Computing.Net > Forums > Security and Virus > worm_assarm.a or is it?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

worm_assarm.a or is it?

Reply to Message Icon

Name: drake
Date: June 2, 2003 at 08:58:07 Pacific
OS: xp pro
CPU/Ram: 2.53 ghz 1.25 gig 2700 dd
Comment:

noticed my norton wasnt a running process so went to dig a little deaper

no manuall scans using trend or norton products found anything so whent to online scan via trends site

imediatly found

worm_assarm.a but could not clean it

so checked auto clean

same problem

deleted all temp and online temp files and tried again

nope

flushed my ram of everyting i could and all running process's that arnt system critical

same bit


the sluggish response and cpu utilazation tell me something is up
but i dont think its assarm
or why couldnt it clean it and why do none of the tell tale signs show

tried a search (empty)
organized by modified to see what changes have occured nothing stood out

startup log is clean of anything as well that shouldnt be there

any one know of a new stealth virus that mimics the appearence of assarm.a

because nothing about this even remotely resembles what ive read or seen about assarm

none of the servhost or win.ini crud or registry stuff thats typical of assarm

but i definatly have activity and a port scan show a lot of http port activity ( im at work or id give more specs sorry)

safe mode didnt help

reinstalling norton didnt help in fact it auto disabled a clean install of
1. norton
2. trend
3. sophos

what ever it is its got me spooked worse than klez ever did if no one can help i'll probably secure erase the drive 32 zeros

but new machine just and i mean just got it configed way i wanted so any help deaply appreciated its isolated right now off my home netwrk and powered down to stop propagation but i was thingking of cloning and running emulated to test suggestions

thanks in advance




Sponsored Link
Ads by Google

Response Number 1
Name: wawadave
Date: June 2, 2003 at 09:06:20 Pacific
Reply:

hello
try these scans
free trojin scan
http://www.trojanscan.com/trojanscan/scanner.htm
panda scan
http://www.pandasoftware.es/activescan/
d/l mcafee,s stinger
http://vil.nai.com/vil/stinger/
test my sheilds grc
https://nanoprobe.grc.com/x/ne.dll?bh0bkyd2
the klez was fameus for disableing av and stopping it from installing.
you may have the klez by the sound of it allso check out removel tool for sobig it,s up to klez like tricks and more.


0

Response Number 2
Name: drake
Date: June 2, 2003 at 10:05:33 Pacific
Reply:

thanks for the speedy reply ill give it a try on those scanners and sobig didnt thing of it
hope one of the other scanners is more successful

saw another post from the 1st with apparently same prob and no solution

yikes hope i have more luck

thanks again


0

Response Number 3
Name: drake
Date: June 2, 2003 at 16:26:37 Pacific
Reply:

memory resident

if the scan is only system it allows any scanner try to scan memory is shut down????



0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


Sobig.C worm removal from... pushy app recognition



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: worm_assarm.a or is it?

start-up page virus....is it a virus?? www.computing.net/answers/security/startup-page-virusis-it-a-virus/138.html

is it a spyware problem? www.computing.net/answers/security/is-it-a-spyware-problem/26497.html

Backdoor.sdbot - is it there? www.computing.net/answers/security/backdoorsdbot-is-it-there/3775.html