Oh my god help me....!!!!!!!!!!!!!!!!!!

ToggleHead · TWEAKGURU Joined: 03 Mar 2004 Posts: 4360 Location: Jersey

ok so as you allll have realized.....im a NUT about this place......you've all hooked me......buuuuuuut....alas i fear the worst.....

so i installed a screensaver at work today and with it came msbb.exe.......evil......anyway...it was a pain in the ass but i got it all out and my work's xp machine was fine.......

anyway......i installed the same screen saver at home today...THIS is when i realize the link......this thing tries immediatly to connect to the inter net.......anyway.....i thought i killed it, but no......now my machine is f'd.....

task mngr says 100%...explorer is MAD slow.....(im on my girl's machine)......but proggies run fine....once theyr're open.......kernel time is like 0%....only jumps when its working.......so the process that is stealing all 100% of cpu is svchost.exe.......GREAT!!!!!......A WINDOWS FILE THAT YOU CANT TERMINATE!!!!!!!!

safe mode is STILL slow.......um.....::whimpers::......help

-sadly,
Togglehead

=P
_________________

Google · Sponsor

[TN] Nathan · ALMIGHTY PWNER! Joined: 14 Feb 2002 Posts: 7406

for cripes sake bro, where did you get this screen saver from?

It is a virus!

Scan NOW!!!!!!
_________________
Owner & Administrator
www.Tweaknews.net
www.Pocketbookpinch.com

ToggleHead · TWEAKGURU Joined: 03 Mar 2004 Posts: 4360 Location: Jersey

you think i didnt do that already???!!!!!! we actually may have found it......and rpc virus......but any advice will help.......::pant pant::

thank nate for the quick response
_________________

[TN] Nathan · ALMIGHTY PWNER! Joined: 14 Feb 2002 Posts: 7406

What virus checker are you using?

Is it updated?

Also scan for trojans.
_________________
Owner & Administrator
www.Tweaknews.net
www.Pocketbookpinch.com

Josh · Posted: Fri Apr 09, 2004 6:00 am Post subject:

Whats the name of the screensaver togglehead and where did you get it from, i just think it would be a good idea to warn people about it, sorry man!
_________________
»4 RS«»1Ж «»1 DENE«»1 FREAKIN LAME OH«»1 MONEY MONEY«
(-)

ToggleHead · TWEAKGURU Joined: 03 Mar 2004 Posts: 4360 Location: Jersey

Guh....scrren saver is this ENTER the matrix interactive thingy......its cool....i actually LOVE the screen saver....but not its luggage.......i got it from some site calle 1600 free screensavers when i searched on google.......BAAAAAD news.....

nate.....i used trendmicro, norton 2003, 2004, and two of my elite friends are helping me..............it appears to be and rpc virus.....clogging and looping the workstation rpc......guh.....any advice besides full rebuild time?
_________________

ToggleHead · TWEAKGURU Joined: 03 Mar 2004 Posts: 4360 Location: Jersey

i can shut it down.....but weird things still happen......its a boot worm i think.......

it shows up in program files as etexchange, in the hive in all sorts of places that ive found already HKLM / HKCU--->software--->microsoft and in root........::sighs:::its a mess.......i guess im alone on this one.......i'll let you guys know progress......
_________________

[TN] Nathan · ALMIGHTY PWNER! Joined: 14 Feb 2002 Posts: 7406

Format your harddrive completely.
_________________
Owner & Administrator
www.Tweaknews.net
www.Pocketbookpinch.com