my system is infected

  • Thread starter Thread starter surfunbear
  • Start date Start date
S

surfunbear

I had win antivirus (malware) installed by mistake instead of norton
for more than a month before I realized it. I know have norton but my
system seems really
messed up and norton seems to not be doing much. This is what netstat
-a shows with not alot running.
what can I do. Please help my computer is dying.

Active Connections

Proto Local Address Foreign Address State
TCP laurence-l497iy:epmap laurence-l497iy:0 LISTENING
TCP laurence-l497iy:microsoft-ds laurence-l497iy:0 LISTENING
TCP laurence-l497iy:1026 laurence-l497iy:0 LISTENING
TCP laurence-l497iy:1029 laurence-l497iy:0 LISTENING
TCP laurence-l497iy:1025 laurence-l497iy:0 LISTENING
TCP laurence-l497iy:1035 laurence-l497iy:0 LISTENING
TCP laurence-l497iy:netbios-ssn laurence-l497iy:0 LISTENING
TCP laurence-l497iy:netbios-ssn laurence-l497iy:0 LISTENING
UDP laurence-l497iy:epmap *:*
UDP laurence-l497iy:microsoft-ds *:*
UDP laurence-l497iy:1027 *:*
UDP laurence-l497iy:1030 *:*
UDP laurence-l497iy:netbios-ns *:*
UDP laurence-l497iy:netbios-dgm *:*
UDP laurence-l497iy:isakmp *:*
UDP laurence-l497iy:netbios-ns *:*
UDP laurence-l497iy:netbios-dgm *:*
UDP laurence-l497iy:isakmp *:*
 
Netstat shows port use on a computer and malware may or may not use the
network. Something like Autoruns and Process Explorer free from SysInternals
would better show if any rouge processes are running or configured to run at
startup/logon. What I would suggest that you try is to boot into Safe Mode
and run your antivirus and spyware programs in that mode using the latest
definitions for any that you use downloaded from the vendors website. I
would also try something like the free Sysclean from Trend Micro downloading
Sysclean and the latest pattern file to a common folder to run from though
you need to unzip the pattern file. If you do not currently have a spyware
program try using the free for personal user AdAware SE.

Even after attempting repairs with various programs there is no guarantee
that your computer will be clean or run correctly and you may ultimately
need to do a clean install of the operating system after backing up your
data/media files and user profile first and if you have any EFS encrypted
files be sure to decrypt them before installing the operating system. ---
Steve

http://www.sysinternals.com/Utilities/ProcessExplorer.html --- Process
Explorer and link to SysInternals
http://www.trendmicro.com/download/dcs.asp --- Sysclean
http://www.trendmicro.com/download/pattern.asp -- Trend Micro pattern files
http://www.lavasoft.de/software/adaware/ -- AdAware SE
http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx
--- Protect Your PC tips and links on how to deal with malware and spyware
from Microsoft.
 
Back
Top