Computing.Net > Forums > Windows 2000 > I got Hacked GOOD!!!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

I got Hacked GOOD!!!

Reply to Message Icon

Name: pardeep
Date: January 2, 2003 at 13:13:18 Pacific
OS: Windows 2000
CPU/Ram: 1.7Ghz/512 DDR
Comment:

Well just the other day i was on kazaa downloading some music and it starts to act all funny(eg."Kazaa.exe has will shutdown and error log will be made") and I tried to use it several times and it kept doing this. After i scan for viruses with avg 6.0 and found several viruses(eg.C:\Inetpub\scrips\httpodbc.dll is infected with Backdoor.IISCrack.dll
C:\recycled\_\com1\_tmp\svhost.exe is infected with Backdoor.Trojan
C:\WINNT\system32\upload.exe is infected with Backdoor.Sdbot
C:\WINNT\system32\svhost.exe is infected with Backdoor.Trojan
C:\WINNT\system32\SMNT.exe is infected with Trojan Horse Irc/Backdoor.flood
And also Trojan horse downloader.small, and I-Worm/yaha.k)
I can't open any of my .exe files except internet explorer from the desktop and everything esle has to be opened by using a file that uses the program. I can't go into Regedit.exe either to clean it up. What can i do besides getting a firewall,anti-virus, and anti-trojan. Reformatting is what im going for but im curious to know if any files(eg. documents, music, pictures and ect...) i backup now will cause problems once i put them on after a clean install. Sorry if something like this ha been posted. Hope some one can reply quickly. Thanks!



Sponsored Link
Ads by Google

Response Number 1
Name: ShutMeUpOrDown
Date: January 2, 2003 at 13:22:04 Pacific
Reply:

"anti-virus, and anti-trojan" is what you should get/use to rid yourself of the infection/s.

Backing up data or app setup's might carry an infected file back into the reinstall.

Try posting this in the computing.net security and virus forum. While you wait for a response do an online virus scan and download a trojan remover from pcflank.com.


0

Response Number 2
Name: jimmyk
Date: January 2, 2003 at 13:44:27 Pacific
Reply:

it is good that you got hacked


0

Response Number 3
Name: Craig
Date: January 2, 2003 at 15:14:28 Pacific
Reply:

do you still have this on your computer or have you cleaned up? can you still not access any exe files?


0

Response Number 4
Name: pardeep
Date: January 2, 2003 at 20:40:08 Pacific
Reply:

No i still can't acces them and why is it good that i got hacked?


0

Response Number 5
Name: Tim Patton
Date: January 2, 2003 at 21:25:57 Pacific
Reply:

Here, go to the following like, and follow all of the instructions to clean YAHA.K off your computer...if you follow the clean instructions, COMPLETELY, you'll be able to open .exe files again...

http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.k@mm.html

An even better way, rather than manually cleaning up the virus, is to download the "removal tool" from

http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.removal.tool.html

Either way, it should get you up and going...

You can't open .exe files, because the virus modifies the following registry key

HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command

The instructions on the link above, and the removal tool, change this registry entry back to the default

"%1" %*
(In other words, the following characters: quote-percent-one-quote-space-percent-asterisk)


0

Related Posts

See More



Response Number 6
Name: pardeep
Date: January 2, 2003 at 21:36:03 Pacific
Reply:

I know thats what i have to do but i can't open the registry and thats my problem also whenever my computer starts up i get the box that says "starting up windows..." then i get preparing network connections which always pop up but know im getting applying computer settings... and this is probably cuasing my problems and is there any other way to get into the registry?


0

Response Number 7
Name: Seawatch
Date: January 3, 2003 at 08:32:12 Pacific
Reply:

Rename your regedit program from .exe to com and it should work.

Larry


0

Response Number 8
Name: pardeep
Date: January 3, 2003 at 19:59:58 Pacific
Reply:

That did work Thnx.


0

Sponsored Link
Ads by Google
Reply to Message Icon

ems memory exclusion w2k Access denied



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: I got Hacked GOOD!!!

why and i got hack... www.computing.net/answers/windows-2000/why-and-i-got-hack/41499.html

win2000 adv serv hacked? www.computing.net/answers/windows-2000/win2000-adv-serv-hacked/35063.html

I there a good program to rip song from CD www.computing.net/answers/windows-2000/i-there-a-good-program-to-rip-song-from-cd/2212.html