Miscellaneous > The Lounge
Windows is hacking me non-stop! Very weird...
Lennon:
first one was modified on 23/08/2001
second (in wins directory) was modified (probably created too) on 28/09/2003
the first one is 5KB
second one is 10KB
Lennon:
in this wins directory, there is only that other file svchost.exe which is also sending stuff but only to that signle IP i mentioned.
dllhost seems to be searching for an IP similar to mine (first two digits) and it was just sending to IPs starting with 202.98. (i think those were the numbers)
flap:
http://www.pchell.com/virus/welchia.shtml
mobrien_12:
quote:Originally posted by flap:
http://www.pchell.com/virus/welchia.shtml
--- End quote ---
Yep.
Lennon, it looks like in the time it took you to download a firewall, you were infected with a worm.
The very first thing you should download is all the security patches for any OS install.
Lennon:
Ah yes those viruses. Windoze is full of them. I just cant grasp how it got there, but hey. Maybe it was from an old download of Kazaa Lite which I installed or an OpenOffice windows version(it was on a CD). Kazaa is the prime suspect i suppose?
Anyway, thanks a lot, i removed it and it seems fine now. I did it without system restore so i hope the worm wont resurect...
What do you think were those 40 megs of uploaded data? Just searching for victims or were they downloading my mp3s or something ?
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version