CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Blaster Virus wins... I need to save data, please help!

 
Post new topic   Reply to topic       All -> FavForums -> Trend Micro HijackThis Logs [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
owenhbrown

Guest
IP: 203.173.*.*






PostPosted: Sun Nov 02, 2003 3:56 pm    Post subject: Blaster Virus wins... I need to save data, please help!
Reply with quote

Hello people...

I let down my firewall for 5 minutes and my system gets infected. I am Owen, I a 23 from Sydney and university demands I don't have these problems! I tried to fix the problem using online advice but it seems this baby is way too thorough. No AV software to run, registry is disabled, System restore is kaput. I can't send my files to another computer on the network as back-up whilst I reformat because networking has been destroyed (some DLL files are not there or not working) and I can't burn CD's because nero wont work (COM/OLE error). I want to be able to reformat my system but I need to save several gigs of data... How can this be done? Any suggestions would be much appreciated because the damage seems irreversible!

Thanks for your time...

obliky@hotmail.com

Owen.

Back to top
TonyKlein

Site Moderator
Microsoft MVP

Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
MIRT Moderators MVP Premium Security Experts

PostPosted: Sun Nov 02, 2003 4:33 pm    Post subject:
Reply with quote

Run one of these removal tools:

KasperskyW32.Blaster/Lovesan Removal Tool

Nod32 Msblast removal tool

H*ll, why not run both of them!

Subsequently patch your system for the RPC buffer overrun vulnerability ASAP!
Go here to download the patch: MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious Programs

And we'd like a closer look at your configuration:

Go to http://tomcoyote.org/hjt/ , and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and please show us its contents.

Most of what it lists will be harmless or even required, so do NOT fix anything yet.
Someone here will be happy to help you analyze the results.


_________________
Tony image CLSID List
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Trend Micro HijackThis Logs All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer