Help with frustrating Virus needed

[glenmac]

I've picked up a virus that I can't find and was wondering if any of you have seen it before. What this thing is doing is making it impossible to view folders on my machine. When I open a folder it is blank including the mycomputer folder. At the bottom of the window it says how many objects are in the folder and how much space it is using but nothing is visible in the window. When I try to close an open folder it won't close either. I have to go to task manager to close it. After I get it closed my system runs normally again. While a folder is open it's using 100% of my CPU as viewed in task manager.
I've tried changing the view of folders when I have one open and when I change it to windows classic from alow web view, I can again see the files but I can't shut down the dialogue box or do anything in the folder. I shut down explorer.exe in TM and then try to look at the folders again and it won't open them.
Exporer.exe is the file that's corupted I believe, As when I shut it down through task manager all is good. I've run Norton ,AVG and PCcilin virus checkers and they all give me a clean bill of health. I'm running Windows 2000 server. All help would be greatly appreciated.

Glen

http://www.lantzvillecomputers.ca

 

[viol8ion]

Doesn't sound like a virus.

First, delete all temp files "disk cleanup", do a scan disk, defrage, etc... all general maintenance stuff that you should do periodically anyway. Then after rebooting, do an install of Windows, and select "repair" when given the option.

When in doubt, deny all terms and defnitions.

http://www.wuli.com

 

[glenmac]

Thanks for the post but it turned out that I finally couldn't boot to the server so I had to load a ghosted image. Still don't know what it was that wrecked my OS but it's a bad one. BTW I think I got it from a site called

http://www.trinsic.com.

So please beware of this site. If it's not their fault I do appologize but after visiting the site all the bad stuff started happening.

Glen

http://www.lantzvillecomputers.ca

 

[Willy2782]

Have you install terminal services on this computer if yes try unistalling

 

[glenmac]

Tried that too. Now I get dos windows popping up all the time with a message "the requested resource can't be accessed" and in task manager explorer.exe is taking 100% of my CPU. Ran netstat and there's a ton of hits constantly on my machine. I think it has to do with an IRC issue.

Glen

http://www.lantzvillecomputers.ca

 

[viol8ion]

On

http://www.wuli.com/free.shtml

I have links to some resources, mostly free. If you haven't done this already, download, install and run HiJackThis! If you have questions about the log, post it here.

CWShredder is another good free app, if you have been hijacked.



When in doubt, deny all terms and defnitions.

http://www.wuli.com

 

[glenmac]

Have you ever heard of backdoor.irc.0sit.110 and Win32HLLW.agobot ? I think these may be my problem.

Glen

http://www.lantzvillecomputers.ca

 

[ipl001]

Hi glenmarc, viol8ion, Willy2782, hi everybody,

I was just thinking of Agobot (aka Gaobot) when reading the posts above!

- removal tool by Symantec ->

http://securityresponse.symantec.com/avcenter/FxGaobot.exe

- Agobot description by Trend Micro ->

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.BB

- a general "AntiMalware Fight" page from my web site ->

http://gerard.melone.free.fr/IT/IT-AV0.html

Don't forget to run Microsoft patches:
- Microsoft Security Bulletin MS03-026 ->

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

- Microsoft Security Bulletin MS03-001 ->

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-001.asp

- Microsoft Security Bulletin MS03-007 ->

http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-007.asp

HTH


Have a good day,

Gérard from Paris, France