Wednesday, June 02, 2004

Same as usual, got up, went to work.

I worked all day, and left about 6pm.

I went to my mates place, went in and fixed up his pc.

It had welchia virus on it. I installed avast, and rebooted, but the scan went through and found nothing.

I managed to dialup, and download the updates before the machine became unusably slow, rebooted, and then it was found.

The machine was a fair bit better after that.

I put kerio personal firewall on to stop the nonsense (bloody net send messages popping up) and found that there was a process "atiphexx" running, pumping data out.

Strange. I googled around, and found it's "gaobot" or something, I had to remove it manually.

When I tried to get information on the virus, ie kept saying the pages was unavailable, then I noticed it was trying to connect to 127.0.0.1. aha.. I opened up the hosts file, yep, a stack of antivirus websites listed in here to stop you from visiting them.

I don't know why avast didn't find it, but anyway, the machine is clean, firewalled, and should be right now.

I went and got some dinner, came home, had dinner, did a bit more tivo archiving, and went to bed.

0 Comments:

Post a Comment

<< Home