PROBLEM! virus related!!

[LeStEr]

ok, about 3 days ago i was on irc and someone sent me a virus(i had auto recieve on) and i cancelled it in the middle but i forgot to delete the remaing file that i still had in my irc downloaded files folder, so the next day i remembered it was there and deleted it. Then later that night i started noticing that my computer would freeze from anywhere from 10secs-1min every 5 mins or so and then come back, i found this rather annoying so i scanned for viruses and found a few all arround and then i deleted them all appropriatly and then continued on hoping it would be fixed. Then later it keept happening so i decided i would format the next day. I have two computers on a network at home here so i decided i would just work on the second one for the time being. I then started noticing that the freezing was happening on the second system as well and at this point i was getting very mad. So this afternoon i decided i would format both systems and get a fresh start on both of them. So i format them both and im happy i was going to get all my stuff back and start going on normally again . So i format them both and get them all back on track so then i go to get Counter-Strike and the half-life patches so i can fill my need for CS and then i find my self only getting 5-10k and i was like "ok must be the server" so then i scrammbled arround preying this wasnt for everything and everything i try to download i get this speed (on both systems) . It was like this befor i formatted them and it was one of the major problems i hoped to leave behind. I think the virus was like a "CIH" virus or somthing i wish i could remeber the name, anyways i really would like to get this resolved!! my isp is @home and i usually get download speeds anywhere from 50-500 NOT 5kb/s , if anyone knows anything that could help me i would be greatly appreciated, thnx !!!

 

[Pretender]

Hmm, well I'll start from the bottom.

a) What makes you think you have the CIH virus? The problems you're experiencing are uncharacteristic of the virus, and the virus only activates on Apr. 26.

b) Did you install all your drivers (network cards, etc?)

c) I don't know if @home requires special software or settings, but if so, did you put those in?

d) Did you try downloading from other servers, and if so, what were the results?

Other then that, my only questions are why you leave viruses on your system without caring and then expect everything to be fine?

 

[LeStEr]

Both cpus on my network detected CIH with the virus scanners on them, i then proseeded to delete it and after i did that BANG , things started screwing up, i have tryed the drivers for both cards and no difference, i also tryed installing the software for @home no luck there, and i have tryed multiple servers for downloading from and also no difference, but after all this im starting to think it isnt cih and if it isnt then im totally in the dark , i didnt expect everything to be fine!!!!! and now im paying for my mistakes

 

[Pretender]

Did you reinstall windows using an original windows disc? It's possible, if you burned a copy of the windows cd, that maybe it got infected. Are you having any other problems with your computer right now?

Also, do a tracert to a few servers (go to a dos prompt, type "tracert anandtech.com", or some other server) and post, or pm me the results. Your lag might be caused by a temorary problem with your isp.

A more remote possibility is that your disk has errors. Run a scandisk (on thorough mode) on all your hard drives. If it finds errors, then you should probably try reformatting (<--optional, but suggested) and reinstalling windows.

 

[Kanly]

I don't know if this is the same virus you got, but this is the one that has been going around IRC lately.

IRC Virus

Hope that helps.

P.S. It was a b**ch for me to get rid of.

I rebooted before i realized what it was, so it would infect different files on every boot up.

The Link has good removal instructions.

 

[LeStEr]

yes i reinstalled with original windows disk, i have already formatted multiple times and it dosnt seem to help? i did the tracert but i dont really understand the rusults?

 

[LeStEr]

YES!!! DUKE THAT IS THE ONE!!!!!!!!! if that isnt the CIH then i must of had that one as well! thank you, ill check the link and get back to you , but if this is the one i got??? then shouldnt this have been gone long ago since i formatted?

 

[LeStEr]

sh*t , it said i didnt have it??? i started having these speed problems after i deleted the life stages thing, and now i have formatted both systems and yet i still have these problems! i dont know what the hell it could be

 

[Pretender]

Use this to scan your computer

 

[LeStEr]

done, scan came out clean= (

 

[Pretender]

Ok, then it's probably a problem with your computer. I suggest using scandisk like I said above.

 

[Kanly]

LsStEr,

try manually scanning for any of the files also.

When i got it, it jumped drives on me.

Was originally on my D: drive, ended up getting onto my E: and F: drives.

 

[LeStEr]

i did but i only have one drive!!and its not partitioned, i called my isp and they said there was a major packet loss from my modem so i dont get it???? when i formatted i got my internet back with no problems,i didnt set any settings or anything, do you think i may need to get some specific settings for @home?

 

[Kanly]

Modem gone bad?

Or @home having network problems?

 

[Pretender]

run &quot;tracert forums.anandtech.com&quot; from a dos prompt and copy and paste the results.

 

[LeStEr]

tracert for anandtech :



1 30 ms 29 ms 12 ms 10.69.68.1
2 32 ms 16 ms 13 ms d226-8-1.home.cgocable.net [24.226.8.1]
3 19 ms 21 ms 23 ms 10.66.0.9
4 59 ms 37 ms 24 ms cgowave-busy-core.cgocable.net [24.226.1.1]
3 24 ms 19 ms 24 ms 10.66.0.9
4 57 ms 27 ms 61 ms cgowave-busy-core.cgocable.net [24.226.1.1]
5 * 75 ms 24 ms cgowave-0-202.cgocable.net [24.226.0.202]
6 45 ms 40 ms 56 ms 10.0.185.33
7 25 ms 24 ms 27 ms c1-pos8-0.bflony1.home.net [24.7.74.29]
8 34 ms 32 ms 33 ms 24.7.65.253
9 35 ms * 87 ms 24.7.69.25
10 86 ms 38 ms 46 ms home-gw.cb1ma.ip.att.net [192.205.32.69]
11 73 ms 78 ms 88 ms gbr3-p80.cb1ma.ip.att.net [12.122.5.61]
12 42 ms 56 ms 73 ms oc48.av.cb1ma.ip.att.net [12.122.6.45]
13 79 ms * 87 ms oc192.av.n54ny.ip.att.net [12.122.6.37]
14 42 ms 51 ms 37 ms gbr4-p30.n54ny.ip.att.net [12.122.6.42]
15 74 ms 74 ms 49 ms gbr3-p60.n54ny.ip.att.net [12.122.1.121]
16 92 ms 45 ms 76 ms gbr3-p30.wswdc.ip.att.net [12.122.2.166]
17 46 ms 53 ms 48 ms gbr1-p50.wswdc.ip.att.net [12.122.1.158]
18 64 ms 201 ms 100 ms ar8-a3120s1.wswdc.ip.att.net [12.123.8.173]
19 89 ms 75 ms 57 ms 12.124.237.26
20 72 ms 80 ms 53 ms v1.eth.cr-3.pitdc1.pa.stargate.net [209.166.165.
71]
21 62 ms 90 ms 82 ms anandtech.com [216.151.100.101]

Trace complete.

 

[Pretender]

It looks like your isp is lagging. I just did a tracert and my ping times to the last few servers were a bit lower.

14 53 ms 54 ms 45 ms s1-0.hdlc.gr-1.pitdc1.pa.stargate.net [216.151.8
7.182]
15 56 ms 54 ms 58 ms v1.eth.cr-1.pitdc1.pa.stargate.net [209.166.165.
69]
16 57 ms 52 ms 70 ms anandtech.com [216.151.100.101]

 

[LeStEr]

so you dont think my system has a problem at all?

 

[Pretender]

I can't say for sure, but unless you're having other severe problems in windows, then I'd guess that it's a problem with (in order of probability) @home, your modem, or your network card.

 

[LeStEr]

kinda makes me mad, they say they cant check it out for a while , could it possibly be my network settings?

 

[Pretender]

When you first got @home, did you have to install any software or set up any settings? If so, you should do that again.