Virus problem?

blade2

Member
Jun 28, 2002
191
0
0
I really dont know if this is in the right forum but ill tell my tale anyway


Im having problems wih a certain Virus Worm: Lovsan that seems to have infected my System32 folder in Windows (XP).

Using AVG, when i am connected to the internet normally, I recieve a pop-up from AVG stating that it has detected this virus in the system32 folder under the following exe files: msblast, mslaugh and teekids. By the sounds of the name, the virus must create these .exe files. ALso when i run AVG (most recent version), once it "heals" the infected exe file, the exe file disappears.

When I recieve the warning message from AVG, I also get another pop up window telling me that i basically have 1 minute to save any work as Windows is being shutdown by NT Authority and this was due to the Remote Procedure Call which was terminated unexpectedly so sure enough, my computer restarts after the minute countdown.

I have just completed a series of tests after having healed the infected file: which no longer reappears so my thought process is that it may be something initiated by the Net somehow. Im going to download Ad-Aware just incase, but ive got ZoneAlarm on the highest level of security and that seems to be working so far as I havent had the message pop up!

Im not up to date with virus-going ons so is this one of these super viruses around or what? If youi have any advice, please help me! Thanks! Will reinstalling Windows or reformatting help perhaps?
 

OZEE

Senior member
Feb 23, 2001
985
0
0
First, turn off System Restore. You'll keep reinfecting yourself.

Then go to TrendMicro for manual removal instructions. You've got to kill the process, then there's a registry fix that'll need to be done. But if you're not comfortable in the registry, look around at McAfee, Norton, TrendMicro sites for their removal tools...

Then go here for the patch from MicroSoft that'll patch the hole that let the virus in.

Then, get a good firewall.