GoodMorphing

Advice re: possible worm???

▼

Advice re: possible worm???

September 17, 2003 3:23 PM from

Suddenly IE won't work at all. I have tried sys restore. Cannot access online virus scan. Norton not finding anything at all. I was thinking about re-installing from disc, but if it is a worm or virus it might wipe out the disc. What should I do?

word works, defrag works, sys restore works, netscape works, trillian works.

If this comes through underlined it is not intentional...

28,487 views 187 replies

Reply #26 September 17, 2003 4:10 PM from

WinCustomize Forums Top

I switched off the firewall, deleted all the cookies and offline content and files and nothing helped.

I have been using an old copy of atguard. Zone alarm didn't work on my computer.

Reply #27 September 17, 2003 4:13 PM from

WinCustomize Forums Top

Sounds like the 'Privacy settings' got wacked. GM- if you have a pop-up stopper running, disable it (if you have Web Blinds installed don't forget that one). If you have privacy setting set in firewall (cookies) disable that...

Right click anywhere on your desktop, pick an off the wall favorite site and see if it comes up

[Message Edited]

Reply #28 September 17, 2003 4:16 PM from

WinCustomize Forums Top

I was using myIE2 which has popup blocker, and atguard also has. Should I uninstall both are try again?

About two weeks ago, all the documents in my document folder vanished (except the system ones) .... could this be related?

Reply #29 September 17, 2003 4:18 PM from

WinCustomize Forums Top

ahhhhh......files shouldn't just 'disappear'. Don't uninstall, just disable them if you can.

Any funny noises coming from hard drive lately?

[Message Edited]
[Message Edited]

Reply #30 September 17, 2003 4:21 PM from

WinCustomize Forums Top

yrag, it opens the browser, but it doesn't even get past 0% on the status bar.

Reply #31 September 17, 2003 4:23 PM from

WinCustomize Forums Top

no funny noises, things are running smoothly.

or were

Reply #32 September 17, 2003 4:31 PM from

WinCustomize Forums Top

Ok...we know the cable works (Netscape) and we know that it can't be files missing because you did a restore (hopefully created before this happened). I don't think the disappearing files mean anything in regards to this. At the risk of repeating myself...you need to look very carefully at task manager processes....something is running and it shouldn't be. A worm or what have you will show running...so if you can't identify the process do a search in your files and figure out what it is....

As a guide, if you find it is an MS System file,,let it run...if it's something else and you don't recognize the proggie, kill it

[Message Edited]

Reply #33 September 17, 2003 4:31 PM from

WinCustomize Forums Top

uninstalled myie2, disabled firewall with no results.

Reply #34 September 17, 2003 4:33 PM from

WinCustomize Forums Top

I could take a screenshot of the task manager if that would help.

Reply #35 September 17, 2003 4:35 PM from

WinCustomize Forums Top

34 by goodmorphing - 9/17/2003 4:33:06 PM I could take a screenshot of the task manager if that would help.

Do that.....

Reply #36 September 17, 2003 4:36 PM from

WinCustomize Forums Top

I'll unload everything that I can think of that is running, and then see what is there.

Reply #37 September 17, 2003 4:50 PM from

WinCustomize Forums Top

I cant upload the shot. I get this message.

Microsoft VBScript runtime error '800a004c'

Path not found

/include/incCommonUtils.asp, line 44

Reply #38 September 17, 2003 4:52 PM from

WinCustomize Forums Top

Stupid question.....you saved as .JPG ?

Reply #39 September 17, 2003 4:55 PM from

WinCustomize Forums Top

there.... finally uploaded.

Reply #40 September 17, 2003 4:56 PM from

WinCustomize Forums Top

I guess that image thing doesn't work in netscape, but it is in my profile.
[Message Edited]

Reply #41 September 17, 2003 4:58 PM from

WinCustomize Forums Top

What is GWMDMMSG and SK991ODM ?

Reply #42 September 17, 2003 5:04 PM from

WinCustomize Forums Top

I don't know. I would guess that GW refers to something about the computer.... this is a gateway computer?

I don't know how to read those, is there a way to find out?

Reply #43 September 17, 2003 5:05 PM from

WinCustomize Forums Top

ODM... i would have thought that was object desktop manager if i were guessing.

Reply #44 September 17, 2003 5:06 PM from

WinCustomize Forums Top

If you are worried about a worm it helps to try this...

http://download.com.com/3000-2092-10221649.html?tag=lst-0-1

Reply #45 September 17, 2003 5:06 PM from

WinCustomize Forums Top

Type the process name in search and see what it shows.......

Reply #46 September 17, 2003 5:06 PM from

WinCustomize Forums Top

The first is a Gateway modem and the second is a Gateway keyboard proggie.

Reply #47 September 17, 2003 5:07 PM from

WinCustomize Forums Top

Yes. Do a search for those in Explore in your hard disk. Use GWMDMMSG.* and SK991ODM. When you find them right click them and select properties. Select the Version tab and see who made it.

Reply #48 September 17, 2003 5:07 PM from

WinCustomize Forums Top

And this one:

http://download.com.com/3000-2092-10219754.html?tag=lst-0-4

Reply #49 September 17, 2003 5:07 PM from

WinCustomize Forums Top

Ah. Sorry. You have been answered.

Reply #50 September 17, 2003 5:08 PM from

WinCustomize Forums Top

I can't hardly keep up with all the typing, so I just sit back and view it.

Welcome Guest! Please take the time to register with us.

Richer content, access to many features that are disabled for guests like commenting and posting on the forums.
Access to a great community, with a massive database of many, many areas of interest.
Access to contests & subscription offers like exclusive emails.
It's simple, and FREE!