Repairing the damage?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I've got an XP computer here that I'm using as a challenge to myself, to see
if I can repair a computer that's been decimated by malware.  I'm looking
for input from the good folks here who have been down this road.  My last
resort is a reformat, but I'm trying to avoid that for now - mainly to learn
what can and can't be done once a computer has been badly infected.

Other than horrible performance and re-boots, the primary symptom of the
malware was intermittent loss of network connectivity.  I did these things:

- AVG Free
- Trend Micro (virus and adware scans)
- Adaware SE
- Spybot S&D
- CW Shredder
- Hijackthis
- XP Winsock Fix

After several passes, the computer started turning up clean.  However, the
intermittent internet connection remains.  During the internet drop, I can
still ping the outside world, using both dns resolution and ip address, so
the path is there.  But neither IE nor FF will get on the internet after it
drops, until I reboot.  Then I can use the internet for a few minutes.

Is this a "scar" or is there some malware still working its magic?

thank you,

jm








Re: Repairing the damage?


Quoted text here. Click to load it


One thing you need to know is that even if you can get it to the point
of scanning clean,   you still can't trust that machine ever again,
and really need to fdisk, repartition, reformat, and reinstall to get
back to a known state.

Quoted text here. Click to load it

There's no way to know unless you have checksums of the system from a
known-clean state.   See above unfortunately.

--
Todd H.
http://www.toddh.net /

Re: Repairing the damage?

Try a trojan hunter?
Sounds like something's grabbing the connection for its own ends.
Quoted text here. Click to load it



Re: Repairing the damage?

JM wrote:
Quoted text here. Click to load it

If you need input, you obviously aren't up to your challenge.



--
Posted via a free Usenet account from http://www.teranews.com


Re: Repairing the damage?


Quoted text here. Click to load it

You are ignorant now, and you will always be ignorant, because you obviously
do not understand that a good problem solver knows how and is willing to use
whatever resources are available to meet the challenge.




Re: Repairing the damage?

JM wrote:
Quoted text here. Click to load it

"a good problem solver" --So, what are _you_ doing asking?



--
Posted via a free Usenet account from http://www.teranews.com


Site Timeline