Archived from groups: microsoft.public.windowsxp.newusers (
More info?)
Thank you Jim Macklin for you help..
but I cannot open the internet sites you typed. (error message : "The page
cannot be displayed")
But, Norton antiVirus that installed in my computer did have told me that it
has detected threats alert , and it cannot repair it nor delete it.
they are :
1. virus W32.HLLW.Gaobot that infected
C:\windows\system32\scheduler.exe
and
C:\windows\system32\winhlpp32.exe
2. Trojan Horse , that infected
C:\windows\system32\drivers\etc\hosts
Now, they are stored in Backup items.
Do those virus who caused the problem ?
What should i do then ?
"Jim Macklin" wrote:
> Further Google searches turned up a hit that indicates you
> may have a virus
> see
>
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101015
> virus; Virus Profile: W32/Vesser.worm.b
> .....
> Outgoing TCP traffic to one of the following remote servers
> (destination port 6667, IRC):
>
> a.. viccy.2y.net
> b.. viccy.dyns.cx
> c.. viccy.mycoding.com
> d.. viccy.mykgb.com
> e.. viccy.yaboo.dk
> f.. viccy.45z.com
> g.. viccy.my-ho.st
> h.. viccy.hthl.ca
> i.. viccy.iwas2.net
> j.. viccy.sytes.net
> k.. viccy.dynsite.net
> l.. viccy.teasercam.com
> Deletion of certain system files from the victim machine:
>
> a.. C:\boot.ini
> b.. C:\autoexec.bat
> c.. C:\config.sys
> d.. C:\Windows\win.ini
> e.. C:\Windows\system.ini
> f.. C:\Windows\wininit.ini
> g.. C:\Winnt\win.ini
> h.. C:\Winnt\system.ini
> i.. C:\Winnt\wininit.ini
>
> --
> The people think the Constitution protects their rights;
> But government sees it as an obstacle to be overcome.
>
>
> "S.Vita" <S.Vita@discussions.microsoft.com> wrote in message
> news:A64F0648-BC31-46AC-B37A-8B6859004787@microsoft.com...
> | please help me...
> |
> | why after I disconnected from internet connection, at a
> few moment later the
> | network connection auto-dial up will appear with this
> message :
> | "you(or a program) have requested information from
> fkn0wn3d.sytes.net.
> | which connection do you want to use?"
> | I didn't run any program that requested to connect to that
> sites above
> | (fkn0wn3d.sytes.net)
> | Is that a virus ?
> |
> | --
> | thanks b4
>
>
>
Facebook
Twitter
Instagram