attack originates.

As long as Norton is blocking the perps, all is well. Nothing more than an aggravation.

Bird · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

( It would be interesting to look at your firewall log to see where the attack originates )

Of course I don't know how to find out where they originate, but I've gotten it from several IPs; the most frequent being 68.34.63.204 (how do you find out who that is?).

It's also come from 4.10.74.41 and 165.247.61.21 and 24.169.152.173.

And what does the other number after those indicate; i.e., 68.34.63.204 :58763 or :51506 ?

BILL_K · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

TRACERT THEIP ADDRESS FROM A DOS WINDOW

pcp02249612pcs.towson01.md.comcast.net [68.34.63.04]

SOMEONE ON COMCAST CABLE IN Belaire, MARYLAND

I suggest a firewall device as well as running firewall software if you are
using anything except a dial-up connection to the internet.

Go to http://www.ip-to-location.com/ go to [Click Here For More Demo]

BILLK

dieselsmoke1 · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Bird,

I agree with Bill K.

Looks like the perps you listed are in the US.

Belaire MD
Boston Mass
Woodstock NY

This Link will work better.

If you would like to see the route, open a dos or command prompt window and type example

 tracert 68.34.63.204 

and hit enter.

dieselsmoke1 · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Oops, see you fixed it Billk. Sorry about that.

Bird · Nov 7, 2003

Re: My Computer\'s Gone Berserk!

Thanks to you and BillK both for the information; very interesting.

BILL_K · Nov 8, 2003

Re: My Computer\'s Gone Berserk!

And what does the other number after those indicate; i.e., 68.34.63.204 :58763 or :51506 ?

The other number is the port number that they are using or trying to enter I donot remember
which. If the ip number is the address then think of the port
as the door they are using

BillK

Bird · Nov 8, 2003

Re: My Computer\'s Gone Berserk!

Thanks, Bill.

ges · Nov 24, 2003

Re: My Computer\'s Gone Berserk!

Well I'm learning everyday reading this thread but I think I missed something...

I get this message when ever I try to go to any TBN'ers URL, or any on the web for that matter: "Iexplore has caused an error in SHELL32.DLL". Of course that's it can't go any further.

I did a refresh with the recovery disk that came with the computer and still get the same message. HELP???

Oh........I'm running Windows ME and Internet Explorer.

All I want is my URL back when on TBN. Can someone guide me on this, and keep it simple to understand?? Thanks George

DocHeb · Nov 24, 2003

Re: My Computer\'s Gone Berserk!

I am running W98SE, so it may not apply to your operating system. Whenever I have problems with Internet Explorer, I go to Start/Programs/Accessories/System Information/Tools/Internet Explorer Repair Tool. I run this program, reboot the system, and it works fine. Its worth a try.

dieselsmoke1 · Nov 24, 2003

Re: My Computer\'s Gone Berserk!

ges,

If Chris' advise was not successful, HERE is a site link that will explain how to restore ME to a previous known working point.

Not much experience with ME, but glad to help if I can.

Junkman · Nov 25, 2003

Re: My Computer\'s Gone Berserk!

I used to get the same message from ME when I was using it..... after talking to a friend who works for Microsoft, I upgraded to Windows XP Professional and haven't had a problem ever since. The ME operation system if one of the worse products to come out of Microsoft in my opinion... It will be worth the expense to upgrade to XP now matter what version you get.... Home or Professional..... The time that I spent trying to get ME to work properly was only good for learning about operating systems.... nothing was able to resolve the problems with ME...