Computing.Net > Forums > Security and Virus > modem hang-ups following virus

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

modem hang-ups following virus

Reply to Message Icon

Name: dsutct
Date: July 21, 2003 at 21:44:00 Pacific
OS: WinNT SP6
CPU/Ram: 300 MHz PII/128 MHz
Comment:

I have a Dell Dimension XPS 300 with a USR Sportster 56000 upgraded to V.90. In the last couple of month, my dial-up connection to my ISP gets disconnected about every 5 minutes. My phone line is fine (I have another computer using the same line). It seems that another process on my PC may be disonnectiing the modem (the modem log file says:

Hanging up the modem.
Hardware hangup by lowering DTR.

I supect that a virus has corrupted some of my system files. I had several attacks by W32.HLLW.Lovgate.G@mm and W32.Valla.2048. For a while, I was getting multiple (up to 200) instances of rasautou.exe launching in my task manager. I was somehow able to get rid of this problem, but I still have the constant modem hang-ups. I think I need to refresh my system files, but I don't know how to do this with NT. Any advice would be appreciated.



Sponsored Link
Ads by Google

Response Number 1
Name: Qginie
Date: July 21, 2003 at 22:42:22 Pacific
Reply:

Hi,

You might be facing these kind of problems
as the virus might be still present in your system.

W32.HLLW.Lovgate.G@mm is a minor variant of W32.HLLW.Lovgate.C@mm. This worm contains mass-mailing and backdoor functionalities
W32.HLLW.Lovgate.G@mm also attempts to copy itself to all the computers on a local network, and then attempts to infect these computers. The worm also has a backdoor Trojan capability.

Please visit the link below for a detailed description of the virus and removal of the same:

http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.hllw.lovgate.g@mm.html

Also visit the link below for detailed description and removal of W32.Valla.2048:

http://www.symantec.ca/avcenter/venc/data/pf/w32.valla.2048.html


0

Response Number 2
Name: dsutct
Date: July 21, 2003 at 22:55:57 Pacific
Reply:

I've already visited Symantec and used their Lovgate removal tools. Norton Antivirus was used to remove the Valla virus. However, I'm not sure that removing the virus restores any system files that might have been infected (e.g to setup the backdoor connection to the internet).


0

Response Number 3
Name: Marco
Date: July 30, 2003 at 02:56:03 Pacific
Reply:

Hi!
To restore system files on NT (i've win 2000 PRO) you have to run from dos prompt "sfc /scannow".
Check on google anyway for this file...i'm not really sure of this.
During scan of sfc, keep running norton auto protect. To me, when i runned sfc, auto protect show me several files infected that i didn't know.
I hope this could be usefull for you.
Good luck, Marco


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


A remote Win32 system is ... Hard drive problem



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: modem hang-ups following virus

Computer Hang-up - virus? www.computing.net/answers/security/computer-hangup-virus/8694.html

Spybot hanging up www.computing.net/answers/security/spybot-hanging-up/5263.html

Cannot start-up XP - virus or not? www.computing.net/answers/security/cannot-startup-xp-virus-or-not/19253.html