PDA

View Full Version : I think I have a stealth virus. Nerds help PLEASE!



Bama67
05-16-2011, 09:19 AM
So I work on an oil rig, and I hook my personal computer into our network here and surf the net when I can etc. as it is fully open with no websense. I am currently on a company computer on a different network that blocks most everything so I use my own.

My problem is that our internet has been screwing up lately and a tech service guy finally came out and tracked it down to a MAC address that was causing it. Well, it was my personal computer and they have since blocked me til I can get it resolved.

He said the problem is that my computer seems to be sucking up all the available IP addresses, and doesn't allow other computers to get on. How is this even possible? I ran a full AVG scan, as well as a full Malwarebytes scan and found nothing. My computer works great.

So WTF is going on and what can I do? Please help if you can brahs.

Budjola
05-16-2011, 09:31 AM
thats kinda sketchy, its not like u are the provider of ISP's. maybe its something wrong with router settings (if its wi-fi) that company is using. if u have virus AVG or malware should detect it, try to scan with WME maybe it will pick something up but i doubt it. if everything was ok until u came with your pc than it must've been something in your network settings that is causing problem. what windows are u using. every router has options to setup IP address for each pc that is using it (it should do it automaticly but still) or try port forwarding for each address IP address that is connected to router.
99% its not your fault.

Bama67
05-16-2011, 10:57 AM
thats kinda sketchy, its not like u are the provider of ISP's. maybe its something wrong with router settings (if its wi-fi) that company is using. if u have virus AVG or malware should detect it, try to scan with WME maybe it will pick something up but i doubt it. if everything was ok until u came with your pc than it must've been something in your network settings that is causing problem. what windows are u using. every router has options to setup IP address for each pc that is using it (it should do it automaticly but still) or try port forwarding for each address IP address that is connected to router.
99% its not your fault.

Yeah, I have been using my computer on this network for two years, then all of a sudden yesterday I have a "virus".

What is WME? I am also unsure what to do with this information, I am not as up on computers as I should be, so could you dumb it down for me? Repped for the help though.

Oh, another thing is that I am not on wireless, I am plugged in directly to the switch/hub whatever.

GrokTheCube
05-16-2011, 11:26 AM
What OS are you using? There are plenty of things AVG and malwarebytes won't pick up. The easiest thing to do is reformat/reinstall. If you want to take the time to go over your system with a fine toothed comb, I can tell you what to do.

Bama67
05-16-2011, 11:37 AM
What OS are you using? There are plenty of things AVG and malwarebytes won't pick up. The easiest thing to do is reformat/reinstall. If you want to take the time to go over your system with a fine toothed comb, I can tell you what to do.

Fuuuu! I got so much sh*t on my computer, I realllllly don't want to do a full reformat.

Is there any program that I can download and run that might possibly catch this?

Or do you think the little Korean tech guy is trolling me?

Oh, and I have Vista (i know)

GrokTheCube
05-16-2011, 04:34 PM
Fuuuu! I got so much sh*t on my computer, I realllllly don't want to do a full reformat.

Is there any program that I can download and run that might possibly catch this?

Or do you think the little Korean tech guy is trolling me?

Oh, and I have Vista (i know)

Ok, first things first, DL unhackme: http://www.greatis.com/unhackme/

There's a decent chance it will piss off AVG, so be prepared to tell AVG to bugger off. After you tell it to run a scan, it will likely tell you that there are no viruses found. That's to be expected. Ask it to re-run the scan on startup. Restart your computer.

It will then attempt to load itself on startup before ANYTHING else. It's going to give warnings on almost everything requesting root kernel access. I can guarantee there will be false positives. If it picks up something you don't recognize, especially if it's in the folders "system" or "windows", tell it to kill it.

After you've done that, run full scans with malwarebytes and AVG. If you feel ambitious, you can also DL Microsoft Security Essentials. IMHO it's a better free anti-virus than AVG-free, but that's just me: http://www.microsoft.com/en-us/security_essentials/default.aspx

If you still haven't come up with anything, DL the Dr Web LiveCD, and burn it to a disc: http://www.freedrweb.com/livecd/?lng=en

After you've done that, restart the computer and boot from the disc. It's a linux bootable with an integrated virus scanner. Have it scan your computer. It will likely take several hours to do this, but if there are any rootkits that you didn't find, this will probably get them.

All things told, it would probably be easier to copy anything you want to keep onto a usb drive, and re-image. That's the only way to be 100% sure that your system is clean, and it'll probably take less time an effort than doing what I just outlined.