C:\\WINDOWS\system32\services.exe WTF

[collige]

Do you play PC games? If so, which are installed on your computer?

[nitz]

do you have any un saved work?

Aint backed nothing up in about two months

everything gone best save everything you can !

[DZA]

Do you play PC games? If so, which are installed on your computer?

command and conquer tiberian sun
command and conquer red alert 2

[collige]

Do you play PC games? If so, which are installed on your computer?

command and conquer tiberian sun
command and conquer red alert 2

Nevermind then. The rootkit business could have been because of the DRM some new games use.

[nitz]

Do you play PC games? If so, which are installed on your computer?

command and conquer tiberian sun
command and conquer red alert 2

I use to play that !!! :D:D:D

on a serious note, you got 60 sec to back everything up!!! goo nowwWWWWWWwWWWWwwwWWW

before you lose everything!

[DZA]

BUMPPPPPPPPPPPPPPPPPPP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[Bazzle09]

yeah, go into safe mode, if you can, backup what you need to another hdd or dvds, then reboot windows..you might even be able to do a repair with the disk, but this doesn't always give results...

You gotta watch what your AV is quarantine(-ing?) and wants to delete.


Thats karma mate, you shouted out about your clean pc and how good avast is, and then....oh, you get a fuckin stinker of a virus.

I lol'd. but still feel ya pain.

[DZA]

[webstarr]

delete system 32. That should solve your problem

[DZA]

Think ive sorted it

[gnome]

delete system 32. That should solve your problem

[hurlingdervish]

I HAD THAT VIRUS

fuck those are bad memories


quick fix:

Set your computers date into the past by 30 years!

the computer will think it has 30 years till shutdown...


2 months after that everything fried and the computer was bricked beyond repair.

do my tip....make backups and clean sweep....

[DZA]

Sorted it all now, formated my pc, now just got to reinstall everthing

[nitz]

Sorted it all now, formated my pc, now just got to reinstall everthing

am coming to this stage if i like to say it or not
just my PF usage is on 650 MB wtf only got wmp and the net on

[bonquiqui]

go into Safe Mode, press start, run, write in MSCONFIG

go to startup and disable anything that looks fishy, while you're doing this go on the internet and write in the name of the startup services in the list, it will tell you what it is most time and whether its safe to disable or not.

Also I recommend running a boot up Virus scan, just set your Antivirus to scan on the next bootup, that way it can delete (most) infections before they start running.

[DZA]

go into Safe Mode, press start, run, write in MSCONFIG

go to startup and disable anything that looks fishy, while you're doing this go on the internet and write in the name of the startup services in the list, it will tell you what it is most time and whether its safe to disable or not.

Also I recommend running a boot up Virus scan, just set your Antivirus to scan on the next bootup, that way it can delete (most) infections before they start running.

Ive already sorted it matey, thanks for the help tho

[dubmonkey]

dude u have a Worm32 virus,
u need to disconnect from the net ASAP,

1. Click Start, Run and then type: shutdown -a

This prevents the system from automatically restarting long enough
for you to download and install the Microsoft security update.

2. Click OK.
3. If the "shutdown -a" command fails to keep the computer from
restarting, use the following steps:

a. Click Start, Run, and then type: services.msc

A Services window appears.

b. Click OK.
c. Double-click Remote Procedure Call (RPC) and select the
Recovery tab. Be careful to not use the Remote Procedure Call
(RPC) Locator item.
d. Set the First Failure, Second Failure, and Subsequent Failures
items to Take No Action.
e. Click OK to apply the settings.

4. Install the latest critical updates using Windows Update. For more
information, go to the following Web sites:

* Microsoft's Security Bulletin: MS03-0266:

http://tinyurl.com/is2b

-or-

http://www.microsoft.com/downloads/deta ... c5b6-44ac-
9532-3de40f69c074&displaylang=en


5. Remove the worm using your antivirus software. Do this by
attaining the latest virus definitions and then performing a scan.
For more detailed information go to the following Web sites:

* McAfee's VirusScan Web page on the W32/Lovsan.worm virus:

http://us.mcafee.com/virusInfo/default. ... s_k=100547

* Symantec's Norton AntiVirus Web page on the 32.Blaster.Worm
virus.

http://securityresponse.symantec.com/av ... r.worm.htm
l

NOTE: Clicking the links may give an error indicating it is
invalid. If this occurs, copy the portion of the address
on the second line and paste it at the end of the address
showing in your browser.

If all went well, the computer is now clean and protected. If
these steps did not resolve the problem, contact Microsoft and your
anti-virus software vendor for additional assistance.


6. If you used the "services.msc" command (as explained above in
Step 3) to prevent your computer from restarting, restore your RPC
recovery settings to their original state as follows:

a. Click Start, Run, and then type: services.msc
b. Click OK.
c. Double-click Remote Procedure Call (RPC) and select the
Recovery tab. Be careful to not use the Remote Procedure Call
(RPC) Locator item.
d. Set the First Failure, Second Failure, and Subsequent Failures
items to Restart the Computer.
e. Click OK to apply the settings.

Good Luck!

[DZA]

Wish i had known that the other day